Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/f543eeb0-b56e-3385-adec-fdf8ea2d6aff.roa
File:                     f543eeb0-b56e-3385-adec-fdf8ea2d6aff.roa (raw, json)
Hash identifier:          kueKOHu0OiZlxZJoTnuqkblaSLf9RFChFgWRMZMsnbo=
Subject key identifier:   B9:7C:11:DF:98:9A:C0:6C:E9:C9:6E:D3:E1:D6:FC:08:AD:CB:BD:C2
Certificate issuer:       /CN=451e8d9f-d9ea-45cf-8fb9-2811e86b81b2
Certificate serial:       010D0C9F4328584BBFA59C86F887D316E7059660
Authority key identifier: F2:B3:28:9C:11:A4:6A:18:99:01:CF:9B:8D:24:3E:97:D0:04:17:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/f543eeb0-b56e-3385-adec-fdf8ea2d6aff.roa
Signing time:             Tue 04 Nov 2025 14:00:39 +0000
ROA not before:           Tue 04 Nov 2025 14:00:39 +0000
ROA not after:            Mon 02 Feb 2026 14:00:39 +0000
asID:                     15020
IP address blocks:        45.91.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bf:a5:9c:86:f8:87:d3:16:e7:05:96:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=451e8d9f-d9ea-45cf-8fb9-2811e86b81b2
        Validity
            Not Before: Nov  4 14:00:39 2025 GMT
            Not After : Feb  2 14:00:39 2026 GMT
        Subject: CN=1895e15d-e0fa-44ef-8df4-d0dfaf14fedb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ba:8f:fe:c8:7d:d4:95:2f:66:4b:b2:d0:29:
                    82:22:e9:7a:6d:f6:39:25:f8:94:18:18:e8:f0:31:
                    32:6a:d4:d5:99:4f:77:3d:95:23:ac:da:91:7d:41:
                    30:9a:e8:a0:54:51:93:dd:22:0d:a7:c9:8d:e6:e2:
                    13:b8:40:f1:a4:02:78:4c:10:24:0f:74:13:02:f0:
                    d9:7b:86:35:ae:57:f2:56:a9:a0:59:24:9a:0c:61:
                    75:50:45:0f:d0:ee:01:08:d4:c6:96:6f:a1:fc:09:
                    dc:39:e7:ac:54:58:d2:7c:82:33:1d:a4:31:08:03:
                    34:72:5d:b0:84:0b:93:15:f0:ab:28:fd:d4:cb:f1:
                    06:0c:b8:9a:07:6d:50:5f:98:2d:e4:ce:eb:9c:c8:
                    d6:b4:ca:d6:25:53:23:75:0d:51:96:61:4d:1c:21:
                    73:ff:0e:9e:dd:07:87:bb:88:8f:82:3b:cf:cb:62:
                    cd:6b:c1:f3:30:36:14:f6:22:d0:46:0c:5a:3c:32:
                    ca:62:93:3a:eb:00:f9:8e:56:a7:a9:20:25:0b:f6:
                    11:d3:49:ec:fe:b2:ac:48:32:7f:72:a0:4d:2d:0a:
                    3e:00:60:c7:8f:99:54:c8:cb:b9:a4:e0:77:94:6d:
                    4d:8f:2e:0b:8f:f5:df:14:03:24:07:ef:0f:59:f1:
                    dc:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:7C:11:DF:98:9A:C0:6C:E9:C9:6E:D3:E1:D6:FC:08:AD:CB:BD:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/f543eeb0-b56e-3385-adec-fdf8ea2d6aff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.crl

            X509v3 Authority Key Identifier:
