Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/2a5b9403-d395-31ee-9698-c73b25f623f8.roa
File:                     2a5b9403-d395-31ee-9698-c73b25f623f8.roa (raw, json)
Hash identifier:          3DkIyDLPcZS8yAVx/8N6soARMDCeia2x0oyEt4YVyFw=
Subject key identifier:   9E:F0:6E:DA:BA:36:D8:49:9F:48:C0:4E:63:88:4D:33:94:6C:29:C1
Certificate issuer:       /CN=45de47ca-0b52-44ab-af26-767d8a671192
Certificate serial:       010D0C9F4328584A9900C8554CB6E7A3323BD900
Authority key identifier: C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/2a5b9403-d395-31ee-9698-c73b25f623f8.roa
Signing time:             Tue 22 Jul 2025 01:00:50 +0000
ROA not before:           Tue 22 Jul 2025 01:00:50 +0000
ROA not after:            Mon 20 Oct 2025 01:00:50 +0000
asID:                     5645
IP address blocks:        173.246.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:99:00:c8:55:4c:b6:e7:a3:32:3b:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45de47ca-0b52-44ab-af26-767d8a671192
        Validity
            Not Before: Jul 22 01:00:50 2025 GMT
            Not After : Oct 20 01:00:50 2025 GMT
        Subject: CN=e3772f5b-c725-4439-bbfd-1a68621e89c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e4:7b:86:8b:4d:98:44:b0:a0:17:b5:0d:20:
                    12:3a:7b:a2:d8:5f:7f:97:66:04:85:cb:31:e5:42:
                    14:9b:be:39:df:59:1c:71:ad:da:95:ab:3f:0b:cd:
                    11:55:c1:c4:65:e2:ee:ed:26:3d:51:5a:64:59:84:
                    29:95:17:5b:59:f1:5f:c6:ea:df:21:9a:2c:34:72:
                    da:48:87:f4:2a:bc:33:09:29:3e:d0:65:3e:70:9d:
                    93:7b:c6:56:96:6e:d9:5b:76:dd:bf:89:aa:89:cb:
                    31:8d:ef:25:38:3b:f8:a5:d7:33:fd:ea:c9:86:ee:
                    d0:d7:13:97:08:84:5e:7d:c0:c2:af:5b:ff:c0:be:
                    83:af:ff:89:d1:57:72:5a:7f:67:e7:ac:4f:fe:17:
                    aa:cd:76:09:93:aa:c6:92:4e:7b:40:95:1e:ae:91:
                    79:37:73:28:5e:96:ff:48:01:83:d4:e2:f4:52:58:
                    8f:51:22:1a:78:e2:51:57:ff:b6:e2:d6:8c:3b:75:
                    69:b8:06:9b:53:22:39:87:00:d1:78:c0:24:63:86:
                    41:3a:59:03:1b:3a:ed:8d:16:ac:61:91:cc:17:32:
                    47:8a:51:e8:d7:0d:df:cd:d8:fd:6f:b7:cb:33:a0:
                    9a:00:98:b2:b7:6b:c0:4a:30:10:a0:ba:28:42:09:
                    4a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:F0:6E:DA:BA:36:D8:49:9F:48:C0:4E:63:88:4D:33:94:6C:29:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/2a5b9403-d395-31ee-9698-c73b25f623f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl

            X509v3 Authority Key Identifier:
                keyid:C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.246.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:f5:06:f2:c4:2f:37:a3:52:f1:2b:de:0c:04:0a:9e:d7:ca:
         9d:06:81:5d:09:e9:65:26:ef:c6:59:13:a5:f4:40:de:fa:46:
         08:1d:76:c5:a0:80:17:72:ab:ea:b0:2b:80:37:73:48:21:e0:
         47:c1:58:31:7d:a1:6a:b8:57:69:c3:eb:90:4c:8b:77:93:41:
         dd:c4:b5:2d:e2:74:01:da:3b:45:16:d1:c1:6a:69:db:76:33:
         a5:11:11:bb:4d:ab:fb:a7:6d:75:74:f2:d2:5b:bc:6c:f2:82:
         b7:a2:f7:dd:0f:7e:7e:83:26:30:d2:99:ae:d1:3e:d1:e4:30:
         e5:8b:3e:09:6e:6d:34:2c:c2:9e:ea:fb:88:09:88:b7:62:5f:
         30:06:6c:e8:3d:3a:73:a1:22:90:1f:3a:b6:a4:22:cc:bf:d0:
         e7:94:6e:64:0f:fb:64:86:e2:bc:b3:2e:a1:38:70:ba:05:c5:
         41:e9:8f:49:d5:a5:15:52:cc:7d:67:50:ac:c5:e9:c7:39:a0:
         35:61:3e:d1:1a:34:66:1e:07:0d:7f:8b:e3:c2:70:0a:b1:cb:
         97:f3:4b:0b:c5:6d:83:b9:75:e9:9d:60:68:24:5f:34:6e:c8:
         5a:42:cd:c3:e9:c3:65:08:39:79:2e:2a:0c:75:0e:96:3d:4b:
         02:07:41:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 22:15:38 2025 by rpki-client