Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/9ef21d06-701d-345b-9dd4-aa9144994d9d.roa
File:                     9ef21d06-701d-345b-9dd4-aa9144994d9d.roa (raw, json)
Hash identifier:          vG/KnLpairhVUWzNR7orf9BKoU0lIHnB2KZ+oBTXSks=
Subject key identifier:   9C:71:88:63:D7:D8:79:92:44:37:36:30:40:66:7E:F1:88:A4:BA:E8
Certificate issuer:       /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
Certificate serial:       010D0C9F4328584AADF119C292CFC7D331C6F700
Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/9ef21d06-701d-345b-9dd4-aa9144994d9d.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     36007
IP address blocks:        45.61.48.0/24 maxlen: 24
                          45.61.56.0/24 maxlen: 24
                          146.71.76.0/24 maxlen: 24
                          209.182.216.0/24 maxlen: 24
                          209.182.217.0/24 maxlen: 24
                          2604:bc0:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:19:c2:92:cf:c7:d3:31:c6:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=6650d072-76db-434e-b0c0-87763c2bd6ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:13:ab:06:8a:0b:65:0d:3b:23:2c:13:1c:ea:
                    aa:a7:bf:a4:28:4a:01:f3:45:5a:1a:9b:c1:e6:59:
                    60:58:f6:35:c5:a4:65:4c:4b:36:3f:57:c5:fc:e9:
                    32:d6:58:d0:32:d3:e7:bb:ab:a8:9c:13:a5:6b:96:
                    c4:48:b2:15:e7:fa:2f:86:ef:d5:6e:bd:5b:48:00:
                    b8:b1:12:30:2e:02:79:03:df:ed:39:96:fa:42:7e:
                    7f:97:67:94:29:ec:62:f1:0f:2c:1f:18:c8:17:d5:
                    06:78:b2:9a:bd:3a:df:0d:a6:ac:4d:4e:bf:06:1c:
                    0c:cf:70:b6:c8:17:0d:e6:f4:af:06:6d:c4:f5:52:
                    a0:ab:86:b5:df:4a:59:72:e2:af:d1:02:f7:4c:bf:
                    5c:4c:02:75:82:23:9e:23:22:ec:7e:e3:ea:16:78:
                    13:e9:3d:a0:ba:6e:8d:f0:54:af:3a:15:3c:13:57:
                    09:86:ee:14:91:cc:bb:53:2d:5d:1c:4f:08:40:a8:
                    3b:6e:f9:1f:9f:29:e6:86:fa:68:b0:f7:ce:8c:6f:
                    78:23:24:79:67:de:14:9c:c2:82:d9:5e:ab:e3:dc:
                    38:d8:ba:26:3b:bc:87:e2:6e:7b:ef:87:8a:f6:9d:
                    5a:c1:f2:8f:12:af:d3:ce:2e:72:dd:88:30:2b:b9:
                    68:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:71:88:63:D7:D8:79:92:44:37:36:30:40:66:7E:F1:88:A4:BA:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/9ef21d06-701d-345b-9dd4-aa9144994d9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl

            X509v3 Authority Key Identifier:
                keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.61.48.0/24
                  45.61.56.0/24
                  146.71.76.0/24
                  209.182.216.0/23
                IPv6:
                  2604:bc0:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:96:3f:77:5e:09:82:68:fe:a2:9a:9e:6f:f3:19:9f:6b:a9:
         f7:30:c8:9c:50:ef:7c:1b:07:b0:fc:88:81:71:d4:89:1f:a2:
         dc:6f:30:cb:98:7b:25:a3:bb:46:05:d7:9f:d3:6a:46:36:32:
         bf:0f:f8:cc:53:42:53:44:df:6e:e4:2d:02:ab:bd:96:22:e7:
         13:2b:2c:f4:05:0b:0e:d0:fd:07:95:31:d8:fc:f1:b7:fa:71:
         d5:f1:f0:13:7d:bf:25:cf:9d:27:29:1e:fa:7b:a1:f7:e5:e5:
         af:8b:99:2a:da:b4:bd:36:06:09:06:fb:93:69:a9:3f:9a:52:
         d7:eb:ab:b2:ff:e4:73:25:41:7e:c2:63:82:f0:01:d6:07:b1:
         ad:68:f4:6c:65:47:d0:52:d8:37:6d:09:b6:d1:21:2e:f6:cd:
         b8:d6:af:62:59:2b:4d:f5:64:e1:74:03:be:e5:c4:af:5e:32:
         58:1f:b6:14:08:52:fd:86:ff:85:da:af:26:ed:77:82:1b:84:
         ea:8f:e0:50:55:ac:b8:22:cc:99:41:8c:77:79:e6:d6:30:83:
         e9:5f:a1:66:93:85:1e:ab:61:d5:3d:6e:c5:dd:a8:be:db:3b:
         ce:ed:57:94:55:80:4f:00:6a:bf:f2:f7:85:1f:ff:bc:b1:2a:
         35:a6:2a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:51:30 2025 by rpki-client