Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/12faeaf6-43fc-36d3-95aa-3a8ef06f12ce.roa
File:                     12faeaf6-43fc-36d3-95aa-3a8ef06f12ce.roa (raw, json)
Hash identifier:          uWV4uXcx3d5JUgBWsElurJ8ftBWhlklHaFUUL91Gd6w=
Subject key identifier:   A4:BC:9B:BB:80:88:6F:C4:E0:BF:EC:88:22:6A:34:4E:41:48:4D:67
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F4328584D7CCFCA9AD274523941B3F080
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/12faeaf6-43fc-36d3-95aa-3a8ef06f12ce.roa
Signing time:             Mon 13 Apr 2026 01:00:24 +0000
ROA not before:           Mon 13 Apr 2026 01:00:24 +0000
ROA not after:            Sun 12 Jul 2026 01:00:24 +0000
asID:                     211350
IP address blocks:        45.61.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7c:cf:ca:9a:d2:74:52:39:41:b3:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Apr 13 01:00:24 2026 GMT
            Not After : Jul 12 01:00:24 2026 GMT
        Subject: CN=e2fdcd82-1590-4212-b717-776a04d7e0c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:de:94:57:b0:e5:dd:35:b6:ca:e2:57:5c:84:
                    62:fd:b4:8b:19:32:4b:dc:38:7b:55:93:ac:b2:c6:
                    44:75:82:84:a6:a2:56:bd:c2:6a:08:6d:66:6c:32:
                    39:24:5b:0c:e1:91:07:e7:a8:76:d1:5f:c1:df:c5:
                    2c:84:f6:9d:ea:59:d3:17:a5:05:67:bc:26:ec:c4:
                    ae:c6:ff:f7:73:64:ef:c9:ef:f9:0f:c3:31:42:39:
                    50:a7:c5:15:32:65:af:5a:58:d8:2c:af:41:ce:d6:
                    66:3f:5e:1e:5e:8a:6f:b1:1f:84:af:c6:78:fe:5c:
                    51:4f:7d:a1:60:fd:8f:a0:d2:d0:a6:e5:36:c6:78:
                    e3:f0:a5:cb:19:11:30:3d:5f:7a:5c:5d:77:03:2a:
                    c9:99:92:a0:ea:94:4f:4f:1a:59:6b:54:98:3b:32:
                    2c:61:83:30:b0:99:3c:9a:c7:bd:b7:02:3d:1e:65:
                    ac:2a:0d:8e:7a:ec:03:83:2e:3b:9c:c3:a5:a2:42:
                    d9:f1:6f:60:54:68:71:98:3c:b4:bd:28:a9:53:13:
                    5f:c3:82:69:10:5a:d8:82:b7:23:94:57:a4:c7:98:
                    a4:68:8c:88:ad:e2:ff:cd:ee:61:e1:69:7b:04:fc:
                    df:da:a3:36:1e:cc:a8:43:d7:3e:58:8d:f3:ed:86:
                    42:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:BC:9B:BB:80:88:6F:C4:E0:BF:EC:88:22:6A:34:4E:41:48:4D:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/12faeaf6-43fc-36d3-95aa-3a8ef06f12ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.61.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:53:32:05:e5:66:d8:98:1b:d4:e8:1a:ff:08:63:15:cf:d6:
         66:c1:39:a7:45:93:31:fd:86:2f:a6:e0:64:5c:96:59:7c:6d:
         e8:2d:0f:fd:17:a9:5b:1e:6b:88:32:7f:3d:9e:7e:12:31:c3:
         6f:78:8c:5a:58:46:e5:da:30:87:38:a4:51:89:3d:e5:56:9a:
         ce:9d:9f:03:66:cf:d2:8e:55:e9:69:1b:37:78:61:12:72:2a:
         be:65:01:8d:e3:b7:c0:73:3f:10:89:16:d3:11:2e:7c:c2:ff:
         18:e5:97:fd:00:e7:2d:a6:a2:91:1b:e1:07:91:6a:71:0d:59:
         3a:86:ef:5c:c2:45:02:97:fe:76:31:49:8c:6d:76:e1:00:68:
         d1:8e:a5:34:00:cc:ef:30:39:01:01:1a:e7:5c:6b:2e:8d:b2:
         03:a9:01:1b:7f:a1:68:78:c2:e9:c1:4d:b5:45:97:9d:c5:bb:
         bc:43:c0:d7:ef:41:cb:ac:96:82:15:a5:b6:ff:ab:36:d1:5d:
         9d:26:25:79:79:27:91:66:d1:45:29:ee:68:33:b4:eb:f2:48:
         cd:a1:25:74:63:13:6f:75:54:07:fb:3f:9b:2d:d7:21:de:f7:
         e3:9b:aa:3f:d5:1f:6a:54:0d:b6:4d:c7:85:57:d5:1b:a9:d1:
         d6:2f:d3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:26:33 2026 by rpki-client