                keyid:F2:B3:28:9C:11:A4:6A:18:99:01:CF:9B:8D:24:3E:97:D0:04:17:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.91.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:bf:8e:cf:01:10:1e:ac:06:ae:e5:23:66:3c:17:c7:c3:d2:
         21:dc:39:30:b8:60:e6:27:80:13:47:51:49:cd:d4:58:75:1d:
         c5:c7:8e:1e:03:d2:c0:8e:e0:86:b2:3a:d2:9b:91:56:ab:ca:
         f6:53:ae:a5:8c:bb:97:a5:69:3f:74:fd:1f:06:66:ad:04:2f:
         68:3e:50:22:52:7c:b2:eb:33:0a:60:5a:46:a2:d2:44:37:a4:
         70:2e:f5:d7:cb:6e:86:7d:c0:33:55:01:f7:fd:a2:3c:83:dc:
         bb:74:df:85:2c:4d:57:51:12:15:fd:be:6a:d9:69:1a:a9:9f:
         6b:29:dd:5f:e2:10:a7:30:7f:bf:36:da:34:07:b3:a3:d7:fa:
         f9:d2:f8:89:42:ce:68:67:35:72:c9:6b:f9:99:1e:6e:63:e1:
         94:a3:e0:37:84:a9:b5:85:de:26:52:73:2c:8c:05:1d:86:e4:
         51:6a:a7:12:29:34:97:17:ac:ce:c4:8f:6e:5e:a9:e3:5b:1a:
         31:04:69:44:9d:0c:4a:27:43:ec:3a:b1:86:8a:89:3f:8f:b5:
         a9:90:98:06:35:b9:ce:2b:2e:0d:26:82:fc:77:8d:96:6f:b7:
         36:6a:38:f6:79:68:e3:33:6c:bb:7c:93:52:51:6a:43:63:35:
         6c:ce:67:a6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/pZyG+IfTFucFlmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDUxZThkOWYtZDllYS00NWNmLThmYjktMjgxMWU4NmI4
MWIyMB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk
MTg5NWUxNWQtZTBmYS00NGVmLThkZjQtZDBkZmFmMTRmZWRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbqP/sh91JUvZkuy0CmCIul6bfY5JfiUGBjo
8DEyatTVmU93PZUjrNqRfUEwmuigVFGT3SINp8mN5uITuEDxpAJ4TBAkD3QTAvDZ
e4Y1rlfyVqmgWSSaDGF1UEUP0O4BCNTGlm+h/AncOeesVFjSfIIzHaQxCAM0cl2w
hAuTFfCrKP3Uy/EGDLiaB21QX5gt5M7rnMjWtMrWJVMjdQ1RlmFNHCFz/w6e3QeH
u4iPgjvPy2LNa8HzMDYU9iLQRgxaPDLKYpM66wD5jlanqSAlC/YR00ns/rKsSDJ/
cqBNLQo+AGDHj5lUyMu5pOB3lG1Njy4Lj/XfFAMkB+8PWfHcKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLl8Ed+YmsBs6clu0+HW/Aity73CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80NTFl
OGQ5Zi1kOWVhLTQ1Y2YtOGZiOS0yODExZTg2YjgxYjIvZjU0M2VlYjAtYjU2ZS0z
Mzg1LWFkZWMtZmRmOGVhMmQ2YWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDUxZThkOWYtZDllYS00NWNmLThm
YjktMjgxMWU4NmI4MWIyLzQ1MWU4ZDlmLWQ5ZWEtNDVjZi04ZmI5LTI4MTFlODZi
ODFiMi5jcmwwHwYDVR0jBBgwFoAU8rMonBGkahiZAc+bjSQ+l9AEF8QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS80NTFlOGQ5Zi1kOWVhLTQ1Y2YtOGZiOS0yODEx
ZTg2YjgxYjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVtsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEi/js8BEB6sBq7lI2Y8F8fD0iHcOTC4YOYngBNHUUnN1Fh1HcXHjh4D
0sCO4IayOtKbkVaryvZTrqWMu5elaT90/R8GZq0EL2g+UCJSfLLrMwpgWkai0kQ3
pHAu9dfLboZ9wDNVAff9ojyD3Lt034UsTVdREhX9vmrZaRqpn2sp3V/iEKcwf782
2jQHs6PX+vnS+IlCzmhnNXLJa/mZHm5j4ZSj4DeEqbWF3iZScyyMBR2G5FFqpxIp
NJcXrM7Ej25eqeNbGjEEaUSdDEonQ+w6sYaKiT+PtamQmAY1uc4rLg0mgvx3jZZv
tzZqOPZ5aOMzbLt8k1JRakNjNWzOZ6Y=
-----END CERTIFICATE-----
Generated at Wed Nov 5 06:06:43 2025 by rpki-client