Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/45172e0b-02b7-43fc-843c-98c0f87cafa4/bd345ea8-9834-36da-8b87-6f57dd26d4a0.roa
File:                     bd345ea8-9834-36da-8b87-6f57dd26d4a0.roa (raw, json)
Hash identifier:          BFUduy8zk+Vc2V+YsRim0wEm42alZVEjZJqMBR5n/lY=
Subject key identifier:   A0:AC:FB:8E:5A:48:44:BC:DD:E9:D2:2F:E1:8F:59:CB:6B:16:08:FD
Certificate issuer:       /CN=45172e0b-02b7-43fc-843c-98c0f87cafa4
Certificate serial:       010D0C9F4328584F331D32493164E6FCCE285A40
Authority key identifier: 6D:29:CD:58:DA:B1:10:CE:4D:CC:52:5F:D6:FD:71:2D:D8:DD:AE:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/45172e0b-02b7-43fc-843c-98c0f87cafa4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/45172e0b-02b7-43fc-843c-98c0f87cafa4/bd345ea8-9834-36da-8b87-6f57dd26d4a0.roa
Signing time:             Thu 17 Sep 2026 01:00:11 +0000
ROA not before:           Thu 17 Sep 2026 01:00:11 +0000
ROA not after:            Wed 16 Dec 2026 02:00:11 +0000
asID:                     33554
IP address blocks:        204.14.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/45172e0b-02b7-43fc-843c-98c0f87cafa4/45172e0b-02b7-43fc-843c-98c0f87cafa4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/45172e0b-02b7-43fc-843c-98c0f87cafa4/45172e0b-02b7-43fc-843c-98c0f87cafa4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/45172e0b-02b7-43fc-843c-98c0f87cafa4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:33:1d:32:49:31:64:e6:fc:ce:28:5a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45172e0b-02b7-43fc-843c-98c0f87cafa4
        Validity
            Not Before: Sep 17 01:00:11 2026 GMT
            Not After : Dec 16 02:00:11 2026 GMT
        Subject: CN=0457c0e3-2bc5-4aae-b272-9992ffead55d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:be:72:46:a1:65:99:30:89:ab:b1:fc:6b:5a:
                    82:c7:29:6d:d9:de:8c:3f:41:25:42:2a:06:1c:5e:
                    2a:b5:0c:42:72:6b:a2:3b:91:56:24:69:1a:64:7c:
                    18:58:69:40:c7:16:3d:fd:96:3e:bb:fd:d9:33:08:
                    fb:cb:f4:1c:2c:6e:39:84:cc:a6:e2:df:4b:cf:aa:
                    ba:7f:06:04:d0:75:d5:5d:9a:36:7b:b4:ee:26:6f:
                    88:0c:95:e2:15:1e:b9:bc:46:01:fe:6f:f9:e4:08:
                    34:17:df:96:7b:43:1b:c5:fe:a0:ca:d9:64:84:c0:
                    98:e9:ab:34:4b:c1:a0:32:4c:5c:14:b4:75:38:ec:
                    fb:6e:21:22:10:82:ee:3c:da:98:b0:60:64:eb:32:
                    ba:c1:31:19:cf:12:ba:01:e3:8f:90:d8:6e:82:f6:
                    49:e5:9c:b2:cf:9e:4d:8c:56:09:a4:f8:5d:67:37:
                    5b:4a:45:2b:87:a4:01:07:20:1d:f1:ad:15:cb:5f:
                    a3:70:b8:c7:43:06:7f:c7:22:3a:53:ef:43:f5:da:
                    07:cf:11:20:c1:ea:5f:4e:93:a5:84:c5:e3:6e:c6:
                    01:09:85:ef:0c:cf:1d:a0:9a:8a:da:2a:cc:f7:a7:
                    93:6f:17:a9:0f:e4:02:9f:3f:2d:e6:63:5d:43:44:
                    e1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:AC:FB:8E:5A:48:44:BC:DD:E9:D2:2F:E1:8F:59:CB:6B:16:08:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/45172e0b-02b7-43fc-843c-98c0f87cafa4/bd345ea8-9834-36da-8b87-6f57dd26d4a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/45172e0b-02b7-43fc-843c-98c0f87cafa4/45172e0b-02b7-43fc-843c-98c0f87cafa4.crl

            X509v3 Authority Key Identifier:
                keyid:6D:29:CD:58:DA:B1:10:CE:4D:CC:52:5F:D6:FD:71:2D:D8:DD:AE:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/45172e0b-02b7-43fc-843c-98c0f87cafa4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.14.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:94:67:79:a0:70:fc:2f:88:84:01:9d:1d:ef:b7:1e:ed:35:
         6e:9e:39:b4:03:62:6a:61:11:f4:c5:ce:2f:e1:7e:ff:b3:53:
         c8:bd:6a:64:8c:13:d9:2e:73:74:ef:6b:4d:3c:6b:96:9c:9f:
         aa:f1:e5:80:71:91:b8:6b:32:af:99:d1:00:bb:1b:de:48:90:
         13:b6:0d:51:ff:f0:8a:68:19:58:6d:84:94:a4:d4:d7:f8:dc:
         f1:b4:41:50:e2:82:aa:f5:d5:2d:5b:cd:37:bc:fa:22:49:94:
         ab:f2:fd:64:d6:cc:1b:ff:1b:e6:de:9e:02:3c:2a:c4:cb:bb:
         aa:3d:49:c2:5e:67:fa:50:5c:dd:56:4f:04:ca:c0:3e:2b:7c:
         79:e3:36:f7:c9:e8:02:c5:19:ba:df:11:02:df:b8:da:81:af:
         67:46:54:c1:57:bf:f0:4c:a5:0c:ac:56:00:37:06:cc:62:22:
         cb:2c:31:4f:ef:b7:78:e5:df:42:65:85:fd:51:c9:45:cd:dc:
         bb:a4:3b:c8:d7:22:d9:34:d2:28:bb:5d:56:11:97:6c:ed:15:
         12:a8:a2:69:b4:7c:77:f4:cd:b2:c4:87:9f:30:f9:db:d6:83:
         18:f4:ee:63:d5:30:68:f3:b7:5a:6c:e3:2a:25:23:e7:2f:e2:
         77:47:59:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:48:07 2026 by rpki-client