Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/45232cc2-d5ff-3a30-881e-770a37fd9fac.roa
File:                     45232cc2-d5ff-3a30-881e-770a37fd9fac.roa (raw, json)
Hash identifier:          b5HSRDu/Cbs1W3D159tX2qwh4ENcG8HK19S/A1neef0=
Subject key identifier:   62:65:AC:48:22:29:0F:27:60:8A:CA:21:D3:ED:A5:FB:AE:F2:FF:67
Certificate issuer:       /CN=d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d
Certificate serial:       010D0C9F4328584E4559DD118BD8EF625E7CAE40
Authority key identifier: 6A:77:CB:BB:80:7D:AF:E0:C1:67:43:E2:B0:D6:B8:0B:A5:45:39:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/45232cc2-d5ff-3a30-881e-770a37fd9fac.roa
Signing time:             Tue 23 Jun 2026 21:00:12 +0000
ROA not before:           Tue 23 Jun 2026 21:00:12 +0000
ROA not after:            Mon 21 Sep 2026 21:00:12 +0000
asID:                     22302
IP address blocks:        96.43.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:45:59:dd:11:8b:d8:ef:62:5e:7c:ae:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d
        Validity
            Not Before: Jun 23 21:00:12 2026 GMT
            Not After : Sep 21 21:00:12 2026 GMT
        Subject: CN=518b626f-b577-46c9-9214-be673843eab9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:52:56:17:9d:10:68:6a:6b:43:be:b7:64:d6:
                    94:b0:e9:2e:31:91:13:05:70:b2:77:a1:71:e8:36:
                    43:fe:18:61:0c:38:8e:0c:8c:49:2c:8c:a8:59:86:
                    60:27:fe:70:6b:6c:6e:e2:20:3a:1d:7f:c7:3e:5f:
                    63:42:06:21:cb:a0:aa:dd:0a:90:30:2f:ac:e6:92:
                    48:99:ae:2c:83:b0:cb:52:cb:c1:d0:9e:e0:0e:99:
                    3c:15:f6:89:ad:5b:1d:4b:67:7d:52:0a:31:c1:7a:
                    47:98:92:69:26:4e:ce:14:ea:d6:7d:52:bd:65:42:
                    29:8b:51:f8:ca:ac:84:71:8f:18:cf:b1:26:a7:e0:
                    60:07:8b:d6:f7:8f:e7:73:c2:d0:62:6d:a0:e4:56:
                    b3:66:91:c6:d3:df:6d:7d:ed:b0:98:d1:d9:57:4b:
                    e4:d0:c7:10:26:6a:ec:32:b5:c5:da:ce:37:d0:5a:
                    78:9c:e8:6f:8c:6f:ae:cc:e1:42:3b:d2:43:63:24:
                    ea:7e:90:a2:70:7f:47:7c:72:63:0b:34:ac:52:36:
                    c0:c7:03:16:bb:67:5a:ac:30:b1:39:33:c7:27:9c:
                    f5:9a:ac:69:62:3e:3f:05:bd:81:8b:fb:c4:6c:4e:
                    ea:d0:b5:5f:04:bb:80:46:73:8f:dd:7c:84:e2:72:
                    7a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:65:AC:48:22:29:0F:27:60:8A:CA:21:D3:ED:A5:FB:AE:F2:FF:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/45232cc2-d5ff-3a30-881e-770a37fd9fac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:CB:BB:80:7D:AF:E0:C1:67:43:E2:B0:D6:B8:0B:A5:45:39:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.43.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:56:0e:79:fc:e9:95:ae:73:51:fc:99:c1:8c:0e:14:1b:67:
         b3:bf:3c:80:24:5a:10:17:32:eb:0b:4e:fd:d0:b6:3a:3d:3a:
         f6:05:8c:69:67:91:a1:5a:6d:85:dd:8b:cb:cd:55:e0:af:a5:
         f3:89:b0:bc:11:aa:12:0e:34:57:90:51:bb:20:58:ff:d8:fa:
         82:c9:da:38:4a:c0:d7:72:f7:14:67:96:01:ff:85:6e:5b:cf:
         23:5c:23:bd:35:de:cc:ed:cb:26:83:17:f4:82:b4:b0:b1:e0:
         a9:05:31:9e:4c:dc:39:9a:6d:6a:53:94:27:bd:14:a6:21:f5:
         3f:0d:b6:50:94:f2:66:26:26:2a:83:a9:eb:83:44:63:d1:aa:
         f1:85:66:30:82:6b:46:f9:4e:2f:c4:02:00:49:90:97:12:e2:
         6e:7c:04:3e:aa:3c:87:62:1c:0f:2a:8f:00:17:d2:23:9d:15:
         0b:8c:fe:f7:9f:56:be:a0:d1:94:b9:e8:e1:f1:bb:d6:59:6c:
         8c:29:79:ae:08:b8:7a:e8:f5:ca:cc:88:18:48:00:ca:06:69:
         48:b2:02:60:d5:fc:4b:a1:c6:ec:e0:40:99:9d:bc:a9:cf:34:
         d3:ae:95:76:8f:3f:47:53:80:27:56:43:b8:82:f2:09:6e:f4:
         ba:12:15:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 13:45:41 2026 by rpki-client