Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/081c5d12-fae3-3aee-9b3d-9a008f516848.roa
File:                     081c5d12-fae3-3aee-9b3d-9a008f516848.roa (raw, json)
Hash identifier:          oMmDLA3Oi6F4Pjl/SDe4fpR18UP2DBU9hSvj4uAEjio=
Subject key identifier:   1C:D8:CA:CB:0F:78:50:F8:08:A6:48:52:4B:79:65:38:FF:9C:56:70
Certificate issuer:       /CN=52fbdac8-20c0-4da4-8654-27b4bf592930
Certificate serial:       010D0C9F4328584BC96AEC9083626FC61EC7ACC0
Authority key identifier: 83:F5:A6:59:FF:1E:96:96:C8:E5:B4:B9:DF:F6:3D:37:29:30:A4:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/081c5d12-fae3-3aee-9b3d-9a008f516848.roa
Signing time:             Sat 08 Nov 2025 02:00:30 +0000
ROA not before:           Sat 08 Nov 2025 02:00:30 +0000
ROA not after:            Fri 06 Feb 2026 02:00:30 +0000
asID:                     16509
IP address blocks:        45.45.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/52fbdac8-20c0-4da4-8654-27b4bf592930.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/52fbdac8-20c0-4da4-8654-27b4bf592930.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Nov 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c9:6a:ec:90:83:62:6f:c6:1e:c7:ac:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52fbdac8-20c0-4da4-8654-27b4bf592930
        Validity
            Not Before: Nov  8 02:00:30 2025 GMT
            Not After : Feb  6 02:00:30 2026 GMT
        Subject: CN=14149f79-36bd-4601-85b5-6db6ba86b3b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2e:3d:27:02:69:91:27:16:e2:d5:98:9c:ef:
                    9a:75:8f:0f:03:18:11:4a:f6:b9:0c:9f:39:b8:61:
                    33:d2:eb:4a:f7:90:08:41:36:93:ed:de:0b:3a:21:
                    d6:5f:4f:f7:36:be:04:19:2c:d2:9c:de:d6:1c:85:
                    d9:9b:08:f9:19:44:ac:ca:e3:4f:4f:ff:c9:b9:72:
                    6c:ed:29:3d:6f:20:02:0c:0b:d2:90:c8:a8:65:d7:
                    2d:9d:c3:b4:2e:27:2c:12:01:33:73:84:ef:b4:d5:
                    00:5a:34:58:7b:fa:99:e6:77:e9:61:4f:d6:48:09:
                    90:dd:b2:6d:b8:ef:6b:7e:4a:5a:50:a4:f5:0f:37:
                    46:49:99:af:9d:ea:85:97:8d:41:96:3d:cd:6c:a8:
                    65:17:8f:b3:45:9c:e0:ae:da:12:2a:65:a3:e6:21:
                    c7:55:41:dc:f3:3f:f8:c9:d9:60:27:9f:57:4f:48:
                    7d:0e:0d:9e:15:59:01:cd:f6:7c:4e:91:30:b9:89:
                    ff:c7:aa:6d:0c:9d:62:67:c2:13:ad:5c:b1:a8:c9:
                    86:ac:2f:8f:b2:65:76:11:5a:83:d6:fa:64:fd:7d:
                    29:37:64:dd:50:af:1a:f7:aa:b3:13:d6:38:0c:c0:
                    a4:14:0c:2d:9f:b4:01:0b:6c:79:00:6d:11:a1:d6:
                    a2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:D8:CA:CB:0F:78:50:F8:08:A6:48:52:4B:79:65:38:FF:9C:56:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/081c5d12-fae3-3aee-9b3d-9a008f516848.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/52fbdac8-20c0-4da4-8654-27b4bf592930.crl

            X509v3 Authority Key Identifier:
                keyid:83:F5:A6:59:FF:1E:96:96:C8:E5:B4:B9:DF:F6:3D:37:29:30:A4:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:52:ab:04:e1:b3:4e:8a:09:7a:da:49:28:45:e1:9d:2d:bc:
         fe:32:7a:84:1a:06:8c:db:b2:41:db:a4:76:f1:06:c8:f2:d0:
         7f:05:db:d1:0f:e7:d5:8a:72:2f:2b:b8:0b:f8:0c:98:fb:5e:
         9f:2e:7e:f4:92:70:36:ab:ab:61:75:55:42:27:76:c4:1a:63:
         3b:5f:4d:e6:87:ae:cf:0c:37:16:1e:4e:2f:27:af:34:1b:72:
         83:e6:34:20:7c:0d:36:73:4e:2f:a2:ce:5b:2b:d5:7b:a1:c3:
         2a:17:3a:87:a5:5c:16:30:a2:9a:40:ab:38:7d:84:cb:c5:d9:
         6b:11:c7:49:2b:2b:4b:a3:30:5c:cf:34:9b:7d:77:89:74:57:
         59:55:1c:b2:75:25:46:89:9e:d5:ba:99:24:a3:92:b9:83:21:
         14:8c:60:1a:fc:c7:03:60:f6:cd:c2:2d:11:21:49:48:65:2a:
         0d:8c:eb:9c:63:92:13:a2:74:26:c1:d9:5e:54:7b:87:68:46:
         eb:49:cb:73:ff:22:25:1d:de:84:a8:3a:35:11:36:6d:01:66:
         a4:ca:f9:04:f2:b9:d1:18:4e:8b:a0:6a:9f:c2:52:7c:4b:f7:
         3c:ef:fc:4a:19:a1:ac:6c:7a:a6:6d:cb:c7:8f:f9:8b:6f:7e:
         b7:e8:40:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 09:37:16 2025 by rpki-client