Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/0af50d46-5ba4-3816-9ef8-5b5f473dfb49.roa
File:                     0af50d46-5ba4-3816-9ef8-5b5f473dfb49.roa (raw, json)
Hash identifier:          SK+q2aQQ4oiJR3bEVtXvm97Fe+9CkECmADWo/rm5dyM=
Subject key identifier:   93:CE:0E:A0:23:12:F1:B1:2B:16:B1:2A:1A:70:8B:43:64:0A:7B:00
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584AAC5BEF83710CBDBE90B91990
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/0af50d46-5ba4-3816-9ef8-5b5f473dfb49.roa
Signing time:             Mon 28 Jul 2025 23:25:02 +0000
ROA not before:           Mon 28 Jul 2025 23:25:02 +0000
ROA not after:            Sun 26 Oct 2025 23:25:02 +0000
asID:                     401199
IP address blocks:        45.40.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ac:5b:ef:83:71:0c:bd:be:90:b9:19:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jul 28 23:25:02 2025 GMT
            Not After : Oct 26 23:25:02 2025 GMT
        Subject: CN=02b99e12-a6b8-4026-8138-38cbb390f87d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:28:de:41:00:a3:f5:6a:fb:ed:44:92:9d:cc:
                    d9:db:89:0f:72:bd:d9:d3:0b:48:b8:13:56:62:98:
                    84:f0:d8:d3:0e:a9:dc:05:69:23:fa:ff:78:4c:4b:
                    59:36:84:8a:83:6d:e2:63:db:78:a7:b3:0f:27:72:
                    29:42:10:08:5a:d5:78:0b:2f:7a:14:09:71:dd:d4:
                    bd:1a:fd:4f:92:6b:60:e5:35:6e:d3:c9:bc:4d:9e:
                    9c:79:bd:26:aa:d1:75:fc:2e:17:2a:e6:4f:25:cc:
                    58:67:81:ac:7c:50:8a:a9:4b:f8:a9:00:ad:49:33:
                    1e:9a:d1:72:4a:22:8e:f4:55:97:0d:06:da:47:7d:
                    c6:86:84:ea:34:5f:dc:42:6c:89:dd:2f:bb:fc:c5:
                    33:25:1c:ab:86:2b:af:d7:54:82:71:9d:3e:2a:f6:
                    f3:f6:98:cd:03:22:82:30:1f:64:20:24:4f:58:d4:
                    85:02:09:07:67:75:3a:55:59:29:2c:d8:4a:45:e4:
                    82:0d:90:95:e3:e1:ef:6f:29:fc:4e:aa:cd:cc:37:
                    c2:6a:3b:28:92:df:b2:e8:50:d9:b8:46:6c:e6:eb:
                    39:4a:a1:d6:5a:cf:0b:cd:e8:d2:cc:7b:39:27:95:
                    7c:0a:b6:36:6a:0f:29:ab:05:02:76:53:67:6d:3b:
                    b2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:CE:0E:A0:23:12:F1:B1:2B:16:B1:2A:1A:70:8B:43:64:0A:7B:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/0af50d46-5ba4-3816-9ef8-5b5f473dfb49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.40.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:0e:0b:b9:50:42:4d:34:32:b5:8f:08:41:3a:1a:56:39:4f:
         ab:e7:d8:92:9f:bc:99:37:94:c5:a1:c0:60:ec:a2:92:95:01:
         72:10:7d:7e:bf:90:90:61:84:5a:a5:ed:71:e8:6e:60:67:d3:
         91:2d:08:e9:da:82:fc:94:fa:83:b4:7d:4e:59:1d:5c:46:8d:
         fa:11:9d:13:92:13:02:e9:a5:32:d3:f3:96:eb:9a:4a:19:c4:
         d1:98:61:89:64:2a:a2:aa:56:a4:4f:b2:5e:59:eb:c3:d9:a9:
         f5:bf:22:7a:62:fa:83:cb:db:5c:41:07:da:78:78:ab:3d:cf:
         b3:41:86:b3:a8:16:62:7a:01:40:fe:30:0d:42:49:3e:75:ae:
         19:db:78:2a:7a:0e:e9:7b:cb:a4:a9:33:73:4c:79:ed:7c:68:
         92:30:31:a4:4f:11:7e:c1:02:6c:ab:20:08:28:10:f6:41:fe:
         47:39:2a:0a:a3:d8:4c:db:7f:2a:98:00:bc:49:00:44:03:34:
         e6:e6:a0:84:f8:cc:97:66:ef:26:42:16:ac:2d:d3:14:49:ee:
         1c:a9:18:66:1c:d2:6e:cb:cf:76:00:5b:b4:d7:37:d4:2d:2d:
         e7:a7:c8:9e:a6:9b:12:7c:cd:96:7f:42:36:b0:d9:c0:0a:7b:
         d5:fb:d0:f7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqsW++DcQy9vpC5GZAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI1MDcyODIzMjUwMloXDTI1MTAyNjIzMjUwMlowLzEtMCsGA1UEAxMk
MDJiOTllMTItYTZiOC00MDI2LTgxMzgtMzhjYmIzOTBmODdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSjeQQCj9Wr77USSnczZ24kPcr3Z0wtIuBNW
YpiE8NjTDqncBWkj+v94TEtZNoSKg23iY9t4p7MPJ3IpQhAIWtV4Cy96FAlx3dS9
Gv1Pkmtg5TVu08m8TZ6ceb0mqtF1/C4XKuZPJcxYZ4GsfFCKqUv4qQCtSTMemtFy
SiKO9FWXDQbaR33GhoTqNF/cQmyJ3S+7/MUzJRyrhiuv11SCcZ0+Kvbz9pjNAyKC
MB9kICRPWNSFAgkHZ3U6VVkpLNhKReSCDZCV4+Hvbyn8TqrNzDfCajsokt+y6FDZ
uEZs5us5SqHWWs8LzejSzHs5J5V8CrY2ag8pqwUCdlNnbTuyqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJPODqAjEvGxKxaxKhpwi0NkCnsAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvMGFmNTBkNDYtNWJhNC0z
ODE2LTllZjgtNWI1ZjQ3M2RmYjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALShiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF4OC7lQQk00MrWPCEE6GlY5T6vn2JKfvJk3lMWhwGDsopKVAXIQfX6/
kJBhhFql7XHobmBn05EtCOnagvyU+oO0fU5ZHVxGjfoRnROSEwLppTLT85brmkoZ
xNGYYYlkKqKqVqRPsl5Z68PZqfW/Inpi+oPL21xBB9p4eKs9z7NBhrOoFmJ6AUD+
MA1CST51rhnbeCp6Dul7y6SpM3NMee18aJIwMaRPEX7BAmyrIAgoEPZB/kc5Kgqj
2EzbfyqYALxJAEQDNObmoIT4zJdm7yZCFqwt0xRJ7hypGGYc0m7Lz3YAW7TXN9Qt
LeenyJ6mmxJ8zZZ/Qjaw2cAKe9X70Pc=
-----END CERTIFICATE-----
Generated at Mon Aug 4 16:10:55 2025 by rpki-client