Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c95ce3d-c60a-4a89-8fef-bc6c44d54f54/108f695e-beb6-3f8c-917a-4c9a702aff9d.roa
File:                     108f695e-beb6-3f8c-917a-4c9a702aff9d.roa (raw, json)
Hash identifier:          ggAc7a7nTiUmbI9f7DeKShOq0qL5fmd6OdA0HPVOInc=
Subject key identifier:   CE:07:43:F8:93:DF:2D:7C:0C:96:EB:1B:E4:B6:CB:49:AF:4D:7F:A5
Certificate issuer:       /CN=5c95ce3d-c60a-4a89-8fef-bc6c44d54f54
Certificate serial:       010D0C9F4328584DEC7B2C1378992D1B35E8E680
Authority key identifier: B2:93:8C:DF:4E:61:AC:DE:34:BC:B0:1F:BB:7C:32:EE:04:26:A1:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c95ce3d-c60a-4a89-8fef-bc6c44d54f54.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c95ce3d-c60a-4a89-8fef-bc6c44d54f54/108f695e-beb6-3f8c-917a-4c9a702aff9d.roa
Signing time:             Sat 23 May 2026 01:00:25 +0000
ROA not before:           Sat 23 May 2026 01:00:25 +0000
ROA not after:            Fri 21 Aug 2026 01:00:25 +0000
asID:                     16509
IP address blocks:        45.45.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c95ce3d-c60a-4a89-8fef-bc6c44d54f54/5c95ce3d-c60a-4a89-8fef-bc6c44d54f54.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c95ce3d-c60a-4a89-8fef-bc6c44d54f54/5c95ce3d-c60a-4a89-8fef-bc6c44d54f54.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c95ce3d-c60a-4a89-8fef-bc6c44d54f54.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ec:7b:2c:13:78:99:2d:1b:35:e8:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c95ce3d-c60a-4a89-8fef-bc6c44d54f54
        Validity
            Not Before: May 23 01:00:25 2026 GMT
            Not After : Aug 21 01:00:25 2026 GMT
        Subject: CN=30e27ddf-f5f9-4490-bf05-0469ae0c1e6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3e:d5:81:4c:60:37:59:39:7f:2a:3b:3b:26:
                    13:1e:7e:5f:3f:95:ad:17:5e:67:23:1e:63:d1:a5:
                    2c:32:40:3b:a2:7a:da:1a:f7:68:49:97:8d:ef:e0:
                    c0:a0:f7:b0:22:bb:99:01:6e:38:8e:37:ad:b8:61:
                    51:1a:c3:50:1b:24:44:72:cc:f0:53:e5:73:7f:b2:
                    fe:77:69:be:8b:d6:dd:17:95:b1:46:99:df:c1:8c:
                    1b:cd:d0:8d:02:b9:ca:56:ad:95:78:3d:64:d4:d4:
                    18:e9:82:b8:cf:09:6e:e9:37:71:12:66:75:19:8a:
                    0d:d9:c9:2b:07:7f:9f:68:54:8b:4c:22:96:31:8d:
                    3d:1c:4a:62:a5:31:ed:f2:f6:47:f5:b2:24:e9:ca:
                    d9:97:5e:3b:1a:22:5b:2f:81:9a:46:52:49:d1:82:
                    c0:c9:bb:e4:96:06:c4:26:3f:0b:22:16:1f:bd:e4:
                    32:33:67:a8:da:31:81:c2:c0:1a:f0:5f:03:f8:38:
                    af:10:c1:a7:28:1d:d1:da:d8:3a:28:29:a5:7e:14:
                    d1:e6:b8:2f:e8:0a:8b:a0:d5:b4:75:d4:57:6a:2f:
                    05:c4:dc:1d:8e:3d:e1:80:99:c1:32:dc:c0:5c:c1:
                    5e:ff:75:e2:b8:83:a3:e5:3c:4c:8d:88:e1:f8:4b:
                    f3:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:07:43:F8:93:DF:2D:7C:0C:96:EB:1B:E4:B6:CB:49:AF:4D:7F:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c95ce3d-c60a-4a89-8fef-bc6c44d54f54/108f695e-beb6-3f8c-917a-4c9a702aff9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c95ce3d-c60a-4a89-8fef-bc6c44d54f54/5c95ce3d-c60a-4a89-8fef-bc6c44d54f54.crl

            X509v3 Authority Key Identifier:
                keyid:B2:93:8C:DF:4E:61:AC:DE:34:BC:B0:1F:BB:7C:32:EE:04:26:A1:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c95ce3d-c60a-4a89-8fef-bc6c44d54f54.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:72:57:be:7f:ae:da:6c:bb:be:b2:4b:7e:c2:ad:2f:6b:88:
         d8:ea:e0:23:dc:79:31:6d:a6:18:c3:6a:a3:8b:db:b2:26:99:
         bb:d3:a9:86:a2:ee:cc:83:4d:2a:3e:27:e3:d0:fd:6d:5d:d7:
         b2:2c:88:53:25:d2:73:a7:a0:ed:b1:a7:c0:97:7b:9d:19:da:
         a3:d4:3b:7e:83:a0:8d:26:f9:c1:b4:d0:f0:70:8a:16:fd:82:
         be:34:58:61:fc:d8:ce:83:bc:03:9c:89:63:21:3d:ec:ca:d1:
         af:4c:35:ef:dc:7d:4e:87:01:9e:67:ec:7a:6c:4f:37:ee:59:
         e1:3e:15:6f:b8:2f:97:50:03:ba:48:b2:cd:d4:41:2c:55:4b:
         13:35:6a:7b:70:76:fc:28:28:62:bc:d0:2c:96:6d:c1:c8:17:
         80:d3:82:7e:eb:d6:21:82:d8:8f:f1:87:c3:52:ba:67:ab:a0:
         53:bb:26:cd:be:d3:bc:c7:57:53:90:49:7a:99:6d:36:da:45:
         c7:c1:2f:1a:39:b5:db:e2:9f:71:ac:ec:79:0b:e2:87:30:53:
         28:4f:e5:14:d5:be:81:e9:e9:d7:b4:8b:72:bb:85:6c:4f:62:
         ac:2a:fd:6c:5d:63:25:4f:ad:2d:88:a8:0c:2c:ff:8c:8c:a9:
         6a:97:49:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:49:42 2026 by rpki-client