Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/746d32d6-cdae-3263-a43d-4fe067b49807.roa
File:                     746d32d6-cdae-3263-a43d-4fe067b49807.roa (raw, json)
Hash identifier:          9wBNCAgbalGjONWCjqjB4cVWgdn6E9Q0Sls4Ohbva7g=
Subject key identifier:   C6:5D:1A:0D:7D:42:20:17:A7:35:9C:15:EE:4B:F8:01:DE:FB:6F:B6
Certificate issuer:       /CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2
Certificate serial:       010D0C9F4328584E6C6F6438E06430F2A6B59580
Authority key identifier: 19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/746d32d6-cdae-3263-a43d-4fe067b49807.roa
Signing time:             Tue 07 Jul 2026 21:00:13 +0000
ROA not before:           Tue 07 Jul 2026 21:00:13 +0000
ROA not after:            Mon 05 Oct 2026 21:00:13 +0000
asID:                     62874
IP address blocks:        45.41.128.0/22 maxlen: 22
                          45.41.140.0/22 maxlen: 22
                          142.147.224.0/20 maxlen: 20
                          142.147.248.0/21 maxlen: 21
                          162.249.164.0/22 maxlen: 22
                          167.160.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6c:6f:64:38:e0:64:30:f2:a6:b5:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2
        Validity
            Not Before: Jul  7 21:00:13 2026 GMT
            Not After : Oct  5 21:00:13 2026 GMT
        Subject: CN=30468d5b-e9fd-45c4-8a5a-669148242754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:cc:7b:68:54:b1:16:5f:89:d7:26:57:c4:1c:
                    20:57:bb:40:83:92:b2:18:a1:d2:51:fb:0a:24:9a:
                    f6:5c:af:11:ac:62:33:26:e7:e5:85:7b:04:eb:46:
                    c6:2f:5e:f2:79:b6:a7:22:36:17:33:5f:7b:93:7e:
                    73:52:be:10:b1:ba:de:49:47:b8:be:cd:0e:fc:e4:
                    bc:7a:c9:f4:3e:cf:23:7d:6d:45:74:f5:49:b3:27:
                    9b:6a:3d:33:5c:e2:68:81:f9:a3:79:8f:82:e0:26:
                    d6:80:95:d8:e6:94:17:f1:25:b4:ed:17:dc:a1:11:
                    63:f7:8e:67:02:19:a6:1c:7e:8b:e1:9c:ba:eb:47:
                    39:89:f0:c2:23:fc:9d:74:e6:25:ef:85:b1:3d:24:
                    3c:eb:71:2f:c3:63:0f:35:40:79:58:f9:b7:50:8f:
                    88:c5:01:89:7b:23:e4:d3:7b:a3:af:46:5e:ef:59:
                    5f:24:ac:42:90:22:80:22:43:dc:95:a0:97:e6:32:
                    49:11:15:42:99:02:43:2d:b3:e3:8d:7d:23:c8:34:
                    7d:c3:8b:6e:46:a0:9c:12:03:89:81:07:fe:aa:a6:
                    54:30:cd:d0:f2:3b:80:30:fe:41:db:08:b5:53:94:
                    32:47:95:11:e6:04:9d:45:99:ca:0b:3a:e5:cf:e5:
                    ea:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:5D:1A:0D:7D:42:20:17:A7:35:9C:15:EE:4B:F8:01:DE:FB:6F:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/746d32d6-cdae-3263-a43d-4fe067b49807.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl

            X509v3 Authority Key Identifier:
                keyid:19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.41.128.0/22
                  45.41.140.0/22
                  142.147.224.0/20
                  142.147.248.0/21
                  162.249.164.0/22
                  167.160.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:bf:d7:3a:20:70:fa:91:32:55:8b:0e:71:bd:59:c9:bc:96:
         c1:c9:9e:8f:1b:2c:29:d3:06:62:1c:06:00:ad:f3:35:99:36:
         05:17:f1:e1:0c:54:64:eb:4a:c1:29:27:ab:b3:e1:65:e4:3e:
         78:d7:a5:81:14:82:16:44:44:2c:f8:ff:7a:ff:84:f4:26:e0:
         1c:3c:d0:49:52:44:ee:e1:4f:7b:c9:f6:a5:c5:90:b5:61:0e:
         ec:40:12:95:8b:24:a5:9f:8a:73:d1:2f:26:00:f1:fe:80:36:
         d3:fb:ff:b8:4d:83:12:5c:48:5e:67:58:1a:fa:b4:78:ba:01:
         f2:e3:a5:18:84:b5:0a:a4:45:7b:a3:61:5f:d7:ee:74:6b:16:
         f0:03:77:ad:98:24:dc:48:ea:4a:41:51:22:78:f5:36:8a:4b:
         a6:41:84:f4:21:d8:e3:37:f5:4a:fc:81:15:22:fc:5c:3f:50:
         b4:d3:62:1d:40:6d:8b:44:f3:1f:16:0d:54:09:63:02:ab:64:
         de:24:a0:43:1e:3d:bd:66:8a:6e:d7:01:34:9c:dd:42:68:ff:
         a3:b7:6e:87:7b:23:e5:3b:03:76:90:51:ed:1b:a6:e9:12:ea:
         65:75:5d:ed:c0:5f:c8:78:36:13:ad:62:9f:72:ec:3f:3a:97:
         11:5b:3e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:30:18 2026 by rpki-client