Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/c97cfd85-f6c2-37b6-832a-66719ff09d85.roa
File:                     c97cfd85-f6c2-37b6-832a-66719ff09d85.roa (raw, json)
Hash identifier:          XDDge3VJfNtiWjng5llw3FbaphoazqrDwxPRohXqMbU=
Subject key identifier:   C9:E1:C7:39:56:25:52:73:DD:75:20:D3:FE:81:C5:72:16:F4:E9:42
Certificate issuer:       /CN=5742dde3-84a3-4488-a01c-525734c4d81b
Certificate serial:       010D0C9F4328584B0B76AABBFC7D980D3934FA79
Authority key identifier: 80:F4:AF:44:45:DA:5F:FA:59:CE:9C:A8:4F:96:82:FF:39:43:C6:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/c97cfd85-f6c2-37b6-832a-66719ff09d85.roa
Signing time:             Mon 01 Sep 2025 01:00:33 +0000
ROA not before:           Mon 01 Sep 2025 01:00:33 +0000
ROA not after:            Sun 30 Nov 2025 02:00:33 +0000
asID:                     399924
IP address blocks:        45.41.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/5742dde3-84a3-4488-a01c-525734c4d81b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/5742dde3-84a3-4488-a01c-525734c4d81b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Sep 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0b:76:aa:bb:fc:7d:98:0d:39:34:fa:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5742dde3-84a3-4488-a01c-525734c4d81b
        Validity
            Not Before: Sep  1 01:00:33 2025 GMT
            Not After : Nov 30 02:00:33 2025 GMT
        Subject: CN=e992b86f-0da7-44d8-b62e-4939a795f016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:c2:28:2d:f6:e6:a7:98:18:de:c7:71:fe:e7:
                    ae:57:1c:c2:78:23:17:5b:f4:c6:5a:53:5f:85:c6:
                    67:50:54:4e:61:7a:d4:37:c9:e3:a2:92:5a:20:94:
                    68:0f:1b:4c:43:16:78:ad:35:7b:0e:2c:2e:67:15:
                    b3:14:99:be:0e:b3:68:f0:ea:b0:e5:7c:a3:f1:fe:
                    f4:de:19:37:af:55:32:4d:00:3b:5a:ad:b3:5c:2c:
                    7c:72:40:16:53:bc:bd:af:00:12:2b:ab:d1:06:ad:
                    62:65:65:8b:be:0a:ef:28:7e:65:d7:13:0b:01:2b:
                    e7:a2:39:0a:ea:38:27:b1:ea:95:27:1a:5f:3c:d9:
                    89:cc:db:38:26:89:d5:36:0b:7e:a6:8f:57:cd:48:
                    a5:db:50:4d:12:72:6e:99:0f:c3:56:0e:e5:82:7e:
                    9e:a4:31:f6:bf:e0:ff:f8:e1:eb:10:5c:32:1d:cf:
                    1c:fb:8c:f2:65:1c:b5:54:c5:a1:05:88:1e:72:fd:
                    61:3f:ab:dd:b9:50:f1:d3:f0:d9:28:48:e8:59:b0:
                    cc:40:a1:41:d3:0c:d2:e5:a7:e2:e5:ea:b8:1a:e7:
                    80:e1:ff:a8:3e:ca:82:b9:d7:d6:ce:f3:40:f7:3b:
                    98:38:9e:a9:c6:a9:cb:91:a2:4b:1f:e5:b2:e0:93:
                    49:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E1:C7:39:56:25:52:73:DD:75:20:D3:FE:81:C5:72:16:F4:E9:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/c97cfd85-f6c2-37b6-832a-66719ff09d85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/5742dde3-84a3-4488-a01c-525734c4d81b.crl

            X509v3 Authority Key Identifier:
                keyid:80:F4:AF:44:45:DA:5F:FA:59:CE:9C:A8:4F:96:82:FF:39:43:C6:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.41.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:a8:1b:86:4b:46:88:c6:04:ce:83:1e:a1:a6:4d:f9:b0:4f:
         ac:c3:e8:0b:5c:a8:a7:fb:26:52:70:b3:4a:59:32:a3:68:f6:
         95:12:23:af:eb:cf:01:44:97:72:cb:c7:37:6d:81:41:43:c4:
         1d:a9:0e:80:9a:fc:da:39:31:03:62:f8:29:b3:68:78:96:84:
         08:84:73:dd:69:18:87:cb:0f:7c:3f:4a:d8:5e:68:b0:d6:1e:
         f9:b1:d5:c5:03:75:ca:e7:09:7c:4e:50:c8:16:48:e7:d5:d2:
         f1:e5:13:e7:e7:4b:d2:fb:a4:92:ec:77:8c:75:de:b9:b4:5b:
         f5:ad:64:6e:cc:8b:fc:07:d7:f3:d4:1d:52:c1:39:f1:4b:47:
         fc:2b:42:04:5d:39:66:42:a6:d7:95:8f:4e:22:c5:4b:1c:51:
         b5:09:72:b6:6f:94:de:48:2b:72:66:79:96:f3:54:37:c6:dc:
         1c:78:fc:4a:b5:cb:9f:96:d9:b1:35:30:e3:3a:2a:4b:d8:70:
         fe:44:e5:74:0d:cd:c0:ce:77:bc:5f:8e:21:f0:bb:f5:eb:c8:
         8c:16:32:c4:e1:44:3b:7e:e8:a0:66:98:d3:fd:b0:5b:66:b8:
         9e:47:61:8e:9d:a5:0b:be:6e:77:f4:2c:4c:71:d9:6a:d0:87:
         49:f6:37:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 06:04:25 2025 by rpki-client