Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0/45e141a8-6474-3bee-a118-fe212c38deec.roa
File:                     45e141a8-6474-3bee-a118-fe212c38deec.roa (raw, json)
Hash identifier:          LdCC9x4Ol/tG1inyirud4LmS9ppkJvee658DqURPPkM=
Subject key identifier:   EF:EE:57:AA:21:D7:44:36:E3:E6:59:E2:96:BC:02:20:88:FB:83:21
Certificate issuer:       /CN=1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0
Certificate serial:       010D0C9F4328584E9BE534DC54C0C1FEDA176EC0
Authority key identifier: 4C:9B:7D:C5:A5:41:46:A5:D8:C3:DF:CD:AB:68:10:70:3F:3E:E0:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0/45e141a8-6474-3bee-a118-fe212c38deec.roa
Signing time:             Fri 24 Jul 2026 21:00:12 +0000
ROA not before:           Fri 24 Jul 2026 21:00:12 +0000
ROA not after:            Thu 22 Oct 2026 21:00:12 +0000
asID:                     174
IP address blocks:        23.149.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9b:e5:34:dc:54:c0:c1:fe:da:17:6e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0
        Validity
            Not Before: Jul 24 21:00:12 2026 GMT
            Not After : Oct 22 21:00:12 2026 GMT
        Subject: CN=68019889-5830-4127-ab47-b0962de3186b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:bf:1c:5e:eb:70:55:fc:d0:42:78:3c:cb:41:
                    5f:60:3c:d0:a1:5b:f1:93:8c:66:c1:ac:ea:3b:1d:
                    cb:bd:93:7b:2e:56:52:87:fe:37:26:a3:45:64:65:
                    c3:58:63:97:90:94:ba:d8:1e:68:51:44:b0:bb:47:
                    94:61:e1:c3:9e:33:49:46:f3:b2:4e:6f:f6:97:0f:
                    47:d5:4f:7e:7c:db:13:75:3a:34:a5:f7:b6:3f:49:
                    be:9f:1b:cc:14:c6:f9:2b:2e:cc:9b:cd:71:eb:ca:
                    c4:1a:e7:4f:5f:29:fd:f0:60:58:6d:15:da:31:c2:
                    41:7c:09:12:61:19:f3:49:e4:6d:c4:a4:65:0a:39:
                    e3:b4:d2:2c:a2:3e:6e:cc:80:0f:8f:9a:11:5e:b7:
                    77:b0:d2:0f:16:a5:9e:cb:a3:9c:40:af:ed:a4:90:
                    cd:42:b5:07:69:8a:dc:19:a5:0d:f9:0c:5a:75:6e:
                    28:d3:68:b5:c0:46:aa:8a:fb:5a:28:a0:9e:1f:57:
                    17:44:88:bf:32:20:13:10:3f:ec:c3:de:bc:3e:a7:
                    aa:c3:c8:ac:24:4a:dd:b4:e0:75:1f:d2:9b:d8:f4:
                    1e:23:7c:da:0f:6d:1a:32:83:2a:de:c4:a2:16:f3:
                    c5:7e:91:05:32:37:81:46:30:ac:f2:e7:4f:d7:1e:
                    97:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:EE:57:AA:21:D7:44:36:E3:E6:59:E2:96:BC:02:20:88:FB:83:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0/45e141a8-6474-3bee-a118-fe212c38deec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0.crl

            X509v3 Authority Key Identifier:
                keyid:4C:9B:7D:C5:A5:41:46:A5:D8:C3:DF:CD:AB:68:10:70:3F:3E:E0:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:6e:7f:cd:c4:26:c5:80:5d:cb:be:9f:44:3e:67:04:3c:16:
         f7:a0:67:b4:49:df:68:8c:d4:9c:d1:f9:80:59:85:cb:b0:9d:
         5f:56:df:99:20:b6:3f:a6:a0:af:71:4a:17:c3:96:e9:dc:98:
         dc:c4:87:5f:ef:82:41:29:5a:50:9d:3f:9e:fe:70:83:ce:fb:
         10:e8:4b:82:1c:9a:81:c0:51:30:8e:67:fa:09:64:fa:21:74:
         48:27:bf:b9:13:41:ad:b8:70:ba:ae:ae:74:32:54:ac:ea:6b:
         76:f9:f6:dd:b9:a2:2b:a2:16:93:17:c6:b2:3e:e1:8a:e4:c6:
         6d:79:ba:e4:01:26:de:33:e6:f2:0b:b5:e4:b8:ee:56:5d:c4:
         a1:96:96:ec:77:92:ba:c7:e1:fe:c4:71:0a:1a:7d:d0:75:ba:
         43:85:37:a4:cb:8b:ae:00:e6:aa:c3:d1:72:0e:da:1b:05:e1:
         df:d4:47:0b:28:52:1f:0f:c0:73:a4:d0:18:be:49:4d:53:0c:
         e0:bd:b4:61:b6:c5:45:5a:9f:f0:54:1a:bb:3d:94:f9:3b:b3:
         98:df:78:f6:11:f4:53:02:a2:2d:52:f3:a7:f3:d6:70:ae:b7:
         69:17:9f:ff:b1:2a:05:86:66:52:21:5b:57:22:d3:e7:1c:ef:
         3b:5e:1b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:31:14 2026 by rpki-client