Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/b6d7cd18-984c-3f83-987a-1b5fea3f909c.roa
File:                     b6d7cd18-984c-3f83-987a-1b5fea3f909c.roa (raw, json)
Hash identifier:          vo518QEjiTqBWKD831Jwp6HDH7+FEv5WZsuvL9AYclk=
Subject key identifier:   7F:34:52:08:82:FD:CB:31:6C:96:E9:D3:F9:34:FA:25:CF:0D:28:38
Certificate issuer:       /CN=61939bbc-e50f-4ced-8482-e7c4008e3583
Certificate serial:       010D0C9F4328584EA787D8A515E97F510664CD20
Authority key identifier: 3F:8D:F8:51:B6:E3:53:FA:6A:C1:CF:4A:DD:0E:91:CE:C3:DE:49:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/b6d7cd18-984c-3f83-987a-1b5fea3f909c.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     397453
IP address blocks:        45.138.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/61939bbc-e50f-4ced-8482-e7c4008e3583.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/61939bbc-e50f-4ced-8482-e7c4008e3583.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:d8:a5:15:e9:7f:51:06:64:cd:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61939bbc-e50f-4ced-8482-e7c4008e3583
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c4ba4ca8-d6c2-4d82-8d7e-226de537391f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ba:cd:09:b2:7d:f8:87:a2:6c:1c:b4:04:1a:
                    3a:9a:fd:2d:9c:3d:bf:23:47:18:49:2e:13:64:85:
                    85:84:28:64:4f:0a:63:55:70:ea:ea:9e:d4:6c:94:
                    20:8b:b5:bd:43:ec:db:63:76:ef:54:08:24:8c:35:
                    e0:2c:5b:c6:1b:b2:97:32:ad:cb:be:b9:61:06:0e:
                    2b:77:04:29:28:4a:07:16:2f:98:b8:c6:af:a5:f5:
                    8b:96:08:4d:15:1a:f4:83:93:6e:66:e2:a1:e0:e7:
                    d0:0e:84:09:c0:4f:10:1f:de:7d:e6:ca:03:50:62:
                    df:60:72:32:1f:13:0e:98:65:16:7a:e0:ed:d3:ae:
                    62:f6:6b:8c:e3:f2:ef:76:2d:1b:5f:fe:5d:33:5c:
                    bf:cf:19:df:23:17:3f:72:d1:9f:ea:27:5c:68:fd:
                    48:92:15:be:f3:2f:73:54:2a:6d:0b:93:0e:42:f9:
                    ab:fc:b5:3c:2c:6a:bb:f3:8d:ce:81:34:8d:db:09:
                    e3:14:9e:f2:19:44:ae:47:7b:23:e3:86:77:08:b8:
                    5e:da:07:37:18:a8:7d:46:e9:20:9f:b3:e8:aa:89:
                    6a:2c:de:11:e0:cc:06:3b:5b:27:d9:3d:45:7b:93:
                    c9:cd:59:6f:a8:96:1f:1b:93:0f:bf:70:be:65:ce:
                    24:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:34:52:08:82:FD:CB:31:6C:96:E9:D3:F9:34:FA:25:CF:0D:28:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/b6d7cd18-984c-3f83-987a-1b5fea3f909c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/61939bbc-e50f-4ced-8482-e7c4008e3583.crl

            X509v3 Authority Key Identifier:
                keyid:3F:8D:F8:51:B6:E3:53:FA:6A:C1:CF:4A:DD:0E:91:CE:C3:DE:49:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.138.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:69:d1:72:77:a2:c3:0b:c5:01:c6:dd:b7:eb:a6:29:81:a3:
         8e:eb:f1:7b:84:f8:b0:50:9c:de:5c:da:9f:3b:ae:2c:ea:90:
         31:bd:56:a2:23:bc:e8:2e:6d:31:84:1f:34:df:bd:ff:1a:2b:
         78:e0:10:b6:25:7d:12:a1:26:f5:fa:76:6e:75:f2:42:f0:95:
         64:32:49:31:11:2f:a6:40:58:53:b3:88:e7:ad:b4:8e:67:c7:
         8a:ce:d5:95:45:e6:4f:4d:66:4b:cf:68:73:3d:a8:f6:b5:8e:
         9a:d3:da:32:b2:a0:1f:15:97:b2:ed:87:30:73:7f:0b:0f:66:
         a4:55:5d:df:39:b4:9a:ea:cb:24:c8:48:3f:26:a0:33:75:64:
         7a:2c:49:e1:28:d4:df:42:d6:c3:19:f4:cc:a9:00:e8:02:ee:
         97:57:89:cd:58:35:8b:f6:01:c1:36:38:3c:36:d1:1e:af:52:
         c9:4b:e4:18:06:7d:49:42:5e:1f:ca:b1:9e:51:be:d6:30:8a:
         c1:21:90:d5:80:55:fb:91:ce:75:f2:da:ad:db:ca:3d:8f:d9:
         47:93:00:6b:af:6d:92:bc:cb:75:9f:6e:24:bb:37:02:44:fa:
         53:50:82:00:1c:c5:56:19:9b:58:e5:2f:e2:c9:6b:47:44:27:
         fd:7f:da:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 00:05:13 2026 by rpki-client