Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/b13f65b2-4803-3d7d-9a4e-fa25a5bc99a5.roa
File:                     b13f65b2-4803-3d7d-9a4e-fa25a5bc99a5.roa (raw, json)
Hash identifier:          gWF6KpVYBPQ/qzW6Mk9Yutik9jKlsItNRWbxyvRbLzs=
Subject key identifier:   25:1D:E5:2C:AF:30:68:6E:6E:DC:31:E1:A0:D8:D4:B8:D8:23:6F:52
Certificate issuer:       /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
Certificate serial:       010D0C9F4328584A9900C224BFC2414C69E97E00
Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/b13f65b2-4803-3d7d-9a4e-fa25a5bc99a5.roa
Signing time:             Tue 22 Jul 2025 01:00:50 +0000
ROA not before:           Tue 22 Jul 2025 01:00:50 +0000
ROA not after:            Mon 20 Oct 2025 01:00:50 +0000
asID:                     36007
IP address blocks:        45.61.51.0/24 maxlen: 24
                          2604:bc0:6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:99:00:c2:24:bf:c2:41:4c:69:e9:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
        Validity
            Not Before: Jul 22 01:00:50 2025 GMT
            Not After : Oct 20 01:00:50 2025 GMT
        Subject: CN=a4b11b44-2fd0-4ece-bf89-1719fee51408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b3:93:8f:61:12:75:94:16:e7:70:23:95:ce:
                    cb:e4:cc:f3:21:75:4c:b9:4a:1a:99:20:96:7f:18:
                    a5:9e:85:8e:ed:12:39:7e:ff:2e:df:5f:70:db:23:
                    52:f1:63:46:ce:2a:07:04:c1:66:d4:ec:fe:0c:60:
                    e5:8b:63:b7:59:02:d7:ce:28:11:f1:6b:7b:06:91:
                    f7:68:c6:9e:e3:60:1e:b8:91:c7:76:c4:bd:58:82:
                    ca:7f:ed:4a:ec:a4:ee:da:63:7f:b2:f9:a4:63:0d:
                    da:30:cd:9a:20:8c:4f:cc:70:f2:82:26:0d:95:15:
                    e7:4f:63:38:06:0c:01:97:73:9a:25:26:fd:58:b0:
                    0e:90:52:b1:e8:a4:60:74:2a:ee:fb:54:8d:c3:08:
                    f6:36:05:23:0c:6a:c1:e0:e1:e0:97:fa:68:d4:7a:
                    89:06:65:b4:18:4b:ee:be:08:7b:16:84:80:d1:05:
                    77:6d:4d:69:52:56:95:47:5c:6b:f3:01:e6:9a:8c:
                    75:86:99:df:02:4c:d7:35:b5:cc:a7:28:d7:b5:8a:
                    03:7e:c6:f7:bf:35:b6:82:5e:3