Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/a0e9f1ad-89ec-3b41-a12c-8832a4094045.roa
File:                     a0e9f1ad-89ec-3b41-a12c-8832a4094045.roa (raw, json)
Hash identifier:          onnrf6f0jAvxBCiSObNHydAJROcSgiRgPT5PkGZGtw4=
Subject key identifier:   B6:19:0D:2E:05:6B:9B:B7:E9:46:7F:AA:A5:94:84:94:BB:B7:87:61
Certificate issuer:       /CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969
Certificate serial:       010D0C9F4328584D6AAA68D84FB5509F1508CBC0
Authority key identifier: DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/a0e9f1ad-89ec-3b41-a12c-8832a4094045.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     14618
IP address blocks:        45.42.136.0/24 maxlen: 24
                          45.42.137.0/24 maxlen: 24
                          45.42.138.0/24 maxlen: 24
                          45.42.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:68:d8:4f:b5:50:9f:15:08:cb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=7ff046b0-aaae-45d8-b0d6-bb447ddb5adb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:5f:5a:21:20:e5:56:d0:8a:9e:57:e9:c4:42:
                    08:12:d6:8f:a0:64:25:a5:46:f6:75:cd:6b:ea:6e:
                    45:2e:b4:b0:2b:23:6a:19:1c:f9:90:81:07:9d:56:
                    1a:87:b0:e8:59:8d:2f:42:54:6a:3a:45:9b:36:bc:
                    9e:7e:6d:62:2c:f9:e1:34:0d:d7:95:71:08:32:84:
                    e0:55:29:2a:fe:32:e0:b7:a2:1c:cd:7e:3f:74:b6:
                    da:71:d6:d4:5e:0e:54:82:0e:39:32:c8:c0:54:54:
                    7f:e2:2c:45:ce:99:e0:11:be:bf:f5:54:65:c3:bb:
                    b2:d2:57:1e:0c:62:8c:b1:0e:69:71:a6:a1:a8:70:
                    87:75:c0:6d:e9:55:99:c1:53:5b:87:64:75:59:88:
                    65:08:37:d6:82:67:d2:85:0e:73:3b:81:82:0f:1a:
                    9b:21:b0:b1:e0:e5:ad:d2:c5:e8:0c:51:c3:90:ac:
                    b9:44:38:91:e5:17:60:50:1c:3b:6c:6f:8c:d7:43:
                    68:36:c2:49:64:62:64:11:86:61:39:6c:c1:fb:7f:
                    14:be:f3:9b:9e:ce:02:9c:27:ba:87:fe:a8:6f:01:
                    ab:79:da:17:46:9e:aa:29:f8:8f:af:eb:01:f7:c0:
                    8d:2e:a8:a8:3e:80:1e:5b:35:d4:01:4e:0e:b6:9e:
                    b5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:19:0D:2E:05:6B:9B:B7:E9:46:7F:AA:A5:94:84:94:BB:B7:87:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/a0e9f1ad-89ec-3b41-a12c-8832a4094045.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:f1:fc:28:b7:cd:e1:4c:e2:88:7f:d2:a2:fe:b2:f0:f8:75:
         07:87:ba:6f:ca:44:ed:2e:0f:ef:c8:b6:f3:49:34:3b:38:77:
         d9:70:b9:29:03:7d:ce:73:90:9e:4c:2c:53:a6:4e:94:09:3b:
         0d:9a:e9:17:40:6a:ee:46:32:9b:1b:e7:93:2a:a0:58:17:47:
         27:1e:e0:20:b7:47:80:e5:d8:bf:12:03:f6:54:59:89:e9:c4:
         cb:2a:0a:ca:39:8b:44:60:2e:45:15:89:b5:a5:c2:16:80:c2:
         d9:7f:eb:1b:ce:86:f6:43:c2:ee:67:b8:d8:21:18:c6:0a:2e:
         27:f4:51:47:45:9f:e2:86:cb:65:b2:b7:92:c1:08:80:f8:7b:
         32:cb:c5:c0:6a:a6:95:8e:82:8a:c7:61:c6:72:76:d9:b4:d8:
         7d:71:0d:43:18:d9:7a:3b:2e:8a:29:aa:65:09:37:fa:04:67:
         bc:cf:41:78:89:d0:e9:b5:1a:d8:79:97:a2:fb:4a:0b:00:14:
         ce:18:1a:f8:e3:62:89:19:03:07:3e:91:e3:58:6f:69:b8:02:
         75:f2:2f:c9:6a:b4:64:ed:c6:ae:ec:30:51:12:d3:42:ba:bb:
         a0:30:5a:ca:6c:e7:d6:ad:9c:c1:ec:bd:40:ce:1e:b5:69:40:
         99:3c:ae:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:32:33 2026 by rpki-client