Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/c78747c8-b26e-3828-8db3-8b21a46baf67.roa
File:                     c78747c8-b26e-3828-8db3-8b21a46baf67.roa (raw, json)
Hash identifier:          gPEpD+/v4rKIDXATuYKA+OFtjBbSj5DmqRk1mhpLKxk=
Subject key identifier:   AD:5F:02:71:B8:C4:96:AD:EB:A2:F9:E9:CC:3E:AA:92:F0:4E:01:A8
Certificate issuer:       /CN=48f8534f-57cd-45ba-bfa4-ce60842463a4
Certificate serial:       010D0C9F4328584F20F7AC4817A4459FE3435600
Authority key identifier: E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/c78747c8-b26e-3828-8db3-8b21a46baf67.roa
Signing time:             Thu 10 Sep 2026 13:00:12 +0000
ROA not before:           Thu 10 Sep 2026 13:00:12 +0000
ROA not after:            Wed 09 Dec 2026 14:00:12 +0000
asID:                     212477
IP address blocks:        45.59.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:20:f7:ac:48:17:a4:45:9f:e3:43:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48f8534f-57cd-45ba-bfa4-ce60842463a4
        Validity
            Not Before: Sep 10 13:00:12 2026 GMT
            Not After : Dec  9 14:00:12 2026 GMT
        Subject: CN=135a3c93-cabc-4b84-a581-69e86b204d08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:2f:a8:b5:a4:3f:96:b5:65:30:81:a7:98:50:
                    b1:dd:31:a6:15:7b:7b:28:6f:45:52:65:18:d1:b5:
                    80:aa:c9:7e:ce:c5:1a:3f:75:71:c9:4e:c8:3f:1c:
                    c8:44:ad:85:fa:a7:31:0f:d7:7e:0a:82:af:29:93:
                    a8:d7:2b:c4:38:24:dd:bd:a5:fd:31:f6:6f:00:4d:
                    42:2f:f3:30:a7:55:59:79:c2:16:f1:f8:b3:f5:df:
                    24:f5:3c:4a:9f:4a:00:9a:2e:32:a1:a4:88:06:5e:
                    a6:cb:a2:df:58:34:c0:ce:36:d5:c1:a8:b3:e4:26:
                    d8:de:81:01:f0:80:08:4a:b9:56:e8:ab:3f:ca:6f:
                    6b:24:d8:f8:53:04:27:f1:95:0c:9c:96:90:9b:dc:
                    b8:3b:ee:ba:fd:99:0a:0e:b4:21:2f:98:71:bf:2e:
                    ed:59:c7:1a:a0:9f:d7:65:46:9d:fd:2d:f0:8d:67:
                    dd:d7:09:c1:a4:86:94:6f:d3:f8:37:a1:4c:9b:1b:
                    11:34:be:44:a1:a9:d9:6f:9d:d2:83:42:3f:78:cc:
                    31:d4:80:38:ab:48:3c:65:89:91:31:0a:31:21:f3:
                    af:65:1f:62:7d:28:ef:f7:32:98:33:8b:bc:6c:c3:
                    72:48:39:dd:31:8c:57:f2:e0:ad:88:21:d9:ad:93:
                    97:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:5F:02:71:B8:C4:96:AD:EB:A2:F9:E9:CC:3E:AA:92:F0:4E:01:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/c78747c8-b26e-3828-8db3-8b21a46baf67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.crl

            X509v3 Authority Key Identifier:
                keyid:E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:34:77:2b:c9:02:72:6b:dd:59:17:79:6c:09:82:6a:c4:8b:
         b6:dc:ee:7f:9e:6f:e7:fc:6a:57:70:6d:c0:c3:d7:72:33:b6:
         d2:ec:e2:4b:f7:18:bf:cf:d5:d9:4f:1c:b6:e5:0a:74:48:6d:
         e4:20:11:7f:02:5f:75:b1:37:36:80:74:27:79:5d:d8:0f:ad:
         55:6b:30:eb:6c:13:18:b8:c3:23:8b:8e:c9:5d:d1:8f:c5:93:
         47:f5:d3:25:59:ce:37:47:85:8b:c8:3d:d2:42:42:04:12:8e:
         5b:14:9c:2b:40:f8:c5:c0:4c:bf:79:86:32:b2:72:e5:52:92:
         00:af:01:19:4c:18:66:82:42:23:b4:e7:eb:88:75:f9:50:28:
         55:25:30:f0:28:62:ea:da:eb:88:10:39:ce:58:bd:d4:35:42:
         bf:dd:fb:4b:6e:03:82:3f:aa:d5:64:18:4c:89:dc:1f:19:2d:
         d2:a6:b1:92:d8:a1:a7:04:a4:27:76:09:49:72:98:8c:11:a3:
         ae:e9:28:de:b2:7e:a9:87:b8:89:88:92:f3:66:cf:f8:1b:26:
         51:48:67:32:c6:8a:82:cd:62:cf:07:14:79:98:54:23:ed:90:
         a6:2e:3a:8b:0c:99:79:5c:24:25:f6:a2:1e:49:eb:d6:f2:97:
         f7:af:d4:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:16:34 2026 by rpki-client