Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/83e8d491-2f81-359c-b0e9-d2c3cead483a.roa
File:                     83e8d491-2f81-359c-b0e9-d2c3cead483a.roa (raw, json)
Hash identifier:          Oq/fc0JkBYEJiLdrKfm4OeVHfYkJLRp1+yaoVBMIU6M=
Subject key identifier:   B4:0E:D8:FB:23:49:1B:B1:C9:B4:A7:B9:38:BC:A2:31:40:F6:DA:99
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584E1E445C47C849708B2D9BBE80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/83e8d491-2f81-359c-b0e9-d2c3cead483a.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     33363
IP address blocks:        45.3.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:5c:47:c8:49:70:8b:2d:9b:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=581debe1-0ab9-4ada-b20d-27814b74fb04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0e:e2:75:29:73:4f:c4:92:1d:10:af:8f:dd:
                    0d:7a:eb:fb:37:44:d9:47:90:4d:27:1e:99:df:b2:
                    71:35:ac:d6:10:2c:8e:05:f5:21:d4:f8:58:a1:79:
                    4c:7a:51:a7:ec:e4:5e:7e:fd:3a:7b:35:e9:84:45:
                    c9:99:15:b0:ea:8a:64:c5:6c:38:b1:3a:50:dc:71:
                    28:3a:8b:45:c5:b9:fd:bd:dd:49:71:03:c2:51:5f:
                    7a:62:e0:aa:07:74:19:3a:d2:42:ff:7d:3b:82:fb:
                    7a:97:06:f8:2b:0c:88:62:4b:b6:ef:05:61:01:1b:
                    62:e3:71:fa:25:f3:94:51:9a:26:45:d2:ec:a8:1a:
                    96:93:ab:a3:0b:5d:c6:2b:00:53:ef:e1:9a:69:97:
                    3a:3b:c2:90:9d:fd:0d:c9:8a:7a:33:df:16:40:4f:
                    ee:52:21:00:ef:33:50:f0:13:52:fa:50:83:aa:40:
                    92:db:78:11:7f:f9:cc:a9:a1:5c:14:53:a2:51:56:
                    1e:60:86:23:fe:f4:a3:88:40:12:9b:c4:7c:c8:f5:
                    d0:29:a4:10:67:a1:f3:14:2c:b4:3d:bd:10:6f:11:
                    a1:39:6a:53:17:b1:2b:72:4d:9f:22:29:26:ba:35:
                    21:96:55:1d:c7:b0:4f:fb:25:f3:a0:46:a2:22:d7:
                    c9:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:0E:D8:FB:23:49:1B:B1:C9:B4:A7:B9:38:BC:A2:31:40:F6:DA:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/83e8d491-2f81-359c-b0e9-d2c3cead483a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.3.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:a8:5f:57:9c:c6:1f:83:ea:cb:41:de:e4:f3:fb:dc:1d:1f:
         0d:dc:a7:cc:48:71:71:06:c9:ff:ee:84:a3:65:b9:7e:ac:97:
         e5:63:6b:40:4f:44:27:90:2a:51:bb:f0:cd:c2:61:ff:86:23:
         2c:fa:10:2d:a8:8c:9c:76:f9:36:f0:99:07:c7:89:ee:57:56:
         09:c3:dc:7a:22:7a:3f:5e:dc:10:2c:2e:f6:49:60:6b:e6:00:
         b3:38:be:0f:aa:51:c7:b0:e4:96:92:12:4b:94:07:14:95:8a:
         41:0a:9d:d8:74:09:de:40:c2:43:ad:40:42:a5:33:62:f3:af:
         7e:d1:ae:8f:26:3e:67:a8:d8:6b:9b:45:06:c3:74:67:91:9c:
         bf:c6:b7:1a:b0:28:6c:80:48:3f:b4:2f:7d:dc:c3:ee:22:c0:
         72:98:ea:37:c3:d7:b4:7d:b2:03:68:ec:48:31:00:0d:7d:46:
         f3:46:ac:a5:cb:fc:03:15:06:12:30:fe:0a:d5:92:2d:d1:c7:
         55:cb:6e:11:42:96:85:76:90:de:b0:b8:28:6f:56:48:01:b1:
         0f:53:de:0c:5d:7b:83:8e:70:e2:dd:22:a7:51:c9:59:83:ca:
         85:5a:4d:c2:8e:aa:71:00:d4:db:15:70:1c:ba:fc:49:29:23:
         70:f2:53:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:22:41 2026 by rpki-client