Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/24d1e724-70a9-34bf-9bce-3eb67e7a5d50.roa
File:                     24d1e724-70a9-34bf-9bce-3eb67e7a5d50.roa (raw, json)
Hash identifier:          BXbrJ0bbLaRCD2ol1+MaMVPX2gP1v02i8GBGU6/UaYg=
Subject key identifier:   FD:4E:5A:6F:F7:3C:BD:36:57:BF:EF:27:30:85:E8:FC:85:7A:47:29
Certificate issuer:       /CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c
Certificate serial:       010D0C9F4328584AA85BAE87F9A040BF90AEE880
Authority key identifier: 58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/24d1e724-70a9-34bf-9bce-3eb67e7a5d50.roa
Signing time:             Sun 27 Jul 2025 13:01:04 +0000
ROA not before:           Sun 27 Jul 2025 13:01:04 +0000
ROA not after:            Sat 25 Oct 2025 13:01:04 +0000
asID:                     2906
IP address blocks:        45.57.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a8:5b:ae:87:f9:a0:40:bf:90:ae:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c
        Validity
            Not Before: Jul 27 13:01:04 2025 GMT
            Not After : Oct 25 13:01:04 2025 GMT
        Subject: CN=94e8ffdb-6aac-4397-9111-717880f3d8db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:bf:8d:a1:d8:db:9d:5a:6e:9a:de:2f:09:91:
                    a8:b2:24:e4:50:3b:92:9a:1e:1f:8b:65:de:dd:0b:
                    54:aa:87:89:21:c1:3e:15:e0:18:a9:9a:93:40:84:
                    0b:6e:b4:2c:b6:94:2c:14:4e:6b:9c:1c:44:3a:7b:
                    7f:d9:99:79:f2:57:af:ad:6d:01:eb:0e:8f:19:c0:
                    94:21:74:50:76:0d:c2:df:df:cb:e4:4a:07:b9:11:
                    67:ad:4c:09:f4:a2:63:e8:12:b3:fa:f1:e2:09:8e:
                    4a:c7:22:44:11:7a:8b:1f:f5:25:3a:7c:22:7f:b2:
                    86:82:f1:24:de:0c:c6:7f:c3:7d:4c:8b:62:bb:be:
                    58:91:f0:34:14:13:08:cc:0d:17:e6:7e:3e:b4:3d:
                    97:cb:81:8a:52:d0:6f:61:94:b8:64:aa:e9:6d:53:
                    f0:eb:2b:d4:88:bb:11:48:13:63:bc:f1:d4:08:4a:
                    c9:d0:a0:b1:85:d3:fc:a1:40:08:94:7f:27:ab:0d:
                    8a:1c:ac:e6:71:6e:11:f3:67:53:6d:25:d2:4e:d0:
                    d7:a1:65:ad:f1:59:21:5b:fc:2a:b9:4e:f1:3a:12:
                    5d:91:8c:29:39:01:05:67:ba:2f:fc:8a:d0:08:10:
                    00:a1:b9:b5:a5:ce:98:bf:46:5f:5a:f8:0d:b2:0c:
                    d8:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:4E:5A:6F:F7:3C:BD:36:57:BF:EF:27:30:85:E8:FC:85:7A:47:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/24d1e724-70a9-34bf-9bce-3eb67e7a5d50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl

            X509v3 Authority Key Identifier:
                keyid:58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.57.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:84:54:a7:c6:cf:fc:ab:d4:0c:98:fa:b1:77:1e:27:2a:20:
         36:bd:d6:28:ef:74:3e:aa:66:2b:88:e5:a6:1c:5a:9b:46:78:
         03:1d:0a:75:c0:28:f3:69:24:86:85:68:1a:de:a8:31:27:a9:
         f5:e4:76:eb:4a:6b:ad:e6:97:d1:fd:56:83:1a:60:df:e2:a1:
         69:b2:c6:35:8b:c5:1a:85:7e:80:5b:5e:99:c5:d5:66:4e:e8:
         5c:59:2d:8e:bd:d5:10:dd:d0:c4:c8:aa:35:51:32:9c:b0:a7:
         a3:19:7d:9d:97:32:e8:00:fe:80:57:22:3d:38:43:aa:06:9d:
         0c:f6:ad:93:4d:1a:d9:f2:8f:2c:60:15:0a:7a:09:53:eb:91:
         27:0f:28:cd:d6:4e:fe:00:ba:a1:85:bd:98:20:b6:4c:61:a4:
         e6:d7:5c:c1:4d:8c:57:97:89:35:80:50:7c:d7:af:50:80:6e:
         3e:08:ff:78:07:09:01:b5:70:b9:84:86:da:e8:36:0b:11:5f:
         d0:6a:74:7a:0a:3e:c0:d8:4e:23:3c:fc:8d:24:12:ee:06:2a:
         74:88:fa:04:5b:80:e7:d6:4a:a7:f3:ba:a6:fd:2b:50:1d:a6:
         77:da:84:db:52:38:c5:14:32:02:88:1c:7a:5f:9f:01:fa:6d:
         b3:21:da:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:20:58 2025 by rpki-client