Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/769ed5e8-a7a0-3745-82c4-64c13709e4a1.roa
File:                     769ed5e8-a7a0-3745-82c4-64c13709e4a1.roa (raw, json)
Hash identifier:          P0IxGBBepoTBWFo2Ih3r+QCXTiKeW9ykGnYzbjD9Yag=
Subject key identifier:   53:CC:D2:E3:4F:D1:9D:FF:8B:3D:D2:25:3A:D6:2C:95:34:2B:9F:34
Certificate issuer:       /CN=341b7e96-a6f0-44d3-aecc-9294d6bccc78
Certificate serial:       010D0C9F4328584D07ACF3CADA8C8E227FB475C0
Authority key identifier: A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/769ed5e8-a7a0-3745-82c4-64c13709e4a1.roa
Signing time:             Mon 02 Mar 2026 02:00:31 +0000
ROA not before:           Mon 02 Mar 2026 02:00:31 +0000
ROA not after:            Sun 31 May 2026 01:00:31 +0000
asID:                     16509
IP address blocks:        45.223.189.0/24 maxlen: 24
                          45.223.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:07:ac:f3:ca:da:8c:8e:22:7f:b4:75:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=341b7e96-a6f0-44d3-aecc-9294d6bccc78
        Validity
            Not Before: Mar  2 02:00:31 2026 GMT
            Not After : May 31 01:00:31 2026 GMT
        Subject: CN=fea16482-6f25-49f8-b837-bb6f268b8020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:76:06:4c:4f:88:fc:fc:90:9f:d6:b7:11:6d:
                    1e:18:74:59:c6:e4:19:d6:7b:09:ae:e0:2f:9e:5c:
                    5a:35:f3:25:f9:47:f2:45:fe:50:40:af:bc:e7:41:
                    1a:95:14:ac:cd:c6:ae:17:17:11:13:cb:b8:b9:01:
                    a2:e8:0e:94:c5:ce:43:9c:c0:a4:b8:79:7f:83:3f:
                    8c:80:28:d6:f5:5d:97:7d:f2:3b:a5:c3:09:3e:08:
                    cc:47:30:28:ab:2b:7c:c2:8a:20:9f:dc:64:ca:bb:
                    61:b9:47:f3:55:f8:c4:8f:77:26:5e:a2:10:3c:df:
                    6d:55:81:2f:51:9d:ef:9b:29:6b:a8:44:5a:9d:6a:
                    a2:29:45:c9:90:da:38:86:27:43:4a:93:88:68:cb:
                    7e:78:b4:b4:f2:09:7d:43:49:1a:e6:de:3d:e7:47:
                    27:ee:04:d4:32:a2:1a:85:49:35:2f:7d:97:64:f9:
                    44:9e:63:c3:4a:8a:b7:35:e8:b9:53:cf:70:62:17:
                    cf:8d:3d:f5:df:3b:15:e1:37:2b:03:d7:9f:04:13:
                    b2:11:14:2d:4f:a0:80:84:5e:bb:f8:fd:cf:23:97:
                    d3:a2:84:4b:c6:64:9e:ad:ee:45:de:6f:4c:9f:3d:
                    d3:d3:58:d3:66:ec:d4:b5:67:8e:42:3c:01:f3:69:
                    a1:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:CC:D2:E3:4F:D1:9D:FF:8B:3D:D2:25:3A:D6:2C:95:34:2B:9F:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/769ed5e8-a7a0-3745-82c4-64c13709e4a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.crl

            X509v3 Authority Key Identifier:
                keyid:A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.223.189.0-45.223.190.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:73:9d:b9:92:fe:de:b1:f6:17:04:be:6f:13:d5:82:26:a9:
         ef:89:14:a0:01:09:2e:5d:f8:8c:d3:d3:c7:27:bb:5c:f4:e1:
         d7:35:c5:3b:bc:26:60:99:87:45:e7:f1:cb:76:2a:fa:76:5c:
         44:31:23:5d:60:fe:1e:28:bc:7e:c0:71:fb:b0:24:fe:3a:1c:
         f1:07:be:a6:1c:b5:31:59:f2:59:d6:4f:91:bd:54:b3:be:a7:
         8a:fc:61:82:d9:42:9d:df:c1:ae:e9:61:64:43:ae:17:fe:ad:
         e4:0d:3d:d3:12:e3:27:36:6d:87:06:ca:8b:2c:30:3a:22:a8:
         71:37:12:53:c4:84:f2:a4:fc:da:c7:07:38:4f:b3:9c:c6:ee:
         68:54:a9:0d:20:0d:85:a6:b6:cd:a1:d8:d4:19:14:01:e4:70:
         38:03:6c:cc:ae:1d:2d:31:ef:30:e9:b0:8f:08:d9:53:03:df:
         ff:7a:0a:bf:f6:64:95:92:e3:90:8f:16:e7:16:84:89:1c:60:
         e9:d0:be:d2:33:d9:ee:c1:75:76:7f:12:dc:fd:7d:f6:f8:f0:
         4c:aa:11:32:0c:91:75:3a:28:b2:e5:2a:af:c5:ba:67:a2:b9:
         08:9c:85:4a:2d:7c:23:3a:cd:02:d7:55:e8:48:1a:ae:c2:5d:
         7c:29:ec:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:01:25 2026 by rpki-client