Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bba4bd68-d315-30c3-8077-c64e86fcb4b7.roa
File:                     bba4bd68-d315-30c3-8077-c64e86fcb4b7.roa (raw, json)
Hash identifier:          FtH1KDybwOZx+OMxHC47p3S7yctIR6wwUhja/SkcoiA=
Subject key identifier:   53:40:9B:BC:BE:8E:39:AC:CB:FF:B6:3E:3C:30:60:03:B8:86:33:77
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584BBFA5A76DBD574EACB3253F80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bba4bd68-d315-30c3-8077-c64e86fcb4b7.roa
Signing time:             Tue 04 Nov 2025 14:00:39 +0000
ROA not before:           Tue 04 Nov 2025 14:00:39 +0000
ROA not after:            Mon 02 Feb 2026 14:00:39 +0000
asID:                     21769
IP address blocks:        45.252.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bf:a5:a7:6d:bd:57:4e:ac:b3:25:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Nov  4 14:00:39 2025 GMT
            Not After : Feb  2 14:00:39 2026 GMT
        Subject: CN=81fae658-88f1-48a3-9494-61821e364336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5a:33:e1:c8:f6:6b:b8:07:1f:5d:df:40:38:
                    9f:ac:2a:82:a4:f8:d7:0e:96:86:21:a4:93:ae:80:
                    3a:91:5f:d6:ec:9f:dd:b7:c0:59:d8:48:b4:6f:98:
                    0c:68:9c:b3:c6:3d:a9:da:4d:51:ee:e0:9c:5f:09:
                    40:20:05:e3:56:5b:1a:a6:d9:d3:80:38:5f:0f:83:
                    2d:d4:b1:c5:ab:c3:32:ba:ca:37:30:cf:3f:b0:f0:
                    b9:f7:ce:d6:f3:b9:00:4a:01:58:32:70:a2:0c:e0:
                    c7:3e:8f:70:1f:be:a6:5e:60:a1:ef:1c:4c:aa:12:
                    cc:e2:c5:03:37:3e:96:ac:79:e6:04:62:96:ae:eb:
                    93:6c:b5:4a:a7:68:52:95:93:05:7f:13:71:2a:93:
                    ee:15:fa:ea:c7:99:4a:80:84:2b:0d:6b:b7:87:87:
                    d2:80:25:47:ea:f0:78:d3:5e:b9:8b:cb:0f:6c:bb:
                    55:a5:1f:7c:02:1c:9a:60:9e:4d:3e:98:70:0d:0e:
                    23:79:07:98:7f:ba:a1:34:8f:08:44:81:4f:9d:38:
                    0f:f3:60:da:a3:d5:ea:8b:d7:e9:61:dd:79:32:0e:
                    ee:f9:d3:e5:e5:4c:eb:06:3f:d6:03:c7:51:71:54:
                    82:4a:c3:a2:01:57:2b:7c:0c:a3:11:30:ac:78:9b:
                    62:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:40:9B:BC:BE:8E:39:AC:CB:FF:B6:3E:3C:30:60:03:B8:86:33:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bba4bd68-d315-30c3-8077-c64e86fcb4b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.252.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:23:ca:c3:39:fc:eb:5e:d5:1b:33:37:3e:88:61:f4:52:2e:
         97:5d:33:84:ad:5d:a0:91:c6:fb:6a:4a:e0:4f:6b:e5:86:a0:
         56:44:4c:d3:c9:54:47:1c:af:0b:28:4e:6a:74:a3:e0:30:65:
         65:f2:75:a0:c6:7a:96:d2:69:cf:0e:3a:11:4d:1f:e6:8c:1f:
         0e:e0:ac:09:5a:9f:d3:b4:4c:94:c7:30:69:d5:3e:93:c2:d8:
         2b:b2:a9:9d:87:40:85:84:81:cc:e0:d1:42:20:22:cf:66:12:
         10:55:be:5f:72:e2:e6:31:b0:a9:24:b9:9d:a2:2f:89:7b:eb:
         a3:ed:e9:c2:83:05:b4:f6:aa:e7:51:1a:69:ce:7b:ab:19:84:
         0c:82:c6:bf:f2:a6:84:d6:ad:08:6d:bb:7a:e7:e0:ad:69:1d:
         bf:a2:d0:fc:ee:f3:7f:32:7c:0a:bc:19:50:68:bb:eb:df:9c:
         56:1a:bd:38:33:5c:17:3a:74:13:1d:4a:2a:2f:63:1b:f1:0d:
         01:25:8f:24:3d:63:09:8b:ab:82:02:e0:3f:ff:d6:f9:24:d0:
         8c:30:d6:6a:07:47:14:81:a6:cb:ee:7d:40:37:a3:f1:30:8a:
         31:03:51:ac:34:9d:b7:a1:b7:5a:4b:63:c6:b0:0f:6d:ac:27:
         58:36:86:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:40:26 2025 by rpki-client