Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/5f4d50f2-be50-305a-8739-6a8bf1882be6.roa
File:                     5f4d50f2-be50-305a-8739-6a8bf1882be6.roa (raw, json)
Hash identifier:          iyl87FP/gteqS7LSi+yLN3MR+3d5x7SEvdohDP0evdk=
Subject key identifier:   E9:0A:12:9B:D4:45:D1:04:38:51:80:86:C8:94:CB:7A:6D:AF:5B:16
Certificate issuer:       /CN=341b7e96-a6f0-44d3-aecc-9294d6bccc78
Certificate serial:       010D0C9F4328584E9D4A6449E699801460CF5640
Authority key identifier: A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/5f4d50f2-be50-305a-8739-6a8bf1882be6.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     14618
IP address blocks:        45.223.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:64:49:e6:99:80:14:60:cf:56:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=341b7e96-a6f0-44d3-aecc-9294d6bccc78
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=8dd755c4-2832-44a7-8907-265cccdb081c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:59:da:f6:b8:f7:ed:b2:37:a0:40:97:4b:9c:
                    fe:fa:ca:fc:14:86:26:f5:98:a7:25:5f:4e:2a:47:
                    0e:b9:d1:6a:6f:49:86:cb:32:b7:72:1d:bf:46:a0:
                    f9:7e:da:96:1f:4e:9d:b0:d6:d6:19:36:a6:ea:82:
                    f4:2a:46:31:dc:e6:7c:f1:6e:23:b7:6b:60:4e:25:
                    ab:f1:1b:ba:19:2e:ed:a1:40:0e:dd:30:74:f8:2b:
                    32:14:1e:bf:7d:c5:e1:62:32:ee:51:1f:1c:23:94:
                    7c:5d:c0:6d:46:a9:81:80:d7:de:7a:05:74:bb:c3:
                    37:b0:a6:cb:3e:d4:7b:c1:25:73:92:7b:8e:0f:24:
                    a0:33:88:31:cb:1f:1d:02:a8:42:fd:af:78:f3:f0:
                    11:27:2c:8a:d9:ad:5b:15:bb:dc:15:18:c7:4b:11:
                    e4:cd:25:37:7b:ed:9d:81:75:f1:7c:17:48:a9:34:
                    02:38:05:66:9a:28:0a:d1:3f:f4:05:2f:02:4d:c5:
                    6b:28:7a:89:f3:2e:7b:1f:3e:98:88:f5:fd:0f:9e:
                    26:46:30:81:19:f1:9b:6b:b0:06:8e:ef:24:6f:50:
                    0f:88:e6:41:cb:26:66:cb:9a:df:91:ad:15:dc:83:
                    3b:12:c0:aa:72:08:4a:2f:63:bd:71:ff:1f:7c:48:
                    da:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:0A:12:9B:D4:45:D1:04:38:51:80:86:C8:94:CB:7A:6D:AF:5B:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/5f4d50f2-be50-305a-8739-6a8bf1882be6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.crl

            X509v3 Authority Key Identifier:
                keyid:A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.223.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:bd:67:7b:a4:f9:93:83:8a:f6:10:4c:e4:3c:22:08:df:79:
         b1:47:c0:77:5f:23:79:db:03:eb:65:23:c0:42:b4:12:ba:42:
         69:be:80:2a:bc:98:95:8d:31:36:49:88:83:12:f4:20:0d:b4:
         cd:69:8e:cc:11:89:25:e5:22:78:9a:33:9a:de:2c:3a:ff:78:
         72:bf:55:10:e1:74:58:68:c2:d1:12:af:be:b5:26:f0:36:c4:
         e9:01:ef:2b:2d:16:fb:04:ef:42:14:e4:f7:01:f2:a5:8a:46:
         c2:52:b8:b6:ee:ff:44:5b:4d:8e:9c:e7:42:e0:c0:2e:1d:be:
         a9:cc:df:b0:e1:52:cb:bb:f5:57:d3:d2:42:37:76:ee:27:0f:
         22:d6:75:f4:3c:42:da:f2:35:02:2f:e2:56:dd:0f:28:4a:19:
         35:ac:0d:36:81:23:55:92:a2:cb:c3:82:44:6f:12:69:32:36:
         d4:71:61:4b:5a:cc:c8:2f:2c:48:99:01:51:b7:e2:af:c6:42:
         85:ef:40:1a:f6:2f:3a:0d:40:37:2c:7e:11:d1:f3:0f:26:fb:
         23:31:98:a2:58:9b:88:9d:68:3e:0d:67:0b:5e:0e:aa:60:19:
         78:3b:b8:cb:43:4e:fb:b6:8e:18:3a:b7:ad:42:e5:82:ce:01:
         83:4a:62:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:11:53 2026 by rpki-client