Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/fcf6d0c3-b711-3a5d-8f07-01f7c69a84fe.roa
File:                     fcf6d0c3-b711-3a5d-8f07-01f7c69a84fe.roa (raw, json)
Hash identifier:          RerstQ6ac4cbwZyy+EzZF6Q3rI+vKQkLiggbAAKm6co=
Subject key identifier:   F4:B6:9A:21:F5:9F:34:D7:15:C9:3A:5C:37:5B:63:9E:D2:75:26:ED
Certificate issuer:       /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc
Certificate serial:       010D0C9F4328584D3B34E27487E4AEBF13D89020
Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/fcf6d0c3-b711-3a5d-8f07-01f7c69a84fe.roa
Signing time:             Fri 20 Mar 2026 13:00:40 +0000
ROA not before:           Fri 20 Mar 2026 13:00:40 +0000
ROA not after:            Thu 18 Jun 2026 13:00:40 +0000
asID:                     53414
IP address blocks:        45.72.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3b:34:e2:74:87:e4:ae:bf:13:d8:90:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc
        Validity
            Not Before: Mar 20 13:00:40 2026 GMT
            Not After : Jun 18 13:00:40 2026 GMT
        Subject: CN=90672ec4-7a26-4300-a7a8-950a40a4f678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5c:5a:b1:31:91:27:50:ba:9a:8c:2f:3f:b7:
                    c5:f2:09:0c:b4:24:c2:f2:b9:af:22:42:9a:16:47:
                    b2:7a:07:d4:78:16:55:61:6c:a6:63:3b:be:cf:80:
                    e0:d3:da:81:71:53:30:27:4c:40:fe:03:34:e9:ac:
                    a7:2e:7f:ed:76:3a:df:d9:9c:f3:ab:5a:3f:4b:bd:
                    1a:db:2a:01:72:1a:16:8d:bb:ef:64:6f:f2:a0:17:
                    05:1b:0e:ea:a6:d2:aa:7b:e3:c0:71:ff:62:3d:ce:
                    df:fd:d5:22:f8:87:cc:87:bd:2b:1f:12:cd:35:8e:
                    0c:7e:7d:8e:06:bc:04:80:05:ea:06:01:6c:47:28:
                    91:46:75:66:25:cc:40:4a:dd:51:5b:e5:bd:e4:d6:
                    ee:4f:71:97:60:ce:1f:ce:49:4e:d1:7f:29:e7:ab:
                    db:0a:fe:76:53:c1:23:1f:f2:6b:9f:44:e7:e5:b0:
                    58:11:a7:fe:c3:b1:f2:a3:48:58:17:2c:38:4d:83:
                    b2:3a:cb:44:b7:28:ad:30:3b:bb:36:5e:1f:de:f8:
                    42:6f:97:0a:a2:96:af:fa:a7:47:1d:f7:04:06:ba:
                    b2:5d:5b:9f:51:55:37:2e:70:27:f0:47:81:5c:5d:
                    52:1a:b0:1b:38:5e:39:55:b7:9c:4e:bb:84:79:6c:
                    e6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B6:9A:21:F5:9F:34:D7:15:C9:3A:5C:37:5B:63:9E:D2:75:26:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/fcf6d0c3-b711-3a5d-8f07-01f7c69a84fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl

            X509v3 Authority Key Identifier:
                keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.72.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:46:e0:d3:27:62:56:fa:09:b4:8f:0c:9c:61:c0:da:a5:2e:
         a5:09:13:cc:93:87:5c:e0:9a:70:ee:4e:47:80:bc:b3:ed:61:
         d6:6c:77:dd:8b:86:8b:67:1d:2a:0a:9e:93:77:94:9b:af:e6:
         6c:44:27:19:bb:ae:4f:00:e3:17:7b:ac:0a:12:ce:b0:52:a3:
         c9:d8:24:c8:e2:37:9b:7f:f9:ec:04:e6:43:a4:e0:54:38:08:
         7f:0b:ea:88:4e:2a:be:7b:c2:9a:54:ac:e3:a2:34:5e:42:c3:
         a1:83:59:ec:ec:67:33:c2:f2:cf:92:40:bb:55:cc:fb:47:c2:
         8f:b4:66:2e:04:54:35:22:0a:35:a1:7f:da:82:7c:08:c8:10:
         f6:c9:ce:3b:ed:4a:16:3e:ef:dd:da:2e:3a:b1:c2:0a:76:5b:
         54:65:78:7a:4b:37:58:b6:d0:ee:fd:8b:23:a5:d7:81:31:b4:
         08:ea:ad:04:d0:3c:ef:3c:bd:bc:9c:8d:a0:2c:89:6e:9f:7c:
         ad:20:1e:f4:27:43:26:a8:c2:69:2c:e9:f1:be:ed:49:1f:af:
         f6:c9:ef:bc:41:f1:63:ec:f9:b9:7e:fc:3c:8c:9d:53:e9:00:
         d9:b8:39:50:1c:72:b2:3a:bc:e8:b9:a4:b7:81:06:cb:0c:47:
         5d:fb:b0:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 18:18:04 2026 by rpki-client