Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5/cb66ff1d-bc40-37a6-8bc9-35d2a88c16c5.roa
File:                     cb66ff1d-bc40-37a6-8bc9-35d2a88c16c5.roa (raw, json)
Hash identifier:          VbmSxtwpmwXBKTYLHm95DP0QJz7SsmMAdvIBDqsitAI=
Subject key identifier:   3E:11:9F:4D:A0:6E:68:47:51:E7:4D:E7:B4:D2:DF:E6:C0:5C:13:E8
Certificate issuer:       /CN=5553566f-cbda-48fe-ba4a-9ce4cb36a6c5
Certificate serial:       010D0C9F4328584EF9E20CB0EB6B7B0834C2F180
Authority key identifier: 72:9E:02:D1:42:AA:4B:6A:97:7E:8C:D8:BB:26:FE:0F:5F:41:94:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5/cb66ff1d-bc40-37a6-8bc9-35d2a88c16c5.roa
Signing time:             Thu 27 Aug 2026 13:00:12 +0000
ROA not before:           Thu 27 Aug 2026 13:00:12 +0000
ROA not after:            Wed 25 Nov 2026 14:00:12 +0000
asID:                     397301
IP address blocks:        45.41.254.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f9:e2:0c:b0:eb:6b:7b:08:34:c2:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5553566f-cbda-48fe-ba4a-9ce4cb36a6c5
        Validity
            Not Before: Aug 27 13:00:12 2026 GMT
            Not After : Nov 25 14:00:12 2026 GMT
        Subject: CN=1cfb1581-6644-465f-8a56-1cfceed73f60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:14:2a:4c:92:bf:10:e0:db:ae:90:51:58:ac:
                    73:58:45:80:85:5f:30:b4:ab:6c:84:57:0d:23:51:
                    e8:f2:60:1e:6b:7d:1a:48:d3:f3:21:f8:5c:84:81:
                    c2:4e:3e:fe:a3:4b:1c:fe:85:f1:9d:be:46:fd:70:
                    4c:39:0b:dc:bc:11:66:fd:ba:15:32:b5:f7:cf:92:
                    41:be:ec:36:97:42:31:1c:62:e6:25:78:8b:1a:6a:
                    99:b3:a0:ea:70:aa:a7:a6:76:e3:0e:39:ca:99:67:
                    4a:32:6e:bb:ac:ab:6d:14:58:a9:f5:f4:51:cf:ea:
                    07:19:91:ca:91:a0:1c:b8:d1:fd:61:0a:1c:74:de:
                    06:83:a2:30:15:a1:05:60:67:d9:09:59:02:d2:29:
                    f1:62:cf:63:73:69:e6:eb:17:02:2f:4f:61:11:c2:
                    af:75:a5:e5:3d:3b:2a:e2:54:a7:c2:a4:aa:02:87:
                    8a:94:ae:84:8b:69:72:dc:80:ec:b8:dd:84:fb:8a:
                    0c:a7:0d:b4:f8:9d:fd:cf:12:84:79:2c:43:87:ce:
                    7a:69:22:cc:d1:86:64:87:a2:bd:3f:11:ac:c0:e2:
                    49:e2:c7:44:5e:da:28:56:97:87:05:00:e1:40:57:
                    2d:92:44:2c:f4:e7:01:b1:fd:33:7e:45:10:b7:95:
                    11:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:11:9F:4D:A0:6E:68:47:51:E7:4D:E7:B4:D2:DF:E6:C0:5C:13:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5/cb66ff1d-bc40-37a6-8bc9-35d2a88c16c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5.crl

            X509v3 Authority Key Identifier:
                keyid:72:9E:02:D1:42:AA:4B:6A:97:7E:8C:D8:BB:26:FE:0F:5F:41:94:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.41.254.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:3c:d6:11:3e:24:55:bd:67:78:9c:10:f1:00:3f:4d:ac:0b:
         3c:8c:54:96:09:66:55:a4:a4:ba:ab:6e:3d:4f:0d:d4:1a:94:
         65:4e:73:dc:e7:39:84:2d:f4:cb:94:9e:01:1b:e6:b9:2d:44:
         52:72:73:95:0c:a7:c7:fc:f2:a1:59:d4:b9:0d:94:92:a1:aa:
         8e:01:a7:df:d5:7c:57:5b:f7:b6:5d:50:32:3a:38:cb:2e:4b:
         0f:7e:8c:44:07:c0:4c:b2:d8:00:af:25:28:ca:41:6b:0e:35:
         73:31:61:72:c8:0f:ef:7a:cf:4e:a1:7f:b0:98:57:c9:ca:ec:
         a8:f5:cf:4f:bb:c9:ae:70:5e:d6:58:ac:a1:38:1d:88:27:ee:
         c2:7c:99:eb:fe:28:f0:f9:6e:73:2d:fb:81:4b:8f:63:7b:c6:
         fc:3b:02:39:3a:53:2b:6f:4f:25:be:9e:b1:15:27:6b:55:d0:
         1b:20:aa:f3:d7:a7:c8:41:95:67:3d:b3:f7:aa:08:59:32:26:
         e5:76:ea:3c:07:8c:08:cf:97:cc:cb:66:97:96:9c:99:93:c0:
         88:8c:c7:f3:fc:78:05:9d:27:2f:2b:7c:2c:82:5a:a1:87:bb:
         3b:6d:86:2e:5a:a8:8b:36:52:a2:35:9a:de:77:b3:48:39:c1:
         b5:e5:58:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 14:25:46 2026 by rpki-client