Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d5cea8ba-a1a0-49ac-b5d4-1d207695255c/a8478cd5-6e87-34f0-b54b-e5f2ab41f7cc.roa
File:                     a8478cd5-6e87-34f0-b54b-e5f2ab41f7cc.roa (raw, json)
Hash identifier:          5SiCyTpKB6noidCNU1pQdUni1gZ1m8249V3JLka6n6E=
Subject key identifier:   B3:C2:07:56:DC:12:C7:DB:B5:19:B8:93:EB:EF:DF:7B:FE:3D:F9:1C
Certificate issuer:       /CN=d5cea8ba-a1a0-49ac-b5d4-1d207695255c
Certificate serial:       010D0C9F4328584AAB266AD120E0D98B9DB1C1D0
Authority key identifier: 87:BA:96:8A:82:31:42:0D:8E:1C:C4:65:10:67:9B:B3:89:97:3B:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d5cea8ba-a1a0-49ac-b5d4-1d207695255c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d5cea8ba-a1a0-49ac-b5d4-1d207695255c/a8478cd5-6e87-34f0-b54b-e5f2ab41f7cc.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     399856
IP address blocks:        45.45.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d5cea8ba-a1a0-49ac-b5d4-1d207695255c/d5cea8ba-a1a0-49ac-b5d4-1d207695255c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d5cea8ba-a1a0-49ac-b5d4-1d207695255c/d5cea8ba-a1a0-49ac-b5d4-1d207695255c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d5cea8ba-a1a0-49ac-b5d4-1d207695255c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:6a:d1:20:e0:d9:8b:9d:b1:c1:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5cea8ba-a1a0-49ac-b5d4-1d207695255c
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=e08b1831-09a5-4d06-922a-7d3ed778e316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d5:5b:be:65:84:e2:43:e7:f3:9f:3a:97:49:
                    07:f5:5b:6f:99:cd:ff:97:b0:4f:b6:44:0f:2a:16:
                    49:66:26:08:3a:31:84:d8:3f:55:1e:f2:7a:a1:be:
                    62:55:c1:93:28:7a:f5:b3:b1:45:80:94:8f:fd:3f:
                    fd:1f:53:af:48:2f:fa:3a:75:93:6f:ec:36:e3:6b:
                    b8:de:8b:bf:9f:5b:fe:eb:e5:e3:9b:13:7c:95:90:
                    a0:92:16:e7:3f:91:1f:a1:2d:19:3b:79:81:b0:1e:
                    06:f4:a1:aa:56:88:7f:f9:57:01:1a:a7:52:a8:e0:
                    03:98:c6:29:df:b5:d0:ff:64:f8:55:c4:38:60:78:
                    3a:4f:75:ae:40:b6:fe:07:cf:da:88:e8:7e:07:d3:
                    dd:d7:af:2c:5f:0e:a0:64:11:50:da:37:0b:0f:68:
                    c9:1a:97:51:26:64:5f:ed:42:0d:1b:b3:0a:c8:3b:
                    0e:dd:ba:4a:63:46:6e:5b:03:d2:f6:13:a2:87:02:
                    10:dd:dd:fd:b4:a3:c4:3f:02:82:f9:39:57:7f:88:
                    15:fd:c1:0e:5d:2c:11:70:f8:ed:b4:59:96:01:4b:
                    74:a0:85:ab:6f:9d:4e:b8:a2:50:d6:66:16:76:2d:
                    6c:42:02:93:a7:04:3c:ba:6a:35:d1:38:a9:6b:8f:
                    2a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:C2:07:56:DC:12:C7:DB:B5:19:B8:93:EB:EF:DF:7B:FE:3D:F9:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d5cea8ba-a1a0-49ac-b5d4-1d207695255c/a8478cd5-6e87-34f0-b54b-e5f2ab41f7cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d5cea8ba-a1a0-49ac-b5d4-1d207695255c/d5cea8ba-a1a0-49ac-b5d4-1d207695255c.crl

            X509v3 Authority Key Identifier:
                keyid:87:BA:96:8A:82:31:42:0D:8E:1C:C4:65:10:67:9B:B3:89:97:3B:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d5cea8ba-a1a0-49ac-b5d4-1d207695255c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:6d:45:44:bb:da:4e:5c:2e:4d:cc:82:1c:31:4f:9f:a2:df:
         08:b5:39:ca:82:04:20:a8:6b:42:ac:ff:fd:9e:e5:b6:3a:08:
         51:62:c5:1f:df:d4:65:1f:e3:bc:60:4b:a0:a1:3c:70:21:c8:
         fe:3d:fd:eb:cf:89:84:25:3b:4f:f5:3a:cc:72:0d:90:bd:1b:
         13:90:50:e5:0d:11:4b:96:74:d7:c4:fc:ca:62:35:3c:48:f7:
         8b:54:b9:23:1c:b5:2a:fe:85:cb:04:cc:57:dd:ff:65:0e:a4:
         8f:eb:08:1f:20:2a:45:d2:22:e3:fa:08:3b:22:29:83:67:c8:
         a2:8d:40:1f:9b:7a:bd:00:df:f8:a1:24:59:36:dc:bd:07:6b:
         fa:a0:89:86:c2:ba:9a:7c:8e:34:8b:4b:aa:87:bf:dd:a4:0e:
         63:da:51:3f:b3:7c:d8:8c:27:06:5c:4d:10:c0:5e:ee:a2:15:
         83:67:07:23:bc:ee:38:71:c0:0b:b2:54:24:ab:46:74:de:82:
         62:25:31:b3:52:8b:53:ef:14:5a:b3:cd:0a:6c:02:bb:41:b2:
         0c:08:d9:d4:3d:61:98:ab:90:aa:13:14:f8:f2:3d:1d:5c:f3:
         b1:56:25:3b:eb:2f:c2:54:67:34:3e:99:2d:00:1e:72:a5:5e:
         24:97:10:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:13:27 2025 by rpki-client