Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/aabc9ac0-a28e-3f13-99f4-a8cfa8236056.roa
File:                     aabc9ac0-a28e-3f13-99f4-a8cfa8236056.roa (raw, json)
Hash identifier:          7/28k1dAinktEt/uhQpEvuVrMZDHxUHqWJ9FRlysEH4=
Subject key identifier:   68:FC:AD:EB:04:1B:E1:AD:4E:E9:E0:14:4D:21:80:39:C7:5C:75:B6
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584A9A6634DE4ED5BAA987D1BC00
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/aabc9ac0-a28e-3f13-99f4-a8cfa8236056.roa
Signing time:             Tue 22 Jul 2025 13:01:03 +0000
ROA not before:           Tue 22 Jul 2025 13:01:03 +0000
ROA not after:            Mon 20 Oct 2025 13:01:03 +0000
asID:                     62610
IP address blocks:        45.40.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9a:66:34:de:4e:d5:ba:a9:87:d1:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Jul 22 13:01:03 2025 GMT
            Not After : Oct 20 13:01:03 2025 GMT
        Subject: CN=c19497a6-4cf9-497c-af40-a8a6b9be5d00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:5d:c5:eb:7e:58:83:bc:e0:92:72:bc:16:7a:
                    6c:fe:2b:41:d7:94:14:1b:30:88:a4:8d:e4:ec:76:
                    8d:3e:81:50:66:8b:9d:0c:8a:5c:0c:17:64:28:cc:
                    a1:d6:d9:b9:60:e4:85:0f:ab:10:80:3d:09:2c:64:
                    a1:5f:72:09:28:b1:93:7a:e1:32:0f:91:dd:64:f5:
                    27:5e:bf:36:b8:9a:e3:27:51:ce:0f:42:84:9f:f4:
                    e0:2e:c4:4f:83:7a:48:b3:56:ac:cc:3f:e2:c7:0f:
                    43:ea:6b:cf:c0:f4:19:46:ef:53:a3:95:78:63:6d:
                    25:bc:58:4a:39:88:33:ce:3b:3e:d2:da:a1:46:51:
                    d2:fa:4c:a4:ee:1b:02:4e:04:09:88:ac:1e:ed:3c:
                    18:6c:1d:1c:2b:6b:54:24:26:38:3d:e8:d2:10:22:
                    13:73:8c:27:41:11:39:62:21:78:1f:3b:fa:3b:3d:
                    f1:c5:4f:8d:8e:28:b7:9e:4d:59:4f:3e:02:dc:3e:
                    ef:ca:15:bd:6a:9d:dd:c5:84:64:08:ce:e9:84:9e:
                    9b:56:36:4b:af:93:25:09:8d:6e:25:43:9b:67:ac:
                    89:78:b0:21:36:10:30:73:43:52:f6:93:34:4f:bb:
                    f0:23:35:6c:f2:ef:53:5d:4b:c7:03:80:74:60:c0:
                    26:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:FC:AD:EB:04:1B:E1:AD:4E:E9:E0:14:4D:21:80:39:C7:5C:75:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/aabc9ac0-a28e-3f13-99f4-a8cfa8236056.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.40.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:8d:9a:29:99:17:32:b6:19:2a:a5:93:2a:af:fd:f8:29:51:
         26:21:ee:52:5e:50:92:c0:b4:98:df:17:75:28:00:9d:1c:c3:
         b1:6d:65:66:48:c1:13:d8:d0:0e:e5:c6:10:4a:bb:f4:1d:76:
         3f:e0:c9:57:fb:9d:95:53:2a:71:ee:c8:f7:f6:0c:1f:07:18:
         fb:e3:6a:48:0e:da:1f:e0:20:81:cc:3b:bf:f1:aa:4d:e6:78:
         6b:86:a3:ea:a7:75:73:81:7d:91:56:7e:17:ef:42:8b:ee:46:
         2d:95:ab:e6:05:70:7e:7f:20:e0:19:9e:89:2c:49:4f:3e:57:
         b7:57:c6:b8:e0:b8:c6:1c:ec:7c:0d:17:d0:45:cc:2a:b0:ea:
         43:13:7e:8e:e4:12:a6:45:1e:6b:ac:99:b7:4b:4a:27:a3:b6:
         a7:20:77:6d:66:6a:40:c3:52:f8:41:cd:fa:c3:f2:95:4d:d8:
         6a:75:c4:63:ea:04:86:15:1e:1a:6a:76:ac:ed:77:cf:e9:42:
         4d:5a:d2:af:53:1d:18:2f:80:ba:8c:b5:c6:fe:0c:47:22:30:
         e6:ff:0e:1e:fa:a7:32:6c:f6:2d:ac:d5:88:95:da:61:71:c6:
         e1:19:1e:62:4d:6d:53:e2:59:b5:cf:1b:08:e9:33:45:fe:66:
         f8:d7:72:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:43:42 2025 by rpki-client