Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/07d0caea-cf07-3bc7-8a49-57c97670810a.roa
File:                     07d0caea-cf07-3bc7-8a49-57c97670810a.roa (raw, json)
Hash identifier:          SbRUTzPuThuE7Yv7WkOSRCz9F3yU6zVpGTUogwhoNSU=
Subject key identifier:   D5:F1:AF:76:AD:B6:1D:AD:F1:95:A4:1F:68:AC:04:75:5F:39:C1:EA
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584E9A7FC310C5045CA41E6E8D80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/07d0caea-cf07-3bc7-8a49-57c97670810a.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     22516
IP address blocks:        45.40.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:c3:10:c5:04:5c:a4:1e:6e:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=b78c3924-469d-4c6b-bc99-354f9ce5f246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:aa:c3:6c:94:b4:7b:01:d5:4e:a4:fd:4c:db:
                    6b:00:68:ab:a6:3b:6b:44:f3:02:0a:d7:db:e3:bd:
                    9c:c0:84:82:17:39:2b:bf:3d:d1:b6:97:3d:db:11:
                    b6:a0:b0:13:cd:c2:6f:22:ad:55:f9:5d:5a:3b:17:
                    24:3d:f3:29:f4:34:09:d3:86:8e:9a:2c:dd:56:83:
                    b9:3d:df:e7:82:42:72:53:a2:a2:47:63:67:b3:5f:
                    f4:2e:34:e8:a0:77:be:6a:64:c8:4a:85:7e:d1:34:
                    ec:39:21:88:6b:b2:32:00:a2:af:0a:cf:83:9e:6e:
                    db:49:a3:ce:b5:7f:d6:10:7c:80:b3:2c:7a:e4:17:
                    63:ca:a7:c5:56:1b:11:ff:95:65:fa:a3:e5:53:d6:
                    d2:df:89:78:8f:5d:b5:23:c9:1a:7b:b9:c1:9a:bc:
                    4c:96:06:46:86:7b:60:c5:8c:63:49:3e:c6:d2:67:
                    04:bb:c7:32:39:1f:fa:52:ba:c7:7f:d4:2b:2e:74:
                    90:72:bd:11:6b:7c:ac:a1:01:72:2d:95:63:56:a0:
                    14:d2:d9:49:ab:45:ab:43:e8:d3:95:e5:f3:94:4c:
                    8e:90:d2:f3:44:bb:37:d8:27:77:1d:9f:4b:d5:4c:
                    f6:06:20:c6:fb:8b:48:f6:74:e9:54:49:6c:b7:15:
                    b0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:F1:AF:76:AD:B6:1D:AD:F1:95:A4:1F:68:AC:04:75:5F:39:C1:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/07d0caea-cf07-3bc7-8a49-57c97670810a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.40.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:ae:6b:a0:6b:22:47:ff:f8:0c:47:9f:78:9b:b4:54:d4:07:
         92:69:c3:4d:b0:0a:06:c4:20:51:8c:ec:85:ec:24:f3:af:ee:
         40:36:99:37:75:15:d5:8d:67:7d:6b:d6:51:58:23:44:fc:84:
         c4:da:fb:d9:a3:d3:c3:98:eb:a6:ac:25:0d:d1:f5:05:ab:10:
         57:a8:e4:9f:07:db:9f:87:17:3a:50:0d:60:da:6e:dd:87:5c:
         f1:e1:16:03:1c:45:78:c4:bf:87:40:fa:2d:6f:a8:47:43:9e:
         37:7b:5b:c7:58:8d:43:08:c0:34:c3:c9:14:5d:54:da:02:3c:
         68:a8:e7:20:1a:e5:87:8f:d1:f7:f4:44:80:e5:5e:98:d6:23:
         bf:72:2c:f2:1a:f1:57:99:d4:e7:e7:3e:ca:b4:49:0c:6a:a4:
         14:93:df:aa:41:b7:a0:e1:2c:23:73:f6:de:e0:0d:2e:96:00:
         0e:a0:cd:6e:b0:52:3b:c8:44:90:fd:1d:56:8d:62:18:80:65:
         25:84:41:e3:16:26:dd:35:8f:d9:3c:98:72:31:d0:5d:8e:0c:
         ea:ae:ee:6f:dd:f9:eb:04:5a:fb:28:c0:b7:39:07:2d:01:89:
         a6:6d:b8:5a:c5:7f:69:72:21:16:a3:26:38:1d:3d:b9:2e:dc:
         a4:22:6a:0d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6af8MQxQRcpB5ujYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI2MDcyNDA5MDAxMloXDTI2MTAyMjA5MDAxMlowLzEtMCsGA1UEAxMk
Yjc4YzM5MjQtNDY5ZC00YzZiLWJjOTktMzU0ZjljZTVmMjQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwarDbJS0ewHVTqT9TNtrAGirpjtrRPMCCtfb
472cwISCFzkrvz3Rtpc92xG2oLATzcJvIq1V+V1aOxckPfMp9DQJ04aOmizdVoO5
Pd/ngkJyU6KiR2Nns1/0LjTooHe+amTISoV+0TTsOSGIa7IyAKKvCs+Dnm7bSaPO
tX/WEHyAsyx65BdjyqfFVhsR/5Vl+qPlU9bS34l4j121I8kae7nBmrxMlgZGhntg
xYxjST7G0mcEu8cyOR/6UrrHf9QrLnSQcr0Ra3ysoQFyLZVjVqAU0tlJq0WrQ+jT
leXzlEyOkNLzRLs32Cd3HZ9L1Uz2BiDG+4tI9nTpVElstxWw5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNXxr3atth2t8ZWkH2isBHVfOcHqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvMDdkMGNhZWEtY2YwNy0z
YmM3LThhNDktNTdjOTc2NzA4MTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSh7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALOua6BrIkf/+AxHn3ibtFTUB5Jpw02wCgbEIFGM7IXsJPOv7kA2mTd1
FdWNZ31r1lFYI0T8hMTa+9mj08OY66asJQ3R9QWrEFeo5J8H25+HFzpQDWDabt2H
XPHhFgMcRXjEv4dA+i1vqEdDnjd7W8dYjUMIwDTDyRRdVNoCPGio5yAa5YeP0ff0
RIDlXpjWI79yLPIa8VeZ1OfnPsq0SQxqpBST36pBt6DhLCNz9t7gDS6WAA6gzW6w
UjvIRJD9HVaNYhiAZSWEQeMWJt01j9k8mHIx0F2ODOqu7m/d+esEWvsowLc5By0B
iaZtuFrFf2lyIRajJjgdPbku3KQiag0=
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:41:07 2026 by rpki-client