Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/cda0fa5e-6d5d-3768-a3da-28c3e7b942f9.roa
File:                     cda0fa5e-6d5d-3768-a3da-28c3e7b942f9.roa (raw, json)
Hash identifier:          1Y53RlOLBlHR0qtqK/pPS4g6t6JAdA1zIlAmK9N203o=
Subject key identifier:   B8:4E:4B:5A:3D:4B:47:35:8C:92:F4:F0:49:41:5D:29:8F:A7:30:7A
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F4328584F225D01A673DA99140EFDB600
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/cda0fa5e-6d5d-3768-a3da-28c3e7b942f9.roa
Signing time:             Fri 11 Sep 2026 01:00:12 +0000
ROA not before:           Fri 11 Sep 2026 01:00:12 +0000
ROA not after:            Thu 10 Dec 2026 02:00:12 +0000
asID:                     54540
IP address blocks:        144.168.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:22:5d:01:a6:73:da:99:14:0e:fd:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Sep 11 01:00:12 2026 GMT
            Not After : Dec 10 02:00:12 2026 GMT
        Subject: CN=0cf35b99-4977-444b-8c66-de1c15d158f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a8:de:b2:c9:94:5b:9f:20:9c:e9:75:b4:3b:
                    71:28:e8:d9:94:b1:74:f2:1e:e0:4f:36:a2:54:17:
                    22:34:bf:16:42:b9:ac:6f:b6:26:f8:64:9f:78:1b:
                    69:6c:8f:6e:9a:d3:40:03:60:ba:ab:40:a5:c7:23:
                    c6:55:44:5e:68:ad:ce:74:71:a9:3a:5b:d1:7d:68:
                    21:82:e7:94:05:4b:a9:fe:c9:42:49:b3:65:8e:2f:
                    52:5b:c1:62:9a:38:07:bc:20:4d:e3:bc:c6:10:ad:
                    af:6f:9b:39:04:8d:67:9d:5f:94:80:42:9e:9e:cd:
                    4d:15:6f:db:49:70:92:25:c8:0d:ac:e7:1c:47:0f:
                    bd:b0:3b:c9:fb:76:c4:8e:01:20:d7:cb:29:06:af:
                    1c:6e:2d:63:1b:de:17:37:bb:41:3f:4f:d1:5b:6a:
                    9d:21:63:8f:5a:ee:1a:23:3b:bb:f2:f0:b2:63:ca:
                    9c:d9:50:d4:6a:38:65:f1:a0:38:57:2f:5c:68:98:
                    99:fe:07:1f:c9:71:40:b9:d8:72:29:e8:bd:7e:65:
                    f6:2a:88:e0:36:69:87:12:fa:fc:e0:88:02:8a:98:
                    fd:8f:6b:ce:cd:b8:3c:b7:81:5b:b0:30:f5:fa:61:
                    b9:7c:79:c3:74:4e:24:00:8f:56:89:a7:a4:ae:b0:
                    71:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:4E:4B:5A:3D:4B:47:35:8C:92:F4:F0:49:41:5D:29:8F:A7:30:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/cda0fa5e-6d5d-3768-a3da-28c3e7b942f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.168.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:48:8c:98:3a:3f:f6:ef:a9:9a:24:74:a5:d0:b2:32:c4:66:
         52:f1:d8:53:a8:9c:41:06:09:6a:5d:38:84:0c:e1:9c:57:35:
         99:9d:13:13:65:ba:83:18:76:dc:b5:54:5f:dc:7f:db:6c:7c:
         86:e5:06:04:69:f7:72:a2:7a:af:75:ce:96:5c:1c:b7:51:93:
         74:0f:ea:3a:1d:64:48:09:97:25:fc:d0:7d:26:07:be:d9:42:
         22:0b:dd:c8:f4:be:bf:57:1b:c6:be:8f:bb:4a:21:52:93:81:
         c9:ff:bc:8d:c7:9f:20:3b:e2:31:53:89:7e:f4:c5:00:5a:f6:
         d3:2e:85:25:52:42:39:5c:08:a1:7f:01:9f:48:7d:ad:78:a4:
         24:06:32:d0:74:9d:45:42:03:36:08:0a:a1:96:b4:9d:d6:ea:
         d5:b3:e3:22:34:fa:7a:8b:b7:50:f2:5f:9f:80:92:cf:67:17:
         af:80:01:39:86:4d:9a:20:51:dd:37:9a:5e:f7:d9:99:46:68:
         2a:94:eb:90:70:27:b0:33:ef:85:2d:d7:6f:01:ac:5b:09:ba:
         c0:f0:f7:cc:ee:d8:a4:de:20:15:a9:39:a3:f8:03:ac:70:10:
         07:38:24:f6:4e:f5:4f:f0:d9:ec:db:9f:06:27:c1:ca:a2:d0:
         5e:81:0d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:10:46 2026 by rpki-client