Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/04a38d32-5c2a-36ef-96c0-cf54abed5a73.roa
File:                     04a38d32-5c2a-36ef-96c0-cf54abed5a73.roa (raw, json)
Hash identifier:          WJLbVWD4LuXulqg7xWbBO7JFIswGQfZPJ2TlrlrGB7s=
Subject key identifier:   80:A7:31:12:2B:1C:12:8E:E1:8C:3B:05:B6:BD:23:C9:82:A2:27:42
Certificate issuer:       /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial:       010D0C9F4328584EA79B3BFB07B1AE2649CF8100
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/04a38d32-5c2a-36ef-96c0-cf54abed5a73.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     31715
IP address blocks:        209.145.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:3b:fb:07:b1:ae:26:49:cf:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ebe0b542-5e62-4911-8c19-d746de877716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a0:ee:f0:1f:a3:39:73:9f:d2:5a:c4:16:13:
                    9a:f5:df:05:a4:1b:51:23:3e:af:fb:9c:52:c8:98:
                    80:d9:b5:46:44:94:eb:6d:ac:49:2c:d2:3d:e0:4d:
                    d2:3f:61:e4:b0:3f:ac:70:7c:8e:2a:cd:68:21:63:
                    07:60:49:3d:41:06:49:a7:85:80:11:b0:14:11:b2:
                    86:29:c6:0b:43:ad:3d:be:bf:3b:96:ff:21:15:41:
                    b3:11:cb:a5:76:1d:b6:38:58:9e:52:7a:86:67:66:
                    7c:d7:2a:9a:75:31:30:c2:fb:f6:8d:c9:9e:2f:b6:
                    3f:37:71:81:26:58:19:f8:4e:73:e3:c6:a7:a4:41:
                    d9:a9:23:6d:39:54:31:01:77:f4:71:6f:3e:a7:e5:
                    55:e8:94:ba:aa:90:07:ea:4f:79:f5:5d:e8:26:fa:
                    39:e3:98:f5:6d:13:66:f2:e0:e3:90:16:d6:7e:1c:
                    5d:59:48:e5:cd:74:b2:4b:98:6d:c3:f3:48:50:75:
                    a1:62:84:5e:1a:14:85:de:1f:13:b7:a8:5d:68:b4:
                    f1:69:30:2a:01:78:51:db:96:5c:82:b1:9f:62:f1:
                    30:45:40:82:e6:f9:53:18:08:3f:43:3d:a4:5b:5a:
                    79:14:1d:23:dd:74:a2:f5:c3:8f:d1:a5:d2:75:48:
                    2c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:A7:31:12:2B:1C:12:8E:E1:8C:3B:05:B6:BD:23:C9:82:A2:27:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/04a38d32-5c2a-36ef-96c0-cf54abed5a73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl

            X509v3 Authority Key Identifier:
                keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.145.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:dc:77:b1:b9:76:03:fa:bb:0b:53:84:46:9c:a5:c6:7f:38:
         84:2b:94:4b:89:ca:7f:d7:e1:6c:58:b9:9a:ff:43:fe:c8:76:
         9d:1f:07:54:97:51:fe:e2:c1:05:30:cb:43:c6:24:f0:7a:56:
         73:8a:22:ff:eb:6a:72:fc:f3:38:a0:71:9a:3a:da:e7:2c:53:
         ad:8c:7d:e8:90:f4:ad:6d:3c:0c:9f:d0:a6:63:aa:30:1b:91:
         9c:94:84:26:0e:c0:1b:a3:6b:91:eb:ac:1c:50:cb:03:6e:be:
         fa:b0:49:90:48:93:ea:c2:b6:5b:10:e3:dc:95:56:69:2b:30:
         25:a1:51:70:74:76:c8:1a:4c:ed:4b:f5:fb:1f:99:44:ce:8d:
         e6:11:96:60:b0:5c:2b:3d:4f:4e:f7:10:9e:1d:d7:47:df:3f:
         80:94:4e:52:24:26:19:85:8b:94:33:57:0a:51:df:18:ff:9d:
         d5:94:eb:12:7e:e0:13:b4:68:41:5c:9d:2d:48:8f:97:42:63:
         27:c4:c5:64:2b:d6:29:f8:ad:ae:4f:26:82:55:c9:9c:e3:c3:
         21:70:50:b2:6d:f5:0a:ca:48:2f:df:2f:af:88:aa:13:83:6b:
         ec:63:8c:c2:5b:3d:4a:8b:fd:65:11:ab:bc:2d:1f:98:07:3b:
         cc:66:41:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 10:30:28 2026 by rpki-client