Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/ec9a3c4e-8478-3c50-91c2-ec0a03d86345.roa
File:                     ec9a3c4e-8478-3c50-91c2-ec0a03d86345.roa (raw, json)
Hash identifier:          +d9vp5DsaKuEPn4W5lOn+PDlKv8E39/mxwrESbCw22E=
Subject key identifier:   61:FC:15:AF:3A:18:6F:2B:19:EA:EC:F4:63:90:39:3E:D1:61:3A:ED
Certificate issuer:       /CN=451e8d9f-d9ea-45cf-8fb9-2811e86b81b2
Certificate serial:       010D0C9F4328584A87A294C6762B5BB0E9C71F00
Authority key identifier: F2:B3:28:9C:11:A4:6A:18:99:01:CF:9B:8D:24:3E:97:D0:04:17:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/ec9a3c4e-8478-3c50-91c2-ec0a03d86345.roa
Signing time:             Tue 15 Jul 2025 19:42:28 +0000
ROA not before:           Tue 15 Jul 2025 19:42:28 +0000
ROA not after:            Mon 13 Oct 2025 19:42:28 +0000
asID:                     210636
IP address blocks:        45.89.50.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:87:a2:94:c6:76:2b:5b:b0:e9:c7:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=451e8d9f-d9ea-45cf-8fb9-2811e86b81b2
        Validity
            Not Before: Jul 15 19:42:28 2025 GMT
            Not After : Oct 13 19:42:28 2025 GMT
        Subject: CN=681c1d36-2b20-4275-a56e-b2f3d19d0b59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d9:bb:08:f8:ee:7c:94:1b:a6:c1:e0:09:9c:
                    7f:00:33:f1:15:86:59:d5:4a:c1:eb:06:33:31:20:
                    ac:71:34:20:06:48:64:7e:4d:14:04:62:ab:0e:da:
                    a1:77:61:6a:e2:3e:07:2d:5a:6f:c5:d5:94:60:9f:
                    b0:b5:f7:23:9c:8d:9d:3a:37:b1:b6:41:d9:08:4e:
                    c7:da:18:7c:1e:95:c0:86:fc:31:77:0b:6d:f1:be:
                    a7:0c:87:2e:3e:bd:77:48:f8:3a:ed:23:63:6c:77:
                    e7:53:ce:bc:1d:c9:70:40:60:c9:ee:1b:a6:0f:78:
                    45:7a:91:c6:20:4a:a5:39:ff:30:12:db:0b:93:97:
                    e3:fb:61:e2:e5:45:4a:61:28:29:e6:3d:ca:6e:c9:
                    2e:33:3a:76:40:af:bb:61:38:e1:eb:27:74:2b:cc:
                    ff:9e:9d:5c:8f:ac:35:ab:6e:80:0b:72:ad:fc:4c:
                    c6:01:5d:0b:0a:81:45:eb:5a:38:e0:47:71:08:8a:
                    53:f9:86:2e:c2:09:82:79:be:79:e5:63:38:3e:08:
                    ad:96:4d:d5:23:77:48:47:58:6e:cc:cf:d4:d8:05:
                    60:21:4a:83:f9:cf:30:c0:41:65:f8:ea:a3:36:9b:
                    bf:e9:01:52:d0:3a:25:d8:4b:71:66:60:80:03:bf:
                    d4:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:FC:15:AF:3A:18:6F:2B:19:EA:EC:F4:63:90:39:3E:D1:61:3A:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/ec9a3c4e-8478-3c50-91c2-ec0a03d86345.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.crl

            X509v3 Authority Key Identifier:
                keyid:F2:B3:28:9C:11:A4:6A:18:99:01:CF:9B:8D:24:3E:97:D0:04:17:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.89.50.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:7c:98:03:27:d3:f7:41:54:c7:18:e8:d5:b1:4e:f0:8e:a0:
         92:a8:ca:31:95:84:81:6b:50:77:b5:d6:96:df:44:fd:84:2c:
         c4:41:1e:37:7b:06:60:d1:d1:1d:f5:c8:b7:25:24:52:0f:d1:
         2c:a8:bc:c1:64:c7:5f:04:21:d4:46:16:b3:fe:b8:2e:28:55:
         c4:ae:0a:d4:dd:b8:cb:c1:e2:bb:f9:2a:9d:19:9d:e4:7a:f3:
         23:15:1e:33:28:de:63:a7:29:73:93:bd:8f:98:53:eb:7c:65:
         9c:79:40:3c:09:97:d7:e4:08:61:c0:11:30:a3:fe:65:9a:32:
         5f:84:46:c2:e7:76:e9:cb:4c:55:2e:fc:39:47:c9:82:06:08:
         d3:af:16:4b:4e:35:76:67:c2:ae:59:26:2e:1d:98:47:87:ef:
         90:50:d2:e0:50:a7:71:69:b9:bd:dc:03:32:2e:87:bd:a3:4e:
         64:fa:19:38:63:bb:ac:c2:31:2b:db:e1:36:f6:43:18:66:c8:
         f3:3e:1f:a7:93:59:e7:7c:f1:ba:9a:c8:72:e4:be:47:c4:ee:
         b7:3b:a2:85:fc:04:cb:65:78:29:d1:35:06:d7:a2:f0:1c:f6:
         44:46:89:92:b1:e4:10:22:5c:4e:88:af:a7:cb:4f:40:7d:81:
         59:be:75:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 06:40:50 2025 by rpki-client