Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/244a57b6-3fd6-3f80-9aed-8a8c5a2bf030.roa
File:                     244a57b6-3fd6-3f80-9aed-8a8c5a2bf030.roa (raw, json)
Hash identifier:          7EtQZ2flcCPmOAywgRsHYf4BE4BeVD4ChU/OjaLMqMM=
Subject key identifier:   75:08:21:03:38:88:9F:AA:4E:AA:2E:D2:8C:03:0C:DF:16:19:B7:BF
Certificate issuer:       /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial:       010D0C9F4328584F612D5AF2E30B337C59216600
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/244a57b6-3fd6-3f80-9aed-8a8c5a2bf030.roa
Signing time:             Sat 03 Oct 2026 13:00:13 +0000
ROA not before:           Sat 03 Oct 2026 13:00:13 +0000
ROA not after:            Fri 01 Jan 2027 14:00:13 +0000
asID:                     54252
IP address blocks:        141.140.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:61:2d:5a:f2:e3:0b:33:7c:59:21:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
        Validity
            Not Before: Oct  3 13:00:13 2026 GMT
            Not After : Jan  1 14:00:13 2027 GMT
        Subject: CN=f20c5218-7d96-404f-a711-b62b7014b1db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fc:59:44:f9:3a:d6:c5:fe:67:49:fd:f8:59:
                    78:85:28:d9:6e:54:64:f8:75:18:55:d3:cf:25:2a:
                    e4:c6:9f:e9:3c:c0:44:5a:6c:7a:3c:1f:36:e1:cd:
                    03:04:f4:1a:3f:bc:57:68:1c:35:21:18:c3:3e:5a:
                    96:e4:29:ee:6e:4d:4f:ec:4c:d4:92:36:ab:80:e2:
                    16:de:23:e6:c5:06:5b:b4:cd:88:21:60:5f:c5:07:
                    5e:9f:df:0a:c4:52:61:2b:7f:9b:87:24:90:29:77:
                    dc:11:79:b6:78:5f:3c:dd:19:4f:42:dc:62:7a:ec:
                    c7:98:df:55:46:b3:2e:84:74:ec:fb:93:ed:55:32:
                    82:9d:59:75:01:f6:d5:ca:c4:b7:40:dc:a6:39:33:
                    d7:82:2e:85:35:d3:97:de:6f:0e:ec:d1:2d:ff:dc:
                    3a:09:ac:30:44:ed:ea:cc:2b:6b:08:bf:63:a1:79:
                    09:9d:ed:05:3a:65:92:a8:03:1a:95:ba:b4:7e:81:
                    be:de:c7:19:a7:40:bd:c9:d5:25:a6:25:98:0f:d0:
                    0d:70:69:87:54:f1:d4:62:e9:9e:c6:a3:39:b2:5d:
                    d7:bc:c5:ef:6c:d8:bd:74:ef:b7:41:68:77:d4:9e:
                    9a:f4:79:53:de:ac:5d:11:dc:ad:c8:30:2a:c7:c2:
                    73:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:08:21:03:38:88:9F:AA:4E:AA:2E:D2:8C:03:0C:DF:16:19:B7:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/244a57b6-3fd6-3f80-9aed-8a8c5a2bf030.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl

            X509v3 Authority Key Identifier:
                keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.140.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:3d:ca:58:3b:88:98:d1:42:70:c5:04:a6:fa:48:98:83:aa:
         25:9a:60:ef:ab:14:a8:50:84:c7:4b:a5:bc:1b:f6:c7:83:5a:
         2a:21:43:3f:a9:99:22:c2:3d:99:1f:c5:b5:d1:69:f1:69:86:
         b2:f6:6a:fd:b4:74:cc:98:7f:8f:0f:f2:f9:2c:1a:9f:11:5b:
         11:3c:07:c8:82:e7:33:9b:f4:ec:9a:1f:b3:fb:e7:54:1d:86:
         98:1e:5f:aa:52:6e:e5:86:f7:ee:49:26:6d:a1:fb:c1:a7:08:
         85:63:92:31:9c:34:a3:6b:0a:5d:5d:47:77:80:29:8c:2f:0c:
         83:24:1e:8a:1a:1a:58:e9:c0:c0:8e:12:ba:87:8b:a3:62:63:
         e5:ac:ff:6f:69:f5:b2:a5:11:ee:0e:59:7d:0d:42:2f:d9:ec:
         56:cc:88:a7:e4:a6:30:76:a5:bd:e0:79:63:41:6f:97:db:e2:
         c8:62:ca:5a:6a:f9:21:e3:fc:1f:a5:d1:30:fa:0b:1c:c3:28:
         3f:6e:2c:56:03:b1:c3:1e:de:d9:b8:82:81:11:7a:9a:a7:b9:
         c3:c1:27:77:b5:5f:3c:9b:f1:94:d2:a2:11:ac:b6:06:c8:de:
         17:37:06:2e:c9:fa:1c:d6:b8:32:31:7a:32:3f:14:2a:9b:d4:
         f7:3d:96:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:35:07 2026 by rpki-client