Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/ff62cbe6-36e1-3b14-93f8-452289d60421.roa
File:                     ff62cbe6-36e1-3b14-93f8-452289d60421.roa (raw, json)
Hash identifier:          YeYk5IAvS0fUHzmNBCNqyLLgnY/ms2QwGvLSSbVbwQk=
Subject key identifier:   88:8C:42:68:01:FC:C5:E4:30:91:43:18:95:AC:10:8D:70:A2:AC:92
Certificate issuer:       /CN=59c9f46b-742f-4b2d-929b-267fefccc50a
Certificate serial:       010D0C9F4328584B477C789B2BFE4526A1016880
Authority key identifier: 31:94:CB:06:4F:A4:B6:3C:A6:4A:48:CC:A8:86:01:92:A7:0E:A0:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/ff62cbe6-36e1-3b14-93f8-452289d60421.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     54702
IP address blocks:        45.45.196.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:78:9b:2b:fe:45:26:a1:01:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59c9f46b-742f-4b2d-929b-267fefccc50a
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=e0b31964-28b6-4331-87cb-df38bc9799ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:37:a2:4b:e2:c3:15:48:7f:63:11:f6:13:ef:
                    12:97:09:42:71:83:28:a9:7c:9e:f1:44:99:aa:cc:
                    37:17:1d:a8:5f:c0:a5:a1:25:5b:1f:32:b8:8b:42:
                    11:9c:22:02:89:5b:62:38:b2:29:d4:e5:ab:cf:4e:
                    9f:93:ab:6b:5e:79:06:be:3e:a8:f7:ff:d8:2e:c2:
                    7d:ee:00:db:72:5a:f9:79:71:cf:b3:a5:3d:67:51:
                    3f:7c:17:7b:bc:1b:3e:09:a5:bb:aa:e2:17:ba:8b:
                    bb:c2:0d:d5:14:47:3f:40:4c:17:39:a9:51:de:d9:
                    6d:5f:b9:79:9e:90:37:9d:9d:94:22:ad:d8:5e:c2:
                    6e:bc:61:d8:c6:b5:99:03:88:ac:fc:2a:cd:83:3f:
                    aa:62:9d:c6:80:3c:6f:f5:22:e6:24:b9:51:17:87:
                    b8:a0:4f:dd:52:f5:c4:30:a7:ef:39:be:49:0d:6b:
                    fd:52:16:93:bb:d0:dd:ed:8b:de:fe:50:61:11:dc:
                    45:16:07:18:57:94:63:2d:5b:ad:fc:3b:7f:d0:8f:
                    9a:cf:cd:01:25:70:a4:84:19:3d:a2:a5:0e:b8:be:
                    ef:f8:57:89:fb:f4:0e:74:6d:5f:ad:cf:41:d0:29:
                    dc:73:e7:8d:08:b9:ba:b1:6f:c7:d9:e0:8f:60:39:
                    af:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:8C:42:68:01:FC:C5:E4:30:91:43:18:95:AC:10:8D:70:A2:AC:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/ff62cbe6-36e1-3b14-93f8-452289d60421.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.crl

            X509v3 Authority Key Identifier:
                keyid:31:94:CB:06:4F:A4:B6:3C:A6:4A:48:CC:A8:86:01:92:A7:0E:A0:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.196.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:87:ab:67:8d:c8:8f:2e:d0:86:f7:9b:1a:51:8a:b6:64:4e:
         75:74:f5:b5:1c:43:50:02:1d:c9:17:bf:23:38:55:17:c0:10:
         77:e0:84:1a:b5:20:a7:22:56:77:11:d2:10:6d:0a:18:c8:91:
         4a:b2:13:87:43:85:c9:cc:f5:72:b4:fe:b5:93:a8:84:61:d9:
         d0:27:8e:d3:f0:4e:4d:13:31:9b:f1:f4:79:b9:03:a7:06:3e:
         e1:e3:14:d5:24:2a:ae:f2:c8:83:6c:a2:38:29:29:19:23:08:
         be:37:28:0a:c2:c0:3d:2d:4a:51:fc:d0:e5:c3:85:01:78:77:
         76:13:f9:c3:7d:3f:b4:89:7f:c2:54:1b:e5:8c:d4:4f:d4:a1:
         f6:4b:ba:c2:5e:99:23:88:5b:b4:69:57:97:29:ce:85:6f:63:
         51:4b:f2:dd:fe:7c:41:9a:ae:82:b6:26:e5:f5:64:82:6c:74:
         72:96:7d:23:40:fa:d9:06:f6:29:35:55:41:2d:b9:b6:36:8a:
         03:d7:fd:17:3b:59:35:1d:6b:c7:63:61:0c:b3:b8:2a:79:85:
         8b:45:ad:87:86:73:f0:bb:4f:b6:93:20:44:91:4e:4e:e8:48:
         9b:49:43:41:c7:a3:d3:e1:d1:8c:2f:11:68:cc:bc:3a:23:d2:
         0c:80:06:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 21:34:39 2025 by rpki-client