Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/3b17eba5-285b-39fd-bf93-c0753a587f0b.roa
File:                     3b17eba5-285b-39fd-bf93-c0753a587f0b.roa (raw, json)
Hash identifier:          auJeWgdK15HzzXs7wUsUa/HGsxNV12KjghdFVZGrpuU=
Subject key identifier:   AB:E5:33:0A:11:92:B2:A8:27:C1:E3:FB:C6:5F:9B:13:24:80:42:63
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F4328584EC269DB2D646B775D72180052
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/3b17eba5-285b-39fd-bf93-c0753a587f0b.roa
Signing time:             Fri 07 Aug 2026 16:08:37 +0000
ROA not before:           Fri 07 Aug 2026 16:08:37 +0000
ROA not after:            Thu 05 Nov 2026 17:08:37 +0000
asID:                     14956
IP address blocks:        45.61.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c2:69:db:2d:64:6b:77:5d:72:18:00:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Aug  7 16:08:37 2026 GMT
            Not After : Nov  5 17:08:37 2026 GMT
        Subject: CN=9a6ad5f3-fbe4-4ab6-b242-7f9c901a8390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f3:9a:6f:8a:95:23:c1:31:3c:f8:bc:30:3f:
                    9e:97:d2:cb:12:f3:a6:60:49:b3:db:54:8a:04:70:
                    7b:bd:a3:bc:d2:91:99:11:50:2c:95:93:0d:00:fe:
                    2a:8c:78:f4:fc:1f:62:af:d3:90:8a:5c:d5:89:9a:
                    b3:4d:e3:5d:91:c5:a0:a3:be:20:44:02:99:1f:a2:
                    6a:d4:2a:7c:cc:7e:78:30:47:52:49:32:cb:97:07:
                    b9:2e:88:9a:64:83:19:6b:72:97:0d:de:e6:7d:b7:
                    3f:cd:84:67:39:b3:88:89:3a:57:65:96:9f:d0:d0:
                    71:8a:20:9f:5d:a4:3c:60:79:48:cd:72:91:76:73:
                    3a:15:c2:a4:b0:a8:72:44:c8:8a:7f:76:36:fd:35:
                    e3:60:2d:9d:c4:56:a0:c2:17:7b:c6:cb:ae:03:05:
                    81:b0:05:16:73:54:57:b8:a2:33:ef:52:cc:70:29:
                    46:50:17:64:42:6e:6a:14:6c:fa:cf:20:76:92:e4:
                    e6:4b:d5:a7:07:69:c5:2b:5b:77:53:43:e4:fb:cc:
                    83:2c:d2:d2:c8:5f:a1:1a:dd:20:7f:62:92:7b:33:
                    90:26:13:32:c7:d4:f9:87:e6:de:a0:cd:31:ce:b4:
                    23:74:bc:08:9e:0b:ac:ab:42:56:1a:3a:be:ac:da:
                    ae:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:E5:33:0A:11:92:B2:A8:27:C1:E3:FB:C6:5F:9B:13:24:80:42:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/3b17eba5-285b-39fd-bf93-c0753a587f0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.61.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:bd:9a:86:8d:ad:4e:87:df:7a:f3:f1:c8:c9:83:35:45:f7:
         97:07:71:98:e3:f8:ee:55:e3:1a:0e:9c:36:cb:ee:78:1b:a9:
         00:ed:c0:d2:47:b4:33:8b:8c:5b:47:dc:c1:6b:dc:91:c1:ef:
         51:40:c8:b2:fa:db:30:e3:15:b8:01:c2:18:be:32:47:6e:bf:
         0e:81:f8:78:56:29:03:86:d3:df:f9:fd:8d:d6:e2:d5:61:81:
         91:ea:d9:cc:af:75:d6:b4:e3:b2:c7:1e:be:a9:62:9b:83:6d:
         69:03:6b:13:67:2a:fa:08:a6:0d:a8:0d:8e:0c:7e:25:5d:74:
         46:2a:d1:47:cb:e2:55:0a:0f:66:e0:b9:2a:9a:5e:03:ac:3a:
         13:a4:26:5c:7c:6d:e3:2f:74:c7:24:4c:5e:45:56:75:3c:26:
         da:1f:43:44:74:23:a4:c2:15:10:c6:e3:b5:b2:49:07:d0:85:
         51:db:25:42:14:ce:cb:32:d4:7a:87:22:16:29:b7:a2:b0:13:
         37:56:85:66:2f:6b:7b:99:cb:41:68:fc:58:79:82:95:6e:d4:
         6a:7c:b5:e7:34:0d:c5:81:51:1a:83:56:dc:37:14:b0:85:94:
         6a:c9:3f:08:02:22:ae:c5:34:91:2b:1e:e6:24:9e:76:66:71:
         bd:7d:0b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 23:28:16 2026 by rpki-client