Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/5150adf4-ed38-3af9-ac8a-044e10751fd4.roa
File:                     5150adf4-ed38-3af9-ac8a-044e10751fd4.roa (raw, json)
Hash identifier:          GdZMadjyTbD0nExbVsnjqGiUWPJphRQHkXcZtyqdSqM=
Subject key identifier:   CE:E6:A0:C5:CE:CA:A1:76:30:89:7B:00:BC:4B:5A:E6:A0:C4:E2:3A
Certificate issuer:       /CN=ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9
Certificate serial:       010D0C9F4328584E253F1DF9037129537DC7EFE0
Authority key identifier: 89:FB:57:4B:38:7C:D1:A6:73:70:36:7D:2D:E7:E5:A5:2B:B5:69:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/5150adf4-ed38-3af9-ac8a-044e10751fd4.roa
Signing time:             Fri 12 Jun 2026 09:00:11 +0000
ROA not before:           Fri 12 Jun 2026 09:00:11 +0000
ROA not after:            Thu 10 Sep 2026 09:00:11 +0000
asID:                     62553
IP address blocks:        142.248.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:25:3f:1d:f9:03:71:29:53:7d:c7:ef:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9
        Validity
            Not Before: Jun 12 09:00:11 2026 GMT
            Not After : Sep 10 09:00:11 2026 GMT
        Subject: CN=e22855c7-2936-46cc-9b65-567b95cbb4ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e6:f3:56:5a:95:46:1d:e2:da:c4:3b:32:40:
                    47:0b:b7:fa:87:ef:3d:a9:99:b1:f4:3b:d0:89:7c:
                    05:4c:ad:d7:da:54:89:4e:9d:34:06:1e:2b:73:e9:
                    df:19:81:45:ae:5f:be:ee:77:29:d0:23:ee:17:ce:
                    da:20:ac:aa:81:75:d8:3b:02:7f:96:44:39:be:2b:
                    0f:9c:57:56:dd:e2:cf:55:81:9d:0a:7c:3e:d7:0c:
                    10:bb:f5:06:be:3f:b3:92:d8:b0:00:27:af:47:9d:
                    90:c7:d9:8c:dc:e1:34:de:22:e4:77:dd:2d:7a:aa:
                    b6:1e:7b:13:d6:bc:66:a9:16:89:ad:81:85:c2:18:
                    58:0a:7d:d9:28:82:20:6c:a0:06:f3:70:dc:3c:6c:
                    ee:df:f5:aa:47:00:f6:ff:aa:fd:2a:14:4e:77:76:
                    1e:39:8a:28:64:5a:9c:c5:7f:3e:23:84:0c:ab:40:
                    8d:1c:c1:59:66:e1:1a:39:fa:eb:14:5d:bd:4c:20:
                    71:a9:31:07:76:8b:17:a2:7f:ed:b8:53:ed:cb:e4:
                    22:5f:e3:9d:b7:9a:89:5b:a2:a9:9a:d0:c1:e3:34:
                    bc:c0:f4:ea:76:a2:77:c8:95:31:9d:d8:6a:66:1f:
                    71:53:bc:42:97:f7:30:4a:e7:3b:23:88:3f:c9:20:
                    c2:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:E6:A0:C5:CE:CA:A1:76:30:89:7B:00:BC:4B:5A:E6:A0:C4:E2:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/5150adf4-ed38-3af9-ac8a-044e10751fd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.crl

            X509v3 Authority Key Identifier:
                keyid:89:FB:57:4B:38:7C:D1:A6:73:70:36:7D:2D:E7:E5:A5:2B:B5:69:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.248.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:a0:f3:af:57:dd:29:a3:f1:9d:a1:af:3e:3b:36:c8:2b:2c:
         ec:9d:08:80:ae:ec:18:87:4e:6c:26:4c:04:81:c1:db:97:b2:
         74:e1:54:3f:06:66:54:f2:4b:76:c5:f6:4c:80:11:99:ac:02:
         bb:60:85:5b:81:29:7f:fa:96:d7:38:4f:c8:c8:8c:5c:f3:05:
         75:5f:dd:52:94:55:62:d0:ea:e5:3d:ff:f3:b4:fe:51:37:e0:
         da:c7:c8:17:6e:bb:b8:3b:47:8c:a3:b6:57:3c:5c:5d:71:62:
         0c:c8:ac:e4:cc:d9:a6:4a:77:28:1f:2d:51:b0:e4:fe:d3:d4:
         36:f4:20:74:34:b2:79:b8:c8:0b:32:8c:87:6f:31:c2:40:12:
         95:b8:9c:9b:f3:d9:cb:1c:dc:bf:78:8f:ab:96:d0:b6:40:f9:
         74:ee:ab:50:fb:25:9d:ef:06:52:82:51:28:99:66:ef:f0:86:
         d0:e9:7d:46:4d:0e:f6:9e:7e:da:7c:44:55:06:9b:81:8d:c2:
         50:d2:20:55:8b:ce:ef:8b:0d:de:04:93:49:94:8b:29:62:2f:
         2c:58:b3:50:3c:f4:d4:c7:d9:d4:2d:dc:aa:df:5b:89:f6:2d:
         93:ff:11:98:36:d3:57:2b:15:c5:36:1c:c4:d4:b6:b3:17:29:
         32:09:5b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:18:44 2026 by rpki-client