Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/0f1f0768-7b3f-36e1-a622-8efb6d8ff0a4.roa
File:                     0f1f0768-7b3f-36e1-a622-8efb6d8ff0a4.roa (raw, json)
Hash identifier:          7zgkMx5CcepLpVPyZZNH6Ma0l+1OOfgm24G4AVmaEhA=
Subject key identifier:   C8:40:8C:A9:94:72:74:C5:3F:F6:C9:72:A0:BA:74:37:C7:05:3A:4A
Certificate issuer:       /CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345
Certificate serial:       010D0C9F4328584EBDDC6447899311F94EDEE080
Authority key identifier: D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/0f1f0768-7b3f-36e1-a622-8efb6d8ff0a4.roa
Signing time:             Thu 06 Aug 2026 01:00:12 +0000
ROA not before:           Thu 06 Aug 2026 01:00:12 +0000
ROA not after:            Wed 04 Nov 2026 02:00:12 +0000
asID:                     31898
IP address blocks:        101.45.244.0/22 maxlen: 24
                          2605:340:400::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bd:dc:64:47:89:93:11:f9:4e:de:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345
        Validity
            Not Before: Aug  6 01:00:12 2026 GMT
            Not After : Nov  4 02:00:12 2026 GMT
        Subject: CN=accdbc89-b0a4-433c-8daa-e75414d7c1dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ad:26:0e:2e:a1:82:2f:b6:9d:b2:3c:e8:0c:
                    18:bc:03:8f:7d:f5:55:e4:87:7e:34:31:ee:85:3f:
                    66:6c:01:37:43:e9:46:08:fb:46:a2:06:a2:6c:78:
                    d5:2a:45:36:7b:3d:07:b9:e2:65:b9:b1:76:28:f0:
                    eb:52:f2:a9:20:4d:be:f8:ed:31:22:51:10:ec:a6:
                    1c:1b:20:29:7b:cc:40:76:36:0d:df:e7:11:d9:43:
                    f1:43:79:15:12:74:da:ad:70:f0:2b:7c:7a:a6:32:
                    61:8e:07:fa:8f:5e:c7:88:22:59:71:98:05:bb:5a:
                    c3:c8:76:55:cb:f0:28:e6:2b:bb:1b:83:97:2f:5c:
                    09:59:8e:6f:70:63:77:d5:e0:14:4c:c0:71:23:e6:
                    84:3e:9d:49:3c:fb:79:8b:33:ab:e3:9f:2d:61:8c:
                    6a:58:02:19:7a:4c:67:0b:54:10:34:2d:cd:e7:90:
                    16:0f:29:1f:23:b6:48:b7:22:29:1b:d3:3d:db:7c:
                    19:c8:d0:80:bd:bd:82:96:b5:ae:cb:89:5e:b6:b8:
                    11:e1:ca:29:21:5c:d7:c8:57:db:91:f3:eb:19:69:
                    9d:4b:ac:b0:ac:66:1c:41:51:76:16:4e:8a:89:4f:
                    e2:f3:61:78:cd:b0:88:74:ef:ea:30:f8:1f:bb:9b:
                    89:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:40:8C:A9:94:72:74:C5:3F:F6:C9:72:A0:BA:74:37:C7:05:3A:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/0f1f0768-7b3f-36e1-a622-8efb6d8ff0a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl

            X509v3 Authority Key Identifier:
                keyid:D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.45.244.0/22
                IPv6:
                  2605:340:400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:8c:49:ed:1a:03:b4:88:a9:38:3d:86:23:9e:44:fa:77:bf:
         c0:9f:59:9e:21:de:be:0f:44:01:ef:35:4d:93:49:48:a1:2a:
         21:15:67:69:89:1a:a5:9b:b0:27:b6:04:50:03:e0:6b:ac:f3:
         90:f7:0d:fc:af:03:8d:83:0b:4a:fe:bc:89:d8:ad:26:24:e3:
         b6:cf:80:4c:75:ff:49:e2:60:2b:1f:18:1e:69:0b:86:8e:a6:
         d0:e1:0a:72:bb:2c:80:60:b1:95:ea:36:f9:a1:15:fc:21:9a:
         3b:7f:5a:28:03:31:27:94:23:bd:71:45:7b:b2:61:e6:c4:ad:
         4e:ee:66:3c:d8:8b:0a:30:ac:60:56:dc:f5:60:ca:1b:20:63:
         b9:e5:d4:25:06:19:ec:12:9d:a9:a9:89:0b:8c:a9:11:80:24:
         5a:c2:55:62:0f:6d:75:5c:8d:4a:88:8b:16:40:91:a6:cc:c8:
         7f:d8:12:b6:67:cb:e3:bc:5f:14:e3:26:db:e8:4e:7c:0d:47:
         7c:3e:83:8c:4d:95:35:ca:52:e6:7d:84:30:7d:61:92:66:da:
         dc:8a:45:85:ae:c4:30:46:ce:7c:b6:39:a0:4f:73:20:ae:2e:
         9a:41:48:c0:34:e1:df:ae:00:64:c6:71:6c:04:f3:bd:fe:b9:
         64:f9:cc:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 07:11:34 2026 by rpki-client