Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/7d8ccc90-1ec6-3aa0-bfa1-28ccabff46a1.roa
File:                     7d8ccc90-1ec6-3aa0-bfa1-28ccabff46a1.roa (raw, json)
Hash identifier:          Sd+3BY+juSMUEbCIyzL4DTbXHdAPy1WWePvp2FaRbY0=
Subject key identifier:   48:F7:56:EF:EA:6B:AD:BB:01:17:63:73:8D:53:45:A1:A7:D5:1C:E8
Certificate issuer:       /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
Certificate serial:       010D0C9F4328584A9FFB9258762C7EA896298A80
Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/7d8ccc90-1ec6-3aa0-bfa1-28ccabff46a1.roa
Signing time:             Thu 24 Jul 2025 13:01:02 +0000
ROA not before:           Thu 24 Jul 2025 13:01:02 +0000
ROA not after:            Wed 22 Oct 2025 13:01:02 +0000
asID:                     398395
IP address blocks:        45.59.132.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:fb:92:58:76:2c:7e:a8:96:29:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
        Validity
            Not Before: Jul 24 13:01:02 2025 GMT
            Not After : Oct 22 13:01:02 2025 GMT
        Subject: CN=bb7c769b-e94e-4398-925d-0b537c877669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:a7:49:93:4d:de:33:e2:27:32:4a:8c:c6:65:
                    e4:41:68:3f:0b:ac:0a:81:43:a0:83:8c:63:42:55:
                    5a:d0:f2:e8:f5:f2:16:39:9d:ca:20:17:d2:7e:8f:
                    b6:85:67:69:5c:f3:36:e8:f4:38:79:35:73:82:6b:
                    55:e1:58:53:98:c2:23:39:bd:8e:54:68:d8:0c:1d:
                    7c:8d:8d:b5:9e:97:06:97:b0:a2:96:d1:89:88:e1:
                    a5:49:1d:d1:a9:30:91:54:27:b6:e8:18:4e:58:84:
                    01:60:b3:6e:eb:ba:ec:ce:df:7e:ff:10:89:58:71:
                    c7:cf:ec:45:71:6d:e2:f1:5f:27:52:73:47:2d:07:
                    c8:2b:ec:13:90:e0:9a:49:06:23:74:5d:e8:ef:d1:
                    ef:3b:f5:37:a5:8a:30:65:70:b2:61:05:b5:d5:01:
                    80:6d:ad:ad:c0:c2:9a:94:0f:75:62:02:2c:57:99:
                    5f:d4:58:de:21:88:fe:ff:49:20:02:4a:df:74:ae:
                    b6:d7:ff:d8:01:53:81:ab:8a:47:14:4f:3a:94:2d:
                    cf:b6:d9:18:54:75:ae:89:4f:95:d2:d5:5b:03:ed:
                    96:3f:44:80:28:c0:29:22:4a:51:03:85:fb:1e:4c:
                    6b:d6:7d:c8:7b:8e:0a:6e:2b:ba:b9:96:3d:25:26:
                    af:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:F7:56:EF:EA:6B:AD:BB:01:17:63:73:8D:53:45:A1:A7:D5:1C:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/7d8ccc90-1ec6-3aa0-bfa1-28ccabff46a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl

            X509v3 Authority Key Identifier:
                keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:53:66:a0:b1:1e:f2:9b:ad:00:cd:e6:33:c3:23:e9:f7:64:
         df:04:d5:b1:1f:43:70:34:8d:6b:72:e4:81:fe:cc:48:5e:0a:
         c4:06:7b:07:96:37:60:5e:0d:2c:ce:a4:a6:2a:be:b4:d0:1f:
         b2:65:ec:27:fe:af:75:3b:6e:b5:5d:c6:d5:47:a0:30:36:94:
         99:a0:20:a9:7a:21:91:f5:5c:27:82:42:a6:43:95:4b:89:d0:
         5f:d9:09:95:f2:f0:0d:61:90:2d:a3:11:53:3f:18:86:ab:0e:
         ea:e7:3f:3c:d2:77:c7:ae:69:90:ab:58:26:b8:7c:8a:e8:67:
         a4:17:8d:69:b5:41:b6:1f:d1:b4:cd:db:c0:26:40:95:37:16:
         02:14:b5:1a:6e:57:29:c0:70:52:13:c2:16:ec:43:c8:fc:e3:
         f0:14:24:b2:39:10:ae:62:d4:a5:7e:6d:ca:bf:77:4a:68:e3:
         5e:b8:c1:1d:5d:d5:4a:07:14:2d:bc:fa:7e:76:e9:fb:f7:5e:
         e1:45:96:d9:04:28:fe:04:30:70:0f:2f:2b:89:51:7e:a8:09:
         f5:e7:2a:81:22:33:ee:5c:8a:7f:dd:6b:ed:b4:d4:10:86:d9:
         41:f9:d2:2d:9f:04:91:01:b6:b9:d8:02:72:0f:70:84:79:00:
         65:f9:a8:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:26:50 2025 by rpki-client