Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/408a0c19-0e7d-3cf4-9b9a-4d7208e232c2.roa
File:                     408a0c19-0e7d-3cf4-9b9a-4d7208e232c2.roa (raw, json)
Hash identifier:          FftCOBWds6a6d6NjPqXmkl9IUq6+kPEOcsJ93jql9fY=
Subject key identifier:   DB:72:28:2A:C9:3E:20:0A:AB:C7:5E:21:E9:44:69:B8:20:43:AC:D9
Certificate issuer:       /CN=9f07c9e2-648c-4ca2-8784-02ac3c144538
Certificate serial:       010D0C9F4328584F6C5838E9416ACF7798C38540
Authority key identifier: 64:75:EB:7C:25:7B:70:FF:79:31:BF:57:7E:7C:BA:C6:74:D1:CE:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/408a0c19-0e7d-3cf4-9b9a-4d7208e232c2.roa
Signing time:             Wed 07 Oct 2026 13:00:13 +0000
ROA not before:           Wed 07 Oct 2026 13:00:13 +0000
ROA not after:            Tue 05 Jan 2027 14:00:13 +0000
asID:                     53356
IP address blocks:        45.59.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/9f07c9e2-648c-4ca2-8784-02ac3c144538.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/9f07c9e2-648c-4ca2-8784-02ac3c144538.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6c:58:38:e9:41:6a:cf:77:98:c3:85:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f07c9e2-648c-4ca2-8784-02ac3c144538
        Validity
            Not Before: Oct  7 13:00:13 2026 GMT
            Not After : Jan  5 14:00:13 2027 GMT
        Subject: CN=c4eef47f-3dab-430f-aa71-b3856e2fd109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9d:eb:19:b7:90:72:ff:9d:cb:dc:e6:bf:87:
                    39:57:85:62:8d:57:56:e4:95:10:cb:f2:2e:59:58:
                    6e:9d:ef:e2:f9:4c:2c:8d:ac:1a:b8:30:93:29:45:
                    bd:f1:e4:c4:66:20:dd:bc:f5:b8:76:5c:63:12:1b:
                    77:86:98:4b:e6:28:97:11:e1:60:0e:01:f7:73:d5:
                    f2:66:95:0f:19:97:28:e0:ad:67:9d:5a:66:91:c2:
                    d2:5a:ac:4f:87:4b:66:a7:2a:1d:b5:25:26:a6:70:
                    a2:c2:c1:3b:f2:1f:fb:ef:f4:71:ca:51:2c:10:b4:
                    9b:73:4b:c2:f3:b9:a7:b9:23:83:fb:ad:50:b6:f2:
                    7c:6b:9e:90:de:d6:f7:46:fd:47:8d:9f:c0:83:4b:
                    3d:75:81:e8:f0:a7:d6:c8:c1:aa:b5:12:7b:e1:8b:
                    3d:f3:c3:c0:3f:41:ef:45:ca:b7:04:20:0d:12:f6:
                    3f:95:bb:ca:ce:3e:a1:9f:fa:26:2f:63:6b:23:bd:
                    b7:14:20:a3:81:b7:53:d1:fc:60:e3:3e:03:48:a3:
                    39:53:be:c0:23:81:63:05:66:2b:83:1a:f9:73:c1:
                    27:c2:f5:7e:4c:da:c9:01:8c:9f:ea:05:bc:1f:63:
                    23:4b:9d:b5:f7:aa:18:29:85:a9:15:f6:5d:60:d2:
                    06:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:72:28:2A:C9:3E:20:0A:AB:C7:5E:21:E9:44:69:B8:20:43:AC:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/408a0c19-0e7d-3cf4-9b9a-4d7208e232c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/9f07c9e2-648c-4ca2-8784-02ac3c144538.crl

            X509v3 Authority Key Identifier:
                keyid:64:75:EB:7C:25:7B:70:FF:79:31:BF:57:7E:7C:BA:C6:74:D1:CE:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:c0:9a:f6:c1:17:1f:9a:a3:0e:2e:c0:89:d7:4f:07:f8:cd:
         4c:d5:72:41:05:c4:4b:9a:b7:6e:28:c1:7f:df:03:38:56:e6:
         63:ef:76:bb:a8:24:2b:bb:eb:79:6a:18:66:61:fe:4f:88:1d:
         3b:fd:8d:de:7b:74:14:bb:67:12:19:3f:e3:07:41:ec:3a:f0:
         91:0f:1d:10:79:43:f8:49:0c:f6:41:4d:b7:76:8f:3a:b4:7f:
         20:c6:4b:9e:3e:84:ab:a3:8f:f2:08:84:b1:af:14:7b:9e:29:
         35:d3:31:6f:39:8a:6b:95:b1:9c:53:cd:59:c3:de:b8:7d:15:
         f2:fa:6e:b0:a7:33:d0:56:64:ed:90:a7:f2:05:e0:c2:87:fc:
         49:a0:2f:f1:59:71:f6:02:71:a8:9f:e6:18:8f:f8:f3:b0:01:
         5d:1b:d8:e1:65:ff:78:2b:f8:bb:8f:63:33:38:68:49:33:4f:
         37:75:aa:32:40:87:9f:bf:ec:24:45:d9:3e:bf:62:5f:2e:40:
         af:45:be:fc:f3:3f:d7:c4:5b:3a:e0:d0:3a:b4:8a:2a:d2:73:
         30:14:6f:2d:6a:ca:b5:a2:9e:59:6b:ae:4f:ba:1a:0c:3c:a1:
         4e:60:d9:b8:e8:22:52:c8:ec:f3:87:0f:6a:cd:e9:62:08:54:
         0f:32:2d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 11:00:43 2026 by rpki-client