Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/bed61a49-e0db-3864-a697-d8e1e0b1dcc5.roa
File:                     bed61a49-e0db-3864-a697-d8e1e0b1dcc5.roa (raw, json)
Hash identifier:          GDy2IEopNGpAMfeYYesS6obOVcrQsaj3JnoaY66IMEQ=
Subject key identifier:   A9:DE:BE:F4:2C:2A:18:B5:E5:85:63:56:42:A9:1D:42:E6:D1:22:6F
Certificate issuer:       /CN=a90f006a-b108-4757-9dfd-b36376534658
Certificate serial:       010D0C9F4328584B110BFC9018E539B4DAD6F200
Authority key identifier: 56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/bed61a49-e0db-3864-a697-d8e1e0b1dcc5.roa
Signing time:             Wed 03 Sep 2025 01:00:33 +0000
ROA not before:           Wed 03 Sep 2025 01:00:33 +0000
ROA not after:            Tue 02 Dec 2025 02:00:33 +0000
asID:                     22333
IP address blocks:        45.43.7.0/24 maxlen: 24
                          45.43.8.0/24 maxlen: 24
                          66.11.125.0/24 maxlen: 24
                          104.192.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:11:0b:fc:90:18:e5:39:b4:da:d6:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a90f006a-b108-4757-9dfd-b36376534658
        Validity
            Not Before: Sep  3 01:00:33 2025 GMT
            Not After : Dec  2 02:00:33 2025 GMT
        Subject: CN=b8644ade-f08c-4a77-91d7-56c1b714b417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:4a:75:27:10:01:07:d4:9c:0b:7f:ea:28:24:
                    aa:41:40:91:af:cd:2a:5c:ec:20:e4:84:b3:99:b9:
                    84:81:a2:24:0c:ae:93:9e:61:e6:31:66:4d:72:42:
                    eb:3b:8d:38:15:47:5d:c9:68:2f:f1:29:39:7c:33:
                    fa:31:b2:c2:25:76:4b:16:09:ef:5d:ab:72:01:66:
                    57:36:4f:1f:5e:4a:99:c4:ed:04:7e:b5:3e:cd:09:
                    a8:b5:37:67:ac:20:76:34:41:bc:72:42:08:d8:42:
                    4d:9d:18:03:5c:61:c6:87:fc:22:de:4d:16:c9:32:
                    61:a5:c6:83:df:86:f3:b2:97:be:10:41:ac:b0:13:
                    37:06:2d:54:02:fa:21:02:f8:45:eb:92:88:7c:20:
                    58:42:1b:01:7d:d6:6a:ac:2b:f3:20:b1:72:21:da:
                    18:9c:77:54:ed:58:c6:44:5a:50:cd:38:4a:6a:03:
                    e2:42:ab:20:78:10:2d:25:f2:55:e1:ca:ec:12:30:
                    a6:96:6e:80:1d:7e:33:27:f8:24:5d:89:a6:9f:c6:
                    fe:32:13:d8:34:0d:b1:91:e3:7f:14:f3:c2:f4:58:
                    3f:9c:c0:7a:73:19:37:29:70:62:6d:79:f3:d1:73:
                    b6:8f:a3:2b:03:26:e5:de:32:10:15:6c:df:ab:4b:
                    62:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:DE:BE:F4:2C:2A:18:B5:E5:85:63:56:42:A9:1D:42:E6:D1:22:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/bed61a49-e0db-3864-a697-d8e1e0b1dcc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl

            X509v3 Authority Key Identifier:
                keyid:56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.43.7.0-45.43.8.255
                  66.11.125.0/24
                  104.192.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:42:79:6b:51:84:d0:42:d6:c9:28:07:2e:e4:36:24:ac:33:
         07:f2:41:e0:9d:1e:3b:60:9f:85:77:8a:d7:0c:5f:93:77:8f:
         76:99:be:c9:47:2a:aa:87:ae:b6:09:8c:06:1a:78:ad:e4:a3:
         3f:78:83:f4:c5:0f:09:55:12:1d:e8:60:cc:2e:48:37:dd:49:
         25:47:6b:04:5c:0e:53:a3:61:f0:d7:5d:6f:5f:1d:1c:42:fc:
         54:36:62:bf:1a:30:9e:0b:c7:22:0e:d2:b3:db:e1:7d:80:70:
         2f:a8:58:74:77:cb:d4:6d:e9:cf:7b:e4:b8:59:be:b6:81:30:
         f3:d9:f7:dc:20:86:6b:e1:f2:0d:f6:7c:f3:0d:b6:93:58:a6:
         cd:8c:02:17:d1:d6:c2:8c:82:de:02:e9:c1:16:76:f1:cb:61:
         d3:a5:65:fb:04:77:34:0d:95:5a:24:b5:80:cb:45:65:5e:0b:
         81:9c:6e:48:71:01:5d:63:cb:5a:d9:a1:a5:37:33:b0:81:ce:
         02:f9:d7:a4:1f:bf:78:73:7c:c3:d4:cd:29:d2:d0:14:c4:81:
         87:09:6e:4e:54:c0:45:95:65:16:ed:31:dd:98:39:0e:ce:e5:
         08:39:f6:4a:49:6c:ff:35:18:7d:4d:08:eb:2a:b2:1f:7a:ac:
         cc:47:3b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 21:36:50 2025 by rpki-client