Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/30e7aa63-6b7d-36a0-8bc0-632b6bab02bf.roa
File:                     30e7aa63-6b7d-36a0-8bc0-632b6bab02bf.roa (raw, json)
Hash identifier:          pQRkoyZpYQIcpqQCsgwAxeJ4Q1ztOu7AI0253luOJR8=
Subject key identifier:   DC:04:12:FE:8A:42:65:72:8E:C8:9F:64:B7:ED:94:7A:08:B8:60:22
Certificate issuer:       /CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff
Certificate serial:       010D0C9F4328584D83CA99376C4B1BD5E9A45140
Authority key identifier: D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/30e7aa63-6b7d-36a0-8bc0-632b6bab02bf.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     46362
IP address blocks:        204.186.159.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:99:37:6c:4b:1b:d5:e9:a4:51:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=a9a9c5b7-838f-45ca-af92-b2acd76a0c32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:59:76:ea:91:ea:34:55:eb:6b:f8:78:e6:40:
                    fd:77:6b:7d:d5:4a:55:b3:17:40:f1:59:de:da:65:
                    0a:67:1b:6b:e0:8c:1e:4d:39:0e:ae:62:60:bd:fb:
                    82:5b:cc:2b:54:14:4b:a4:28:5d:15:cd:0a:33:fa:
                    b4:ca:a9:7f:7a:6a:66:00:8b:19:0a:01:59:2d:df:
                    25:98:ce:4b:53:5e:fa:4a:40:61:e3:91:77:20:c9:
                    5b:89:8c:28:9c:b7:f8:54:64:bd:f7:90:6c:c3:2e:
                    14:73:11:e9:bd:99:5c:4d:65:15:cc:c6:be:c4:e8:
                    3c:64:07:9f:5f:a3:4b:b0:82:df:d5:1d:68:1f:00:
                    ef:05:ea:c0:54:cf:10:c9:3f:88:f7:e9:ba:18:db:
                    12:a1:b8:48:db:ef:4f:dd:85:ba:76:7f:bd:f7:b1:
                    c2:be:ed:1a:ea:3b:3d:3e:cd:5e:dd:d7:5b:65:32:
                    90:b2:d3:62:9e:7e:f6:55:a8:f2:b3:fb:71:81:9d:
                    15:c8:38:91:7d:c4:83:a6:78:07:c1:86:1b:0d:36:
                    11:40:56:52:88:3d:1b:81:92:49:53:0d:b0:1e:40:
                    a1:89:54:17:9b:38:ff:da:d4:49:f3:36:d8:82:bc:
                    3f:57:d5:e7:f9:d1:b7:7e:5d:cd:eb:75:51:87:ec:
                    7b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:04:12:FE:8A:42:65:72:8E:C8:9F:64:B7:ED:94:7A:08:B8:60:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/30e7aa63-6b7d-36a0-8bc0-632b6bab02bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl

            X509v3 Authority Key Identifier:
                keyid:D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.186.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:5d:04:b2:6e:4a:9a:ab:ec:6a:08:72:0a:03:0c:7d:fe:86:
         a5:1c:43:5f:4b:70:a6:fd:01:4a:40:84:3f:08:37:ea:1e:ef:
         8c:b0:7b:d5:5e:b7:43:f4:56:cf:2e:63:b5:46:42:bb:9a:fa:
         ad:77:9d:51:1f:26:fa:fa:5a:5f:47:56:a5:a2:ef:3f:22:fd:
         26:36:c8:80:b7:ec:b9:55:ac:12:60:97:d1:c4:9f:f7:83:59:
         5f:28:a3:1a:93:43:20:40:20:17:c3:16:85:e1:22:70:28:90:
         3b:b7:30:d9:19:2c:ec:fe:09:17:0e:a1:85:f7:bc:5f:4f:32:
         c7:02:6c:43:b6:76:f7:63:98:3b:1d:7e:52:6c:5f:f0:5b:c0:
         08:3b:23:56:fb:a1:7d:a8:a0:ac:92:7e:4b:94:55:db:ec:b3:
         dc:68:a6:d2:b0:06:bd:5c:35:2b:b0:b2:e2:f6:d5:fd:7a:64:
         d3:71:eb:06:64:e3:94:8a:5f:ff:1e:3b:f3:a6:40:1c:5f:32:
         ed:60:f5:76:57:48:16:c6:de:26:71:1e:9b:3a:f4:e7:27:83:
         37:e4:17:2a:23:ed:e7:91:6c:29:e7:bc:c1:30:d9:ed:ef:fc:
         8d:b8:ef:0c:e7:b6:98:eb:e9:76:a8:25:e2:d3:ab:87:91:cd:
         60:9f:3e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:17:20 2026 by rpki-client