Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/af713927-f216-3f4d-b155-b580dc829f81.roa
File:                     af713927-f216-3f4d-b155-b580dc829f81.roa (raw, json)
Hash identifier:          UHa4yDU6Lk44tRwg5ZAsSxf1qZFb8wt3zGVWk1TuGp8=
Subject key identifier:   D5:3E:EE:F3:2B:BE:5B:19:FD:45:75:7F:70:5F:2C:0E:B1:8E:29:5B
Certificate issuer:       /CN=f59a5af4-2483-44fd-8539-cacfd54edc45
Certificate serial:       010D0C9F4328584E18AF060DCDC621B024098B80
Authority key identifier: 6C:D3:07:8B:48:B6:21:C8:CB:18:75:C5:23:65:DE:84:63:AF:1B:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/af713927-f216-3f4d-b155-b580dc829f81.roa
Signing time:             Sun 07 Jun 2026 21:00:12 +0000
ROA not before:           Sun 07 Jun 2026 21:00:12 +0000
ROA not after:            Sat 05 Sep 2026 21:00:12 +0000
asID:                     54980
IP address blocks:        45.42.128.0/22 maxlen: 22
                          45.42.128.0/23 maxlen: 23
                          45.42.128.0/24 maxlen: 24
                          45.42.129.0/24 maxlen: 24
                          45.42.130.0/23 maxlen: 23
                          45.42.130.0/24 maxlen: 24
                          45.42.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/f59a5af4-2483-44fd-8539-cacfd54edc45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/f59a5af4-2483-44fd-8539-cacfd54edc45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:18:af:06:0d:cd:c6:21:b0:24:09:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f59a5af4-2483-44fd-8539-cacfd54edc45
        Validity
            Not Before: Jun  7 21:00:12 2026 GMT
            Not After : Sep  5 21:00:12 2026 GMT
        Subject: CN=b68b0220-0978-4aaf-a206-2ecbf5a30a5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:fc:fe:e1:e8:64:12:6e:e2:9b:4e:2c:59:1d:
                    56:ae:fd:75:07:1b:a5:35:d3:fc:1a:02:12:8f:00:
                    7c:d6:8b:53:7b:ef:56:d8:be:b4:56:42:bf:0a:9e:
                    41:3f:08:2b:dc:de:cb:2d:16:8c:0d:3a:92:06:13:
                    5f:cc:31:be:3d:48:62:d7:37:73:dc:a4:04:4d:0f:
                    27:7d:db:eb:9e:b2:b6:94:32:50:db:cb:3d:c7:4d:
                    45:a6:39:15:3f:24:54:5c:88:27:96:6f:72:dc:dd:
                    a9:a4:e3:31:3e:5b:1e:bb:96:fa:f8:51:44:12:1c:
                    87:7f:38:13:06:2b:0e:40:b2:2e:71:87:48:5c:72:
                    7f:9b:2c:ee:d0:db:6a:6f:90:6b:c9:d9:e0:f0:b8:
                    e6:33:2c:f1:08:15:9e:02:51:4d:3f:7b:10:c3:28:
                    64:51:cb:06:dd:66:18:7e:f0:35:f5:31:16:e9:99:
                    89:96:0c:ee:95:88:61:06:5f:50:68:e8:92:50:16:
                    be:d1:8a:a4:4d:f8:88:e6:44:2f:d7:be:d5:bc:a8:
                    66:93:12:c8:38:2e:c9:d4:b9:7a:c3:84:03:0d:59:
                    c9:14:6d:99:d0:dc:a0:20:0c:44:3d:20:f3:61:9f:
                    cf:cf:71:00:7b:66:e2:d0:cc:39:7d:3f:ab:f5:61:
                    0d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:3E:EE:F3:2B:BE:5B:19:FD:45:75:7F:70:5F:2C:0E:B1:8E:29:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/af713927-f216-3f4d-b155-b580dc829f81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/f59a5af4-2483-44fd-8539-cacfd54edc45.crl

            X509v3 Authority Key Identifier:
                keyid:6C:D3:07:8B:48:B6:21:C8:CB:18:75:C5:23:65:DE:84:63:AF:1B:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:dc:48:ce:eb:18:f3:62:2e:26:e8:ad:60:ec:92:26:9e:89:
         6f:77:22:91:e1:02:ea:6f:14:03:6b:ad:35:6e:31:7c:e0:76:
         a6:6b:82:e3:c3:08:fc:f2:3d:4a:bc:04:94:5e:d3:30:51:c3:
         4b:27:f0:da:bc:c6:b4:65:b1:af:c6:dc:04:ad:d5:3a:13:1d:
         e2:87:eb:f1:f7:4d:e4:70:4c:cb:35:df:55:5e:25:40:cd:f8:
         8f:3b:43:8f:5d:52:47:ed:60:e9:53:e8:3d:e1:cc:d0:fe:3a:
         95:d3:92:15:c4:62:b9:6d:6d:b3:0d:3d:f6:0a:96:c6:45:3f:
         a9:30:71:ec:57:93:f2:ea:24:e5:30:9b:89:a2:68:2c:06:5d:
         79:1a:19:58:b0:00:b5:7b:05:e7:c6:4c:2e:bb:0c:e7:76:d8:
         a4:1b:9d:53:52:42:f4:ce:e3:6e:77:e3:38:a0:bc:6e:c1:f4:
         57:2f:b9:a1:24:ef:97:75:6d:e3:3a:e5:aa:3b:e9:ac:c3:93:
         62:b9:3e:ad:08:b7:c9:29:a9:7f:58:1a:1d:fd:95:2e:6b:e0:
         4f:90:e7:33:16:45:a9:52:ad:26:b5:3c:ae:49:44:6b:89:b7:
         81:93:87:a3:04:6d:0a:82:2d:33:cc:28:11:ec:61:a1:e4:72:
         78:09:6b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:41:38 2026 by rpki-client