Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/5b7a2380-cd0f-3e8d-b019-fbae12836aea.roa
File:                     5b7a2380-cd0f-3e8d-b019-fbae12836aea.roa (raw, json)
Hash identifier:          cRlKXQYajo+r5lPNJk1xizLNJxxXd3Luf34DiYqpGUE=
Subject key identifier:   9F:D3:A9:70:7D:CA:8A:5A:FE:3C:ED:00:C6:F2:ED:AC:BB:ED:D4:3B
Certificate issuer:       /CN=45de47ca-0b52-44ab-af26-767d8a671192
Certificate serial:       010D0C9F4328584EBB11BED4E243E5C58AA1D900
Authority key identifier: C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/5b7a2380-cd0f-3e8d-b019-fbae12836aea.roa
Signing time:             Wed 05 Aug 2026 01:00:12 +0000
ROA not before:           Wed 05 Aug 2026 01:00:12 +0000
ROA not after:            Tue 03 Nov 2026 02:00:12 +0000
asID:                     5645
IP address blocks:        104.247.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bb:11:be:d4:e2:43:e5:c5:8a:a1:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45de47ca-0b52-44ab-af26-767d8a671192
        Validity
            Not Before: Aug  5 01:00:12 2026 GMT
            Not After : Nov  3 02:00:12 2026 GMT
        Subject: CN=3a0aa86f-dd35-42f2-8c52-f1f265245a75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:1e:52:e9:46:90:c8:49:1c:29:cf:74:7e:5b:
                    45:2d:5f:13:9c:72:f4:0c:09:3d:23:b2:2f:aa:40:
                    c8:ce:d5:f2:e5:98:6d:04:6f:7f:53:01:f9:af:f3:
                    d1:8d:e0:01:1e:7a:82:e3:61:a6:0e:19:a0:f7:ac:
                    34:37:f7:27:a8:47:01:79:67:74:dd:d4:3f:db:ac:
                    8e:48:f5:ff:1c:04:29:d1:b2:0d:f7:d2:8e:b9:91:
                    55:72:e4:60:e4:14:2c:11:a2:e8:e3:a7:16:2b:9f:
                    a5:37:d8:e9:60:62:f9:8a:cc:bc:37:60:49:db:13:
                    42:a8:5b:ef:1f:91:b1:d0:e8:52:e6:5c:6b:b9:13:
                    0c:6b:33:42:10:82:bb:70:f1:d8:8c:64:6b:de:b5:
                    36:c6:63:97:c2:08:d5:34:22:92:41:46:ee:1a:06:
                    d1:e3:a3:0c:e0:dd:ca:d2:31:88:13:00:04:bd:06:
                    74:b0:fa:a6:45:36:3c:20:33:74:1b:f7:cf:46:b3:
                    84:04:a4:ba:22:c0:ca:62:91:e8:8c:cb:d0:21:bc:
                    c0:fa:3c:d0:81:da:e5:17:15:c6:6a:c0:4b:61:06:
                    d0:3a:d8:36:20:1e:73:17:f0:a6:95:94:45:2f:af:
                    bd:81:0d:8e:56:ee:b7:f8:48:6b:f7:2a:b2:0a:42:
                    05:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:D3:A9:70:7D:CA:8A:5A:FE:3C:ED:00:C6:F2:ED:AC:BB:ED:D4:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/5b7a2380-cd0f-3e8d-b019-fbae12836aea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl

            X509v3 Authority Key Identifier:
                keyid:C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.247.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:a0:21:5f:b8:7a:de:3e:5d:8e:d3:b4:c5:45:7c:ef:f8:5d:
         63:dc:d4:49:b6:5a:f4:64:02:12:86:53:df:c5:cf:d3:b5:08:
         bb:bd:31:ac:c0:95:81:fc:d2:0f:cd:fc:92:d6:8f:f2:99:c5:
         70:6a:e7:e0:a7:01:82:21:b5:64:d5:1e:ca:0a:54:8f:08:e9:
         20:43:26:57:d6:c8:9b:55:44:04:7b:e9:28:6d:cc:91:89:c9:
         ed:b0:a0:47:ce:7d:83:ba:ec:46:35:47:59:67:a7:02:fa:96:
         b3:ee:60:a2:bf:e5:bf:4c:1e:4a:e8:3e:fd:d2:38:0a:b0:2d:
         86:fa:16:8b:ca:a4:07:19:25:56:cf:e5:9b:d9:36:ac:c2:d7:
         51:cd:a1:17:06:77:a2:4b:bd:78:0e:07:b5:ef:69:07:8c:1d:
         f2:2a:31:c1:96:ee:13:69:9b:14:a0:54:ad:fe:11:53:2c:47:
         4f:8b:d9:18:2a:04:68:31:33:45:ab:33:5b:78:b9:2f:9e:fa:
         c5:31:3e:06:28:a3:89:f5:32:3a:33:cc:59:1c:b7:b8:2b:89:
         0d:4e:d7:df:0e:53:e8:22:a4:9e:d0:e4:36:df:77:cb:47:45:
         4d:8f:a1:d2:1c:99:d3:c4:c2:82:30:0b:e3:2d:47:78:ba:47:
         0e:d9:62:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 2 17:56:24 2026 by rpki-client