Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/e57ca40f-e8d2-3131-9b16-89233df0e99d.roa
File:                     e57ca40f-e8d2-3131-9b16-89233df0e99d.roa (raw, json)
Hash identifier:          70qgWEZMXdcVpiBRXL9RLB+OwFqkNUJptDRjGa6wFBI=
Subject key identifier:   2E:00:AB:7C:89:93:E4:DF:D6:9D:9B:3E:85:E2:97:4C:77:99:BC:E4
Certificate issuer:       /CN=c554a280-22a1-477c-97bf-f23a7f33a0c0
Certificate serial:       010D0C9F4328584BBE402C7C4255BC03E9479C88
Authority key identifier: BC:0E:50:C6:09:1A:EE:F3:D5:CA:17:87:86:B6:A9:50:1D:DC:59:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/e57ca40f-e8d2-3131-9b16-89233df0e99d.roa
Signing time:             Tue 04 Nov 2025 02:00:31 +0000
ROA not before:           Tue 04 Nov 2025 02:00:31 +0000
ROA not after:            Mon 02 Feb 2026 02:00:31 +0000
asID:                     33185
IP address blocks:        45.45.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/c554a280-22a1-477c-97bf-f23a7f33a0c0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/c554a280-22a1-477c-97bf-f23a7f33a0c0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:be:40:2c:7c:42:55:bc:03:e9:47:9c:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c554a280-22a1-477c-97bf-f23a7f33a0c0
        Validity
            Not Before: Nov  4 02:00:31 2025 GMT
            Not After : Feb  2 02:00:31 2026 GMT
        Subject: CN=3cdfe707-88cd-4631-ac1b-4fae61e2bab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:30:6b:66:00:af:38:26:8d:9e:5d:7c:4d:84:
                    58:d7:89:40:4d:4c:c3:f5:f3:25:b7:43:8b:6b:b7:
                    8e:3f:aa:17:a2:28:a4:1f:54:d0:ce:a9:61:38:48:
                    5e:ea:89:4d:04:a0:e3:fb:4e:d9:f0:84:a1:90:a0:
                    af:48:9a:05:22:48:d2:ac:b6:d7:23:66:a3:1e:1f:
                    c2:05:18:67:5f:87:07:3a:e0:87:5e:58:cf:4a:bc:
                    81:57:b5:16:62:ac:b8:36:60:f7:50:93:27:1f:10:
                    5d:a5:0d:56:22:71:7c:5c:eb:59:fa:bc:1e:26:d7:
                    89:d6:7b:5e:bc:78:c4:6c:3d:a1:0c:d0:8f:67:1a:
                    7a:d6:65:70:54:a9:4c:48:56:4d:86:a2:43:dc:6e:
                    51:9e:b4:17:53:af:c7:bf:56:b8:51:dc:04:b8:82:
                    36:c2:f9:54:df:ff:31:b9:4a:c8:4c:e2:77:90:6f:
                    21:ae:28:d4:c5:e6:cd:c5:70:63:ba:09:2e:31:56:
                    b0:f0:4b:6c:ff:6b:ad:0f:47:0c:30:6c:ff:66:74:
                    89:8a:14:bb:f3:b7:4b:04:78:dc:5a:05:2f:07:f2:
                    b6:5c:36:b8:99:01:38:55:31:6a:d2:07:6f:ce:09:
                    f2:ee:88:bc:fd:62:31:6a:cc:53:b2:74:97:0c:f1:
                    a1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:00:AB:7C:89:93:E4:DF:D6:9D:9B:3E:85:E2:97:4C:77:99:BC:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/e57ca40f-e8d2-3131-9b16-89233df0e99d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/c554a280-22a1-477c-97bf-f23a7f33a0c0.crl

            X509v3 Authority Key Identifier:
                keyid:BC:0E:50:C6:09:1A:EE:F3:D5:CA:17:87:86:B6:A9:50:1D:DC:59:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         de:f0:c9:5c:ea:2c:5d:d8:97:9a:5c:eb:d4:8d:37:01:66:87:
         bf:99:af:d9:97:42:76:66:76:c0:83:37:19:3b:6e:93:9e:00:
         f6:6f:f0:37:73:a7:ee:c0:9d:da:e2:23:3c:d9:fa:d4:3f:32:
         cf:7b:b3:03:99:19:ca:7b:b1:60:f2:ab:a4:de:9e:52:e1:59:
         88:1d:aa:1f:10:09:e7:12:b0:54:b6:3a:4c:40:d5:e8:a5:fc:
         6e:d3:b5:b4:00:33:03:ac:df:47:c5:c6:58:bb:9b:d8:b3:94:
         63:35:db:83:5e:69:17:08:a7:46:e6:90:92:8f:f9:1d:ff:99:
         e9:83:ff:3d:bf:cb:63:ac:1f:67:8a:9a:15:e4:35:c2:97:93:
         c2:3a:a3:25:9f:52:d6:21:53:1d:a4:eb:ed:50:c5:d8:e7:14:
         a0:2e:6a:39:fd:31:81:7f:f0:c6:b7:ee:6e:fa:a7:1d:05:4c:
         bd:fc:5a:fa:d6:21:87:00:7f:13:8c:30:51:d4:c2:40:3d:4b:
         10:a2:c2:9f:d8:a4:24:41:47:08:59:5f:ce:78:80:db:97:54:
         60:74:bc:6d:ed:2f:78:ae:03:34:92:c7:a3:84:90:61:6c:0d:
         4c:83:4f:69:59:b4:ad:90:1b:25:26:76:92:04:9a:c2:ff:0c:
         8d:2b:7d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:31:36 2025 by rpki-client