Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2/dcc6e090-edd5-303b-98ef-1ad13c46b312.roa
File:                     dcc6e090-edd5-303b-98ef-1ad13c46b312.roa (raw, json)
Hash identifier:          I/EAcQgR6YT4migu0BgOiuxKBv7MnqlJ9FlNs8cOtUs=
Subject key identifier:   33:DC:1F:5B:14:72:44:FC:AE:8E:72:21:6E:BD:13:4F:C2:52:FF:A8
Certificate issuer:       /CN=2dd18d53-59c8-427f-9c2f-1f62eab97cb2
Certificate serial:       010D0C9F4328584AA85B9530A5B57B6495D0DD80
Authority key identifier: 09:BA:D3:03:4B:6A:2C:C1:74:41:89:81:CB:15:5B:65:64:42:FF:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2/dcc6e090-edd5-303b-98ef-1ad13c46b312.roa
Signing time:             Sun 27 Jul 2025 13:01:04 +0000
ROA not before:           Sun 27 Jul 2025 13:01:04 +0000
ROA not after:            Sat 25 Oct 2025 13:01:04 +0000
asID:                     135402
IP address blocks:        45.41.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2/2dd18d53-59c8-427f-9c2f-1f62eab97cb2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2/2dd18d53-59c8-427f-9c2f-1f62eab97cb2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a8:5b:95:30:a5:b5:7b:64:95:d0:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dd18d53-59c8-427f-9c2f-1f62eab97cb2
        Validity
            Not Before: Jul 27 13:01:04 2025 GMT
            Not After : Oct 25 13:01:04 2025 GMT
        Subject: CN=10dac829-79e9-4406-9d83-6e7311e554f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:83:be:10:dc:ec:4e:5a:5d:e3:00:7f:93:d6:
                    7a:5b:96:98:98:e1:1c:d8:c9:65:f9:68:6d:e9:3d:
                    79:9e:e7:30:ff:6e:fa:d1:71:69:3d:6d:51:dd:b3:
                    32:94:aa:72:06:27:09:59:52:a6:3d:ff:71:26:80:
                    9a:3e:89:41:dc:47:8d:94:23:d3:10:07:32:1d:dd:
                    6d:02:3b:78:e4:87:10:23:63:a1:d3:c7:20:9d:a1:
                    6c:b8:4f:4e:8d:52:01:41:a2:5b:5b:ce:41:67:f1:
                    cb:8c:ef:f1:21:e4:2c:fc:67:7c:6d:7d:d2:a9:68:
                    b9:9a:1b:4f:3e:81:bf:2e:ef:e8:3d:40:08:e9:ff:
                    f5:e4:f9:fb:ab:8f:8c:2b:62:68:98:bd:de:10:02:
                    95:df:de:f2:dc:57:f6:c3:a0:9f:dd:a8:45:5f:52:
                    88:90:e9:16:ac:cc:48:5a:ac:63:fd:b5:35:dd:ef:
                    72:21:56:29:b2:7a:b1:0e:c5:bf:9c:a5:35:b0:b4:
                    e6:f1:fb:9c:eb:20:60:de:ca:73:09:64:79:eb:9f:
                    6b:bd:70:8e:8d:98:18:64:89:b1:f3:1e:64:27:df:
                    41:47:14:4d:82:2e:ae:9a:68:14:54:2b:76:32:69:
                    ee:33:6f:b4:48:a1:81:ca:67:33:90:4e:37:fe:94:
                    5a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:DC:1F:5B:14:72:44:FC:AE:8E:72:21:6E:BD:13:4F:C2:52:FF:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2/dcc6e090-edd5-303b-98ef-1ad13c46b312.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2/2dd18d53-59c8-427f-9c2f-1f62eab97cb2.crl

            X509v3 Authority Key Identifier:
                keyid:09:BA:D3:03:4B:6A:2C:C1:74:41:89:81:CB:15:5B:65:64:42:FF:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.41.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:2c:4c:dd:d5:a9:c3:24:a4:69:66:8a:a4:63:f6:8a:99:7d:
         d7:10:7c:74:5b:ab:14:40:dd:f8:fa:fe:d8:74:f1:91:f1:20:
         75:cc:7e:5d:8e:a1:1d:6a:36:80:54:94:45:25:33:25:b9:92:
         ed:80:b5:e0:a3:f8:3a:33:15:1d:6c:74:6f:db:62:8c:7a:10:
         6c:67:e2:6f:40:68:77:1f:25:3d:cc:83:4a:35:e7:ef:a0:31:
         2d:24:7a:62:b6:fc:55:67:2f:f1:cd:d1:27:6a:8d:8c:15:24:
         dc:8d:d8:93:0a:b5:64:27:bc:d6:d8:31:4f:d2:88:33:b7:ab:
         4a:41:a2:09:5c:e0:a2:d9:c6:47:25:26:36:b3:ea:ab:e8:8a:
         1e:73:19:36:55:52:0d:dc:b9:62:15:6a:f7:d0:20:20:32:00:
         7e:f8:d7:a5:ac:0b:f3:2c:b0:ad:a2:82:fd:38:75:89:d1:c7:
         11:b3:b1:f1:7d:24:03:1b:a7:63:59:55:c4:cd:63:76:af:52:
         ca:43:8e:51:b6:2f:31:24:84:65:5f:cf:8c:02:80:2a:e1:bc:
         79:ec:5c:af:6e:d8:5a:78:ab:38:5c:d2:95:5e:6c:54:a0:4d:
         3a:d4:31:69:b9:cf:eb:73:0d:84:2e:87:55:80:62:d6:59:b3:
         0d:49:49:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:06:07 2025 by rpki-client