Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/d5309ef4-02ef-32b1-925e-116cefdf66ee.roa
File:                     d5309ef4-02ef-32b1-925e-116cefdf66ee.roa (raw, json)
Hash identifier:          3TerKkkBavtwFuvjvAcb01eBFcA6URAQdJuaEkJz03M=
Subject key identifier:   9F:79:9D:A2:16:1B:F9:F5:79:43:72:AE:1B:76:CB:4B:CC:11:77:7A
Certificate issuer:       /CN=22f3c152-12b6-441e-b4d6-66feab870c4d
Certificate serial:       010D0C9F4328584A8C70C99B704EF542B0559C80
Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/d5309ef4-02ef-32b1-925e-116cefdf66ee.roa
Signing time:             Thu 17 Jul 2025 13:01:04 +0000
ROA not before:           Thu 17 Jul 2025 13:01:04 +0000
ROA not after:            Wed 15 Oct 2025 13:01:04 +0000
asID:                     58061
IP address blocks:        45.62.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8c:70:c9:9b:70:4e:f5:42:b0:55:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d
        Validity
            Not Before: Jul 17 13:01:04 2025 GMT
            Not After : Oct 15 13:01:04 2025 GMT
        Subject: CN=bb6f1a34-a621-407c-b40c-64d44ca4b0c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d1:96:3b:46:ed:1e:a4:96:23:3b:2a:9e:39:
                    57:2d:ac:2e:74:99:22:71:55:ce:88:ad:e8:3b:0a:
                    21:78:e9:a2:05:2c:34:2f:34:12:e6:09:7f:c2:5e:
                    6e:6c:fa:4a:45:cd:df:51:93:1c:df:a9:f5:56:1d:
                    9c:06:72:0e:49:b7:82:7b:66:ef:58:10:13:57:fe:
                    83:1c:97:e2:d9:7f:c8:d7:86:da:47:2b:ab:9c:35:
                    6d:df:dc:26:2b:eb:d1:e6:5e:df:3b:df:5e:19:7c:
                    d9:2a:8d:09:32:bf:a0:31:3e:99:51:5d:99:11:f9:
                    32:0d:1c:90:20:39:08:10:8c:bb:f7:44:d4:60:0c:
                    1d:e6:95:ff:19:86:0e:31:e8:3d:80:c7:67:31:73:
                    5b:09:ef:99:7e:84:aa:9d:5b:ec:2f:ac:5b:62:12:
                    aa:14:16:b9:24:55:55:e1:e2:31:56:d8:d0:c5:4f:
                    16:dd:2b:ae:8f:c7:11:5e:63:ed:97:38:6a:12:8a:
                    02:40:28:e8:e5:b6:ce:d5:c7:93:36:85:0f:30:1a:
                    22:d5:21:9d:9f:8a:f5:06:30:d3:4b:85:f0:da:49:
                    90:56:97:05:12:18:da:69:30:f9:73:17:b9:96:62:
                    5b:cb:ae:32:64:8e:5f:dd:55:c3:5e:ca:a2:6b:c4:
                    ee:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:79:9D:A2:16:1B:F9:F5:79:43:72:AE:1B:76:CB:4B:CC:11:77:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/d5309ef4-02ef-32b1-925e-116cefdf66ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl

            X509v3 Authority Key Identifier:
                keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.62.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:7b:4a:b1:aa:d8:3a:0c:d8:56:18:b8:30:7a:bb:51:f0:c4:
         35:e0:a0:6a:9d:60:fe:22:1d:41:b2:0c:51:25:b3:36:32:8b:
         e1:14:10:16:13:3b:0c:2e:a6:f6:9a:9c:64:db:70:f3:19:81:
         94:48:d6:17:a8:88:20:08:f3:c2:bf:0d:e7:1a:9f:e9:a1:2c:
         dc:29:01:39:12:18:e5:fc:c6:06:e5:bb:3c:9d:f9:14:ed:ac:
         62:e3:cf:b1:c5:90:f5:70:7d:7b:43:b6:06:5a:2b:4a:99:8f:
         69:29:2a:48:c5:72:3c:fb:f0:4f:2a:aa:a1:39:02:21:ec:b8:
         0a:6b:55:05:ef:4f:20:d3:26:3e:cd:57:dc:ea:e6:0e:04:cd:
         ef:33:61:5c:75:8e:2d:f0:b7:ba:7a:f5:78:83:fb:df:f2:b3:
         7f:a1:fc:05:e6:d6:5a:9d:9a:55:c0:e1:cf:dc:13:39:46:ea:
         f0:e5:55:7f:42:35:77:47:75:e7:89:ac:f5:ee:5d:58:27:38:
         32:a2:da:10:66:98:c7:3a:f2:3e:2d:4a:d1:b8:b3:22:4e:0f:
         9a:9f:99:7c:ed:9a:8c:df:67:30:c1:9f:af:f3:93:40:13:22:
         02:b9:fe:31:e0:78:97:80:82:5b:b4:4d:fd:0b:4f:3e:74:88:
         8b:f1:4d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:35:17 2025 by rpki-client