Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/639cc8ac-4937-3f41-868f-e73eeac09322.roa
File:                     639cc8ac-4937-3f41-868f-e73eeac09322.roa (raw, json)
Hash identifier:          MwaCHwYFM3eqN2/3SuHftVN2eFl4cdK+23IUnX6B1Y8=
Subject key identifier:   65:C5:4F:48:BA:AE:30:1B:9A:A0:6A:E4:24:BA:49:D9:D3:E2:66:DF
Certificate issuer:       /CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
Certificate serial:       010D0C9F4328584D6AAA69A9967BE91131F06100
Authority key identifier: 68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/639cc8ac-4937-3f41-868f-e73eeac09322.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     398395
IP address blocks:        45.59.115.0/24 maxlen: 24
                          45.59.121.0/24 maxlen: 24
                          66.23.194.0/23 maxlen: 24
                          216.126.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:69:a9:96:7b:e9:11:31:f0:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=61afe4c1-774c-4331-a082-4eaa70e3328c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3a:34:7e:67:26:77:4f:5a:ec:06:03:93:bf:
                    6e:dd:2d:3c:c4:50:12:78:f1:0a:a8:e7:fd:fe:10:
                    22:33:22:c9:35:6b:47:90:ae:79:1d:81:95:b0:95:
                    3d:c2:64:d4:8a:4d:5f:be:42:56:ac:52:3c:7e:bf:
                    96:e6:53:fa:3a:8d:70:7c:a5:77:b9:b3:48:fd:e8:
                    26:61:2b:10:38:c4:1f:f4:f9:21:57:1b:da:d6:d3:
                    42:d2:5c:80:c0:81:49:79:0b:85:94:53:cf:41:f7:
                    e4:b6:da:ec:41:1f:67:ba:91:06:76:c1:72:e4:55:
                    bc:04:2b:4b:b7:43:c7:3a:0e:34:82:76:0f:ae:dd:
                    66:2b:eb:c4:ce:52:08:d5:4a:9d:c5:64:91:17:4e:
                    ac:25:f4:f6:73:6e:86:e2:a8:8b:53:fd:ea:fa:33:
                    d9:52:5a:d5:95:13:03:a0:8b:14:50:e1:15:67:1c:
                    8f:9e:93:4b:f1:80:99:67:bd:99:ad:43:4d:b6:d2:
                    07:67:32:37:cb:58:fa:c2:a6:49:5b:66:f4:f7:ed:
                    fe:36:97:12:57:ba:80:2d:2a:d4:05:69:a6:f9:5e:
                    ab:91:bc:3b:27:18:96:f9:06:90:ab:7d:1d:29:93:
                    f6:e2:0f:b0:e8:7c:d3:8a:9c:77:7c:30:5b:15:ad:
                    20:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:C5:4F:48:BA:AE:30:1B:9A:A0:6A:E4:24:BA:49:D9:D3:E2:66:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/639cc8ac-4937-3f41-868f-e73eeac09322.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl

            X509v3 Authority Key Identifier:
                keyid:68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.115.0/24
                  45.59.121.0/24
                  66.23.194.0/23
                  216.126.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:63:74:dc:b1:38:9d:66:b4:01:ab:d1:c2:b2:e1:f0:46:db:
         f1:b8:30:15:19:83:9e:cd:86:31:15:fb:29:87:dc:8d:cc:62:
         d6:11:ee:71:e3:6a:72:7a:15:b3:c8:04:8c:45:6f:ed:92:70:
         c2:d2:c7:27:e4:af:9d:f0:dd:20:d4:3a:25:a4:39:1f:63:91:
         1c:4d:f8:42:3c:d1:ed:ba:78:43:9b:4d:17:c1:ab:64:5b:ef:
         2a:f3:8c:82:a6:50:d3:3d:4b:c7:02:48:17:86:0c:04:05:c0:
         33:e2:62:7d:eb:22:ca:7f:ae:e2:60:20:e9:bd:d1:87:54:01:
         60:ba:3d:52:76:c8:61:f7:c5:25:ed:48:ee:a8:79:f1:71:57:
         28:e3:aa:c5:77:72:17:70:56:e6:9a:47:d5:d0:9d:8d:0a:91:
         0c:d5:23:f8:f4:33:3b:28:a7:b9:94:57:08:9e:cc:19:01:5c:
         26:51:b0:ff:86:d7:60:d2:e3:c4:dc:23:14:8c:10:e6:07:6d:
         fc:d0:a4:a1:75:40:83:0f:78:71:44:3d:85:34:ab:c5:0c:8e:
         77:5a:e7:1e:c5:48:33:df:c5:89:2c:4c:09:e4:e3:80:29:e0:
         84:c1:6d:5c:13:70:dd:cc:5f:6d:8e:ee:bd:78:ca:3e:06:12:
         c8:da:f2:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:26:01 2026 by rpki-client