Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/e480ec32-1a60-392f-8390-97d98d937a8f.roa
File:                     e480ec32-1a60-392f-8390-97d98d937a8f.roa (raw, json)
Hash identifier:          uJdaSnEydMeGOsPEOe4dAHUt5sVbJlLk1fVCXJEUnSs=
Subject key identifier:   D8:6F:00:1D:26:1B:2D:EA:0C:03:94:CD:22:C9:FB:98:B4:42:F6:88
Certificate issuer:       /CN=a90f006a-b108-4757-9dfd-b36376534658
Certificate serial:       010D0C9F4328584BB035D302222A60F0E77D3900
Authority key identifier: 56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/e480ec32-1a60-392f-8390-97d98d937a8f.roa
Signing time:             Thu 30 Oct 2025 01:18:25 +0000
ROA not before:           Thu 30 Oct 2025 01:18:25 +0000
ROA not after:            Wed 28 Jan 2026 02:18:25 +0000
asID:                     206996
IP address blocks:        45.43.2.0/24 maxlen: 24
                          45.43.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b0:35:d3:02:22:2a:60:f0:e7:7d:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a90f006a-b108-4757-9dfd-b36376534658
        Validity
            Not Before: Oct 30 01:18:25 2025 GMT
            Not After : Jan 28 02:18:25 2026 GMT
        Subject: CN=6a8f5152-d070-43ea-97f7-6bc9eb402985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a8:73:aa:4a:7d:50:b4:56:35:94:22:74:eb:
                    3f:92:bb:96:e8:f5:cc:b5:95:7c:d2:03:c6:e3:5f:
                    d6:c1:71:45:3f:76:7a:b9:4b:0a:c1:ee:de:ce:f4:
                    7e:b1:27:1e:bd:05:96:49:66:82:57:d0:df:26:84:
                    5f:15:f6:0c:38:44:23:c4:08:58:73:c0:70:8f:00:
                    28:81:8a:96:41:5a:2f:7d:f0:29:68:75:e6:9e:5c:
                    56:c1:13:db:9f:8a:a9:33:6e:92:a0:15:a3:8c:eb:
                    c7:a3:fd:52:cf:77:b9:2b:75:5e:a1:48:0d:97:58:
                    27:22:6d:59:35:5e:4f:13:0a:58:20:53:26:5a:b6:
                    62:77:70:cd:bd:06:7b:5d:7e:aa:99:39:98:12:c4:
                    f9:72:be:0f:32:56:a0:b4:fd:c1:58:7a:3c:18:e7:
                    40:10:84:9f:90:18:27:d5:92:e3:63:47:16:ea:5d:
                    94:7e:f3:cf:df:93:d8:78:01:aa:1a:70:3e:97:ce:
                    d4:2b:71:22:b8:d0:eb:97:ce:f6:fa:a9:9f:0a:3b:
                    75:5e:38:e8:88:a4:1d:59:23:26:14:ba:ef:23:2e:
                    f3:0c:72:41:f8:bb:ed:9a:44:6b:33:49:68:af:fe:
                    d2:20:20:71:0c:58:5d:69:a0:ce:bb:c1:2c:39:9a:
                    bf:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:6F:00:1D:26:1B:2D:EA:0C:03:94:CD:22:C9:FB:98:B4:42:F6:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/e480ec32-1a60-392f-8390-97d98d937a8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl

            X509v3 Authority Key Identifier:
                keyid:56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.43.2.0/24
                  45.43.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:55:5f:c0:7d:da:ec:75:60:21:ea:32:e1:00:ee:17:08:5a:
         f6:d4:73:b6:8a:87:29:2f:3f:ab:6b:92:c8:ae:2d:de:4d:30:
         8b:87:fc:dd:e7:8d:b5:e9:ec:f4:d2:69:53:f0:be:46:b3:df:
         40:b7:4e:10:70:dd:a4:2e:6b:1b:1c:24:dc:e4:12:9a:de:65:
         e8:8c:dc:ff:6e:30:76:de:df:35:0a:fc:66:d7:b9:5f:7c:a7:
         7a:f6:22:f4:bc:8f:a5:1d:c9:98:c3:d6:7f:05:09:d3:fc:13:
         07:9e:56:70:c8:8c:b6:8b:89:e3:98:fe:4c:96:4a:ff:eb:7b:
         d1:a6:6c:58:c2:aa:ff:91:b9:d9:c9:94:5c:f0:3b:b7:77:f2:
         40:8e:48:e6:c4:cf:03:4a:d8:d8:94:dd:f7:bc:18:f3:7a:3c:
         a3:c8:1d:64:48:7c:e0:6d:7b:d5:d0:cd:86:93:1c:19:ca:b3:
         8b:e8:c3:84:64:9b:d6:56:5e:82:0b:91:fa:e2:14:e3:87:47:
         0a:a8:d3:93:68:06:0b:ff:2d:f0:4c:ad:43:09:6b:dc:42:98:
         4f:d4:64:ae:44:76:47:2a:8a:1c:06:c2:d2:76:e0:ce:56:fc:
         7c:fb:5a:e8:81:3a:45:95:79:49:58:54:5d:e8:ec:83:2f:88:
         d9:f9:4f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:17:28 2025 by rpki-client