Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d/6d392fb4-8a7d-38b4-8efa-97939fa91b8d.roa
File:                     6d392fb4-8a7d-38b4-8efa-97939fa91b8d.roa (raw, json)
Hash identifier:          eNVpbAPPl1mjPSw2E+ujy0fQYlRqnz1qh0O/i8dm448=
Subject key identifier:   13:BB:DF:1E:65:9E:5A:50:54:28:A6:83:A6:38:39:08:3A:A5:C1:04
Certificate issuer:       /CN=45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d
Certificate serial:       010D0C9F4328584D7A0534863CF72FD785EB37C0
Authority key identifier: 64:73:F4:FE:C0:A9:D9:3A:6F:E6:79:B0:3C:F7:87:18:87:79:11:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d/6d392fb4-8a7d-38b4-8efa-97939fa91b8d.roa
Signing time:             Sun 12 Apr 2026 01:00:24 +0000
ROA not before:           Sun 12 Apr 2026 01:00:24 +0000
ROA not after:            Sat 11 Jul 2026 01:00:24 +0000
asID:                     40100
IP address blocks:        208.68.156.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7a:05:34:86:3c:f7:2f:d7:85:eb:37:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d
        Validity
            Not Before: Apr 12 01:00:24 2026 GMT
            Not After : Jul 11 01:00:24 2026 GMT
        Subject: CN=793f06fb-6d2a-4078-b80e-07fcad67ba82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:60:95:d1:37:49:81:9a:2d:af:fc:01:ed:b6:
                    a3:1d:5c:3c:13:3b:53:e3:92:3d:d2:c7:b5:fb:bc:
                    ab:2d:b4:2d:88:ad:e8:26:95:e2:10:af:82:c4:99:
                    71:7b:d1:66:21:cb:97:b4:ff:45:cb:55:0f:95:28:
                    01:3e:81:5f:06:17:f7:17:84:c9:b3:c6:b4:7a:7e:
                    e9:40:4d:5c:d3:12:3d:78:2b:81:cf:0f:4d:b4:0f:
                    dd:d4:d7:dd:75:d1:ea:49:37:ff:8c:e7:be:6f:75:
                    68:cd:1f:10:0e:2a:8c:4d:bc:a2:e0:24:c0:56:ce:
                    2e:a7:e2:21:ec:ce:5a:cb:6c:c9:40:d9:d0:98:46:
                    ef:44:ae:fd:fb:f9:0e:ac:b6:a1:22:8e:89:45:fc:
                    64:d7:f2:05:60:51:a5:5b:bf:86:ff:26:4a:50:00:
                    34:74:a7:40:08:c1:2c:21:0a:7d:69:0d:da:25:c7:
                    4c:a1:67:38:88:be:84:d9:21:48:69:77:b7:51:94:
                    ed:70:6f:8c:fc:55:ba:fc:2d:c5:5b:ed:eb:0c:ba:
                    a3:4f:b7:f5:e1:c3:1a:ee:44:4f:bf:8a:89:38:33:
                    45:e9:3e:63:71:94:20:96:de:7c:c5:46:e7:48:74:
                    cc:e3:bd:1a:68:4c:fd:da:95:62:b9:7c:f0:3a:3a:
                    25:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:BB:DF:1E:65:9E:5A:50:54:28:A6:83:A6:38:39:08:3A:A5:C1:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d/6d392fb4-8a7d-38b4-8efa-97939fa91b8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d.crl

            X509v3 Authority Key Identifier:
                keyid:64:73:F4:FE:C0:A9:D9:3A:6F:E6:79:B0:3C:F7:87:18:87:79:11:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.68.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:76:52:b5:33:bc:4d:bf:0d:ad:28:6b:9e:40:2f:40:e5:00:
         b6:38:d5:4b:59:10:f0:f4:cf:51:5d:1a:72:78:8d:c0:e7:fb:
         3c:fa:71:b2:76:11:4c:71:07:37:91:9a:45:df:4c:82:af:23:
         a3:f0:ca:20:bd:22:36:fa:ac:57:6c:5d:3b:ca:7b:9f:89:11:
         24:23:a8:71:7c:37:60:82:18:ae:8c:c9:50:df:bd:f0:ce:ce:
         a1:4c:97:6e:73:02:c0:81:91:35:37:59:ee:6e:ec:0b:73:4b:
         2e:af:97:c6:3f:4d:97:be:49:e6:09:d4:ee:3a:bb:ce:33:59:
         1a:74:14:b5:ca:13:41:79:39:63:8e:a1:73:ac:d4:77:ab:f4:
         90:73:64:8d:4e:b9:09:c3:7e:60:b9:81:a6:8e:04:21:92:41:
         55:cf:51:39:7b:c6:9c:1b:a1:b1:58:73:a5:cb:a3:8c:36:0e:
         52:cf:85:27:46:cb:4a:b4:c5:85:a9:e8:84:f6:dc:05:c5:df:
         7e:5d:92:06:44:e0:8f:e9:1d:a2:01:84:a1:6c:08:5d:d5:4a:
         36:5e:e8:20:ae:0a:5d:67:64:27:4a:03:d1:42:fe:fe:d4:90:
         ca:5a:de:f4:47:81:e5:0a:74:a3:96:8b:66:bd:0b:1b:60:96:
         24:7c:c9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:15:40 2026 by rpki-client