Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/6f7856c2-df7a-3840-b8a2-53d9ed510ac4.roa
File:                     6f7856c2-df7a-3840-b8a2-53d9ed510ac4.roa (raw, json)
Hash identifier:          0RPGiUrGtCcpcwL32NzMvQMvPcSa6ciw42MVV9hRidg=
Subject key identifier:   C5:49:97:5D:23:5B:F4:73:41:E9:F5:5A:CD:DE:8D:89:A9:D7:D7:06
Certificate issuer:       /CN=a90f006a-b108-4757-9dfd-b36376534658
Certificate serial:       010D0C9F4328584D59EA56169EDB59619017B100
Authority key identifier: 56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/6f7856c2-df7a-3840-b8a2-53d9ed510ac4.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     3356
IP address blocks:        45.43.4.0/24 maxlen: 24
                          45.43.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:56:16:9e:db:59:61:90:17:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a90f006a-b108-4757-9dfd-b36376534658
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=7160a692-2bba-4eb4-83f6-b7edea6a10a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:65:dd:a0:6b:13:bf:a4:77:e0:c9:39:d2:67:
                    4b:92:7e:fc:37:ca:16:07:4c:8e:3b:93:ad:8c:98:
                    99:59:24:0c:ff:20:5b:05:a5:a8:73:c7:ed:f8:4e:
                    e5:85:36:24:48:b8:22:6a:21:88:d3:5d:81:e4:09:
                    08:8f:9c:72:f5:bb:dd:ec:f0:20:f0:c4:fd:9a:9e:
                    7a:1f:52:76:0a:aa:11:17:41:a7:c7:b5:dc:09:76:
                    42:bc:b6:45:45:8d:23:76:26:9f:ef:23:d7:e3:37:
                    e3:f9:c1:4d:1d:4c:89:44:fa:e4:d2:37:76:69:ec:
                    00:61:37:e1:ba:4f:24:61:ae:7e:4c:f3:b0:8d:0b:
                    fc:b0:d0:74:65:d1:e5:c9:89:70:ff:42:4c:26:2a:
                    42:9e:d7:a4:35:47:b9:2b:22:b4:f7:dc:86:7d:92:
                    b9:12:14:74:5b:d3:9d:18:95:d8:ea:bb:c1:2e:fb:
                    80:29:36:f1:6b:07:81:d4:70:20:ea:30:31:ca:41:
                    ef:4b:68:dc:52:21:28:4e:c7:75:b8:2e:1e:d5:be:
                    56:c2:d7:d9:89:04:74:b8:4f:55:56:7c:08:16:b8:
                    02:d3:dd:d9:46:ae:b3:96:6d:a9:b1:2e:58:21:f9:
                    da:82:9f:cb:13:e5:07:b5:61:a7:a4:09:6a:b2:1b:
                    9d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:49:97:5D:23:5B:F4:73:41:E9:F5:5A:CD:DE:8D:89:A9:D7:D7:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/6f7856c2-df7a-3840-b8a2-53d9ed510ac4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl

            X509v3 Authority Key Identifier:
                keyid:56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.43.4.0/24
                  45.43.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:93:eb:07:85:5e:26:f1:59:67:43:e1:22:60:62:07:8c:36:
         75:ee:92:c6:f6:0a:cd:61:d3:cf:b9:4e:0d:3c:7a:22:e8:07:
         63:b3:ac:64:56:c8:f6:e0:bd:00:e9:04:25:93:c6:e5:b2:20:
         63:08:74:0a:18:61:84:63:b8:e9:bd:90:10:96:2d:e5:b5:26:
         c8:1d:cf:13:0a:d7:67:1c:09:bd:cd:08:a4:02:f4:f4:79:90:
         26:70:4b:28:ec:ea:69:04:4c:e0:78:07:aa:0b:e1:72:ea:eb:
         d9:d4:1d:d2:c5:6b:4f:50:15:c9:03:e9:9d:20:dd:6a:c7:fd:
         ad:79:80:c2:e2:5e:b4:d7:11:10:7d:c5:62:92:78:4b:b6:25:
         6d:f5:da:d7:f0:bb:c1:a7:51:6a:8e:2c:30:db:d0:73:bd:10:
         3d:38:f4:1d:b3:98:87:05:22:dc:c8:3f:16:ed:8e:a4:c3:b3:
         1d:d7:2c:fa:a3:ac:e7:c5:d1:e1:ae:a6:30:38:6c:00:04:15:
         92:60:65:b1:49:c3:b5:ac:15:56:38:59:b7:82:35:59:ee:a0:
         b9:bb:0f:2a:58:eb:e5:2a:2d:a4:4f:1c:20:e7:e1:c2:6d:4b:
         b9:74:8e:82:b4:bd:bf:66:75:8d:f8:01:ab:61:44:d8:09:a7:
         ed:1d:2e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:07:50 2026 by rpki-client