Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/51b46668-18a4-4ef4-a474-9b87fc684c8f/f247443f-92cb-3f46-9652-a1dee0bf20df.roa
File:                     f247443f-92cb-3f46-9652-a1dee0bf20df.roa (raw, json)
Hash identifier:          3vmcwyxZiPRbfsFI+EjF7m/bA0hZ3UcebjZVhY8sHnw=
Subject key identifier:   2F:8F:23:7A:2A:F6:B1:1D:F5:F0:9D:03:37:59:53:FF:80:8D:E5:2E
Certificate issuer:       /CN=51b46668-18a4-4ef4-a474-9b87fc684c8f
Certificate serial:       010D0C9F4328584E6DD4B8058E8F5146F47DA4A0
Authority key identifier: F8:1D:F7:92:F9:97:7E:A8:B7:37:E9:C7:B3:B3:EC:3F:39:61:1B:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/51b46668-18a4-4ef4-a474-9b87fc684c8f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/51b46668-18a4-4ef4-a474-9b87fc684c8f/f247443f-92cb-3f46-9652-a1dee0bf20df.roa
Signing time:             Wed 08 Jul 2026 09:00:12 +0000
ROA not before:           Wed 08 Jul 2026 09:00:12 +0000
ROA not after:            Tue 06 Oct 2026 09:00:12 +0000
asID:                     8075
IP address blocks:        156.45.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/51b46668-18a4-4ef4-a474-9b87fc684c8f/51b46668-18a4-4ef4-a474-9b87fc684c8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/51b46668-18a4-4ef4-a474-9b87fc684c8f/51b46668-18a4-4ef4-a474-9b87fc684c8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/51b46668-18a4-4ef4-a474-9b87fc684c8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6d:d4:b8:05:8e:8f:51:46:f4:7d:a4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51b46668-18a4-4ef4-a474-9b87fc684c8f
        Validity
            Not Before: Jul  8 09:00:12 2026 GMT
            Not After : Oct  6 09:00:12 2026 GMT
        Subject: CN=b580d303-5d7f-4a00-97f4-cc86c6272a10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0c:c8:05:2a:13:0e:5d:66:c5:8c:a7:87:00:
                    d3:6e:c7:cd:83:f0:7f:00:b6:66:3b:61:1f:bf:1e:
                    9b:1d:52:56:54:ce:c8:71:df:7a:1d:14:6f:9b:20:
                    77:59:cd:2e:89:9c:3a:8b:34:41:4d:4f:1c:a5:63:
                    80:6c:25:1a:49:6c:48:31:0a:ec:5b:4e:5d:24:2d:
                    2f:d1:08:d6:5b:27:dc:ac:50:aa:bb:c0:61:52:e6:
                    c5:17:9c:0d:76:4a:e2:15:31:94:78:4a:02:c5:65:
                    66:c1:ed:23:52:38:a0:6f:a6:9f:8d:6f:a1:59:bd:
                    2f:c2:7c:2a:75:78:05:dc:46:36:b6:c6:74:6f:01:
                    7c:83:4f:3d:f6:f8:0b:d9:bf:5d:13:4f:02:03:e1:
                    14:7a:a1:63:0a:52:33:c3:98:74:61:f1:c4:32:dd:
                    84:40:0f:25:4f:bf:26:18:d8:0e:4f:3b:b1:9b:04:
                    b1:da:96:c0:9d:55:93:63:b3:71:02:73:fa:8c:fb:
                    81:fe:0c:7f:3c:bc:42:8a:4f:89:fb:b1:21:d3:ef:
                    1c:f6:7b:f4:58:07:82:f7:ae:7e:6d:71:7d:65:db:
                    73:0f:87:7c:48:76:b8:5a:ae:33:46:93:74:67:11:
                    c0:f8:e1:ae:b4:7b:9f:22:60:af:53:b7:1a:a4:cc:
                    cb:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:8F:23:7A:2A:F6:B1:1D:F5:F0:9D:03:37:59:53:FF:80:8D:E5:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/51b46668-18a4-4ef4-a474-9b87fc684c8f/f247443f-92cb-3f46-9652-a1dee0bf20df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/51b46668-18a4-4ef4-a474-9b87fc684c8f/51b46668-18a4-4ef4-a474-9b87fc684c8f.crl

            X509v3 Authority Key Identifier:
                keyid:F8:1D:F7:92:F9:97:7E:A8:B7:37:E9:C7:B3:B3:EC:3F:39:61:1B:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/51b46668-18a4-4ef4-a474-9b87fc684c8f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.45.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:9d:54:92:eb:f6:95:b0:cd:1f:61:c3:1f:24:13:1e:98:0f:
         fb:34:a6:31:37:cc:a9:0a:b0:f5:fb:15:8b:7b:a2:06:cc:b5:
         7f:fa:ac:c3:93:25:08:8b:72:6e:12:c5:47:a3:ef:d3:fe:96:
         82:3c:9f:b2:53:e0:db:d5:ad:ec:84:29:e1:be:9c:e8:6c:bc:
         52:24:7c:d1:91:ea:a2:a8:38:5a:c6:d4:a0:52:60:9b:cc:e3:
         13:2c:2a:51:7c:77:5b:64:97:76:d1:d0:af:2a:2f:de:ec:4d:
         2c:b2:ce:61:76:40:8d:c4:4f:46:93:cf:36:24:9d:9b:3d:11:
         e7:0f:17:05:c8:e1:67:ea:a9:93:f0:da:cd:d8:dd:ea:a8:8e:
         f4:34:c1:f0:28:3c:d7:a4:1e:e9:51:af:38:37:b2:dc:e1:21:
         eb:ea:b4:af:24:aa:a9:17:f7:93:8b:bc:c6:0d:31:32:e4:4e:
         a7:79:b9:1c:b9:15:9c:9e:ce:a7:e7:76:59:09:df:2f:b6:78:
         c8:16:f4:06:60:e5:1f:04:61:5f:73:f6:96:55:7b:53:d9:51:
         84:de:fc:77:0c:7c:9e:94:d2:04:62:b2:3c:d5:15:d7:c9:d0:
         09:58:21:ec:cc:ac:df:74:40:57:84:30:03:c3:91:4b:19:51:
         31:60:44:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 21:04:13 2026 by rpki-client