Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/c90933a7-20d1-3f12-9f48-2849455b9cb8.roa
File:                     c90933a7-20d1-3f12-9f48-2849455b9cb8.roa (raw, json)
Hash identifier:          gkEyC7aWqtrTYEEWVFz2uQJ+k/ZwZLBb+AsIUhS8NZY=
Subject key identifier:   F5:88:C4:74:06:C5:31:4E:04:B2:F8:4C:37:4F:25:7D:BA:6E:54:4E
Certificate issuer:       /CN=45de47ca-0b52-44ab-af26-767d8a671192
Certificate serial:       010D0C9F4328584EBB11BF7ACD8C93F88E2D5C00
Authority key identifier: C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/c90933a7-20d1-3f12-9f48-2849455b9cb8.roa
Signing time:             Wed 05 Aug 2026 01:00:12 +0000
ROA not before:           Wed 05 Aug 2026 01:00:12 +0000
ROA not after:            Tue 03 Nov 2026 02:00:12 +0000
asID:                     5645
IP address blocks:        206.248.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bb:11:bf:7a:cd:8c:93:f8:8e:2d:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45de47ca-0b52-44ab-af26-767d8a671192
        Validity
            Not Before: Aug  5 01:00:12 2026 GMT
            Not After : Nov  3 02:00:12 2026 GMT
        Subject: CN=50c0d59e-51dd-44a6-942a-04040b63e7d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:72:db:9c:08:f6:b6:01:e7:82:08:c2:3b:a8:
                    aa:ee:f5:83:a5:c0:e3:7f:75:57:2f:21:d4:5d:d1:
                    89:e0:3b:52:c0:9c:5e:78:71:ed:82:56:f9:c3:d8:
                    cc:2b:0d:08:ef:e0:f4:23:21:ab:78:4b:35:60:06:
                    2c:a9:10:f0:2a:b5:c9:cf:2a:e3:3c:4e:4e:36:35:
                    e1:39:83:84:38:19:a2:ed:7a:1a:19:38:cc:38:7c:
                    98:ac:e0:02:e9:65:71:fc:f8:63:16:c3:5c:aa:1b:
                    c8:a0:10:8d:60:27:ee:9a:fa:15:20:c9:b9:3c:0b:
                    9d:3e:59:e8:fc:62:44:16:84:ee:c6:fe:86:b8:ce:
                    76:8c:92:76:aa:78:d0:51:f5:98:aa:a9:c8:49:bd:
                    70:68:68:a8:c5:5a:6e:f8:59:a1:ad:c4:c5:b4:04:
                    d4:83:32:33:dc:b9:f8:c0:91:8a:55:bd:25:01:e0:
                    50:f2:29:c9:2e:d6:da:cf:e9:83:64:5d:45:00:e1:
                    ac:cb:1e:55:66:e6:d9:ac:07:44:09:29:68:60:16:
                    a3:f6:c5:3b:2a:f1:9e:92:50:1e:ce:83:bc:eb:b6:
                    42:aa:59:8f:c9:8d:c7:f0:6e:50:81:dc:d8:7b:aa:
                    a4:26:c1:78:95:cf:2b:03:85:61:86:00:9e:79:d2:
                    58:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:88:C4:74:06:C5:31:4E:04:B2:F8:4C:37:4F:25:7D:BA:6E:54:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/c90933a7-20d1-3f12-9f48-2849455b9cb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl

            X509v3 Authority Key Identifier:
                keyid:C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.248.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:dc:47:70:0e:44:08:65:38:f4:f3:f1:23:a6:26:12:05:87:
         02:69:ac:1d:bb:b3:80:e2:18:a0:b5:1e:fc:ca:c4:b7:58:58:
         ac:d9:e8:bf:95:1b:88:36:ad:87:58:b4:a9:bf:7d:f3:a7:55:
         bd:86:eb:74:46:bf:1d:78:4c:b2:ca:d1:55:31:2d:12:d2:8f:
         7a:aa:4e:6c:51:70:55:89:70:76:96:27:f6:fc:76:fa:c6:2b:
         7a:aa:2d:e2:49:4a:63:4a:2b:7d:08:23:c4:a4:7b:73:b0:56:
         e0:da:16:06:ea:80:65:b1:68:54:9a:d0:d5:d1:b3:3f:8e:66:
         a4:bb:a5:92:4c:a4:7e:83:95:24:68:69:50:b0:a1:37:59:be:
         0a:1f:3e:48:c6:3f:55:14:9e:97:81:14:fd:44:98:5d:8a:f0:
         a5:fa:83:50:ed:a1:61:c0:ad:44:62:bc:c3:8d:6a:d1:62:76:
         04:be:2d:62:6e:55:30:84:29:56:5e:e0:6e:e5:70:bb:88:8f:
         e6:87:42:50:9f:f9:05:df:72:f2:4e:ec:41:30:af:d0:e1:68:
         23:57:fc:33:e1:60:9c:0f:bc:0c:b5:c4:e4:7d:1f:3f:67:b5:
         fa:c4:c8:ad:c8:ac:29:98:11:cb:53:b1:13:54:e7:1d:35:00:
         b3:5b:a1:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 2 17:57:49 2026 by rpki-client