Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/825158bb-6443-390b-9fb8-dff6e8c58030.roa
File:                     825158bb-6443-390b-9fb8-dff6e8c58030.roa (raw, json)
Hash identifier:          q0v+CrKb23MKrgN7sFFggTIirosfHCdTwKxtR2zdOyA=
Subject key identifier:   D2:FA:A7:BD:00:6B:91:EE:C6:EC:31:EA:2B:BB:0C:AE:F3:6B:58:24
Certificate issuer:       /CN=0c27bc55-b041-47cd-84eb-f3e9707acff1
Certificate serial:       010D0C9F4328584CAE5716AD27D5CF2ABCF11280
Authority key identifier: C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/825158bb-6443-390b-9fb8-dff6e8c58030.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     53828
IP address blocks:        45.43.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:57:16:ad:27:d5:cf:2a:bc:f1:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c27bc55-b041-47cd-84eb-f3e9707acff1
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=bb6d8134-ddb4-4132-85db-04da36970fc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:21:26:15:c8:83:32:7d:e1:d4:cc:6a:28:e9:
                    b3:5d:25:57:e8:67:a5:7e:76:30:0f:9e:0b:0b:dd:
                    d1:17:bd:e4:a4:e5:c8:e5:c8:74:71:11:bd:7f:55:
                    1f:ce:7e:3b:fe:da:67:c4:89:09:2b:15:5a:02:7c:
                    c4:a0:d8:0f:85:a4:71:d9:fe:42:22:47:cb:1e:bf:
                    28:fd:ac:5d:5e:b4:d4:37:6b:ea:55:bf:b9:35:f4:
                    fa:1e:42:b0:ae:d6:b8:74:dc:45:ae:cf:42:a8:5e:
                    88:80:cf:11:9f:e0:69:85:ae:a0:5b:c8:ac:32:ae:
                    97:d1:69:7d:2e:f4:fb:ed:e6:ee:0f:e1:c6:d1:59:
                    f7:88:c9:bc:a6:6d:55:1c:d3:fc:85:34:77:4d:63:
                    60:88:d4:54:3e:5a:eb:10:65:6f:0b:d1:ff:dd:f0:
                    a4:bb:41:04:26:69:56:a4:36:46:d7:d0:81:33:d4:
                    75:21:b6:ee:70:29:8a:45:59:b1:e5:70:26:a8:39:
                    1d:5e:d4:28:e3:fa:7a:6f:ed:7b:ed:31:1d:74:dc:
                    87:71:f5:9d:43:17:2a:60:d8:19:3d:25:f8:05:82:
                    c8:0e:b8:f0:fb:55:65:a2:85:76:bd:5f:95:60:95:
                    7e:b3:21:0b:55:b3:00:88:58:3a:45:dd:3f:11:85:
                    3f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:FA:A7:BD:00:6B:91:EE:C6:EC:31:EA:2B:BB:0C:AE:F3:6B:58:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/825158bb-6443-390b-9fb8-dff6e8c58030.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl

            X509v3 Authority Key Identifier:
                keyid:C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.43.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:76:77:17:21:bd:77:3d:6a:2b:c1:7e:0a:1c:b3:9f:3b:8e:
         3f:7d:a3:f0:ed:6f:68:48:45:c0:9b:03:59:08:74:43:2e:8a:
         9b:55:52:56:33:0d:3c:a6:66:26:78:72:50:8e:89:eb:e0:b2:
         db:b8:41:20:cb:8f:49:22:f3:e2:53:cc:a8:4f:66:0e:50:2e:
         f6:17:05:b0:5d:57:b6:b9:01:39:dc:9a:dc:75:67:f3:8e:84:
         83:2b:12:16:c2:e2:9d:21:f1:b3:c1:29:af:90:29:01:13:2f:
         3d:79:0d:9f:4c:62:a7:e5:d0:ab:0d:f8:da:eb:74:54:ee:08:
         95:78:3f:ba:b4:eb:b1:e8:f2:55:39:88:60:91:87:19:25:14:
         35:80:13:47:12:55:47:00:59:ee:98:09:f1:48:e5:3f:02:be:
         65:c0:03:ab:1d:64:90:d5:f8:3d:18:a1:5b:e4:cb:ea:a2:d4:
         00:69:93:22:2d:84:d4:55:e5:3a:fd:24:27:31:3c:9b:88:47:
         84:ee:1d:5b:47:dd:2c:1d:64:0e:4f:a9:0e:15:c0:db:e5:e4:
         8c:28:ee:eb:06:59:26:18:87:e5:c2:0e:6b:d7:53:64:d5:a2:
         23:01:33:3e:f9:f9:23:4f:ad:ad:37:45:d5:2d:ba:d8:7d:45:
         bf:50:5b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 18:32:00 2026 by rpki-client