Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bc3d36e2-3d5e-379b-a06b-ab6d75bd3643.roa
File:                     bc3d36e2-3d5e-379b-a06b-ab6d75bd3643.roa (raw, json)
Hash identifier:          +aCcVRRXgr9eq8cXfnLfLoZSosrvmEO8rV5OHkjuNKo=
Subject key identifier:   C2:E4:0C:A4:F8:D4:52:3D:53:EC:D5:FD:E2:48:D8:15:F3:02:9F:02
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584EA7885FA8ED8B9EEF6E3F5400
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bc3d36e2-3d5e-379b-a06b-ab6d75bd3643.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     56683
IP address blocks:        45.40.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:5f:a8:ed:8b:9e:ef:6e:3f:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=cdbc94f2-92fc-4d36-8b77-c4cba7b2124f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1c:3c:b2:e0:2b:56:5e:19:4f:94:23:d3:ab:
                    97:13:00:01:5d:f2:cb:7e:a8:e9:82:31:04:ee:1e:
                    76:06:2a:37:06:c5:fb:20:f9:5b:d2:a3:cc:c8:75:
                    6b:6e:94:f1:4b:17:27:13:05:a1:59:d9:21:29:fb:
                    6e:9f:2e:53:d9:9b:0d:6d:8b:b7:da:90:3f:2d:31:
                    a4:99:0f:fd:c6:11:5e:7a:7b:ad:2a:2a:ba:fc:55:
                    61:5a:12:b1:8f:28:05:a2:36:25:d1:0d:19:01:24:
                    55:91:04:aa:2f:e4:65:1f:ab:55:ae:83:83:28:8f:
                    95:a1:5a:04:91:cd:c1:d4:0f:45:1d:d8:4c:c8:8e:
                    7c:6a:e5:16:49:42:bf:56:fa:e3:9d:05:50:c5:86:
                    1e:87:28:20:a0:43:56:19:39:8c:93:ae:b8:0d:38:
                    97:70:b2:bf:41:9e:f6:5c:80:35:c0:5d:49:d6:8e:
                    f2:10:a2:70:62:ee:99:f4:78:25:c8:fe:09:52:6d:
                    25:a7:b6:62:c4:eb:9a:1e:ea:c9:f3:fb:6c:08:c4:
                    07:9e:f1:93:6a:21:2f:10:38:9f:d8:21:65:b0:e2:
                    bd:08:26:a1:84:59:36:9e:b7:f6:d5:92:7b:19:9f:
                    61:f0:6a:b0:f1:58:61:5b:e4:ed:b4:fc:9c:b7:6e:
                    89:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E4:0C:A4:F8:D4:52:3D:53:EC:D5:FD:E2:48:D8:15:F3:02:9F:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bc3d36e2-3d5e-379b-a06b-ab6d75bd3643.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.40.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:91:be:e6:aa:b7:ad:c7:19:2b:8d:4d:d3:66:94:d3:31:18:
         13:40:ac:b5:57:b5:f2:cb:0d:c3:65:4e:c4:6c:d0:76:02:16:
         e0:e0:4b:ac:95:1d:c8:99:a4:2b:ee:92:f7:08:90:6c:ab:12:
         15:87:03:86:b8:6c:85:4e:d7:cc:50:cc:f1:9b:9a:b2:33:f2:
         b9:dc:9f:0b:a6:72:9f:c7:18:e0:fb:d6:50:90:66:fc:a0:43:
         9e:90:29:eb:21:0a:37:62:61:b0:12:f7:88:93:21:98:ad:e9:
         9a:cc:7b:b8:9f:a8:b3:48:b7:90:76:f1:55:c2:c0:d3:2d:29:
         1b:ed:30:1f:40:dd:e9:1a:07:10:8c:08:d5:7e:8b:13:6c:fe:
         33:33:0e:2a:b0:61:0d:6e:dd:c4:f2:09:29:6c:77:44:96:dc:
         e9:15:60:48:b6:f6:74:f8:ce:08:f5:c5:90:86:4c:18:1d:9e:
         94:77:05:93:b0:9e:16:4e:8b:18:80:91:9c:17:ba:2e:99:9f:
         43:f5:a8:3a:3a:aa:61:4c:01:6c:69:12:6a:ba:f4:8c:ef:26:
         44:3f:dd:c3:7d:38:de:52:2c:06:af:1c:c0:88:97:f1:b2:c6:
         5e:95:37:04:ac:a8:ac:ed:f9:cc:7e:71:8a:56:27:61:84:d9:
         87:62:b1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 18 11:53:30 2026 by rpki-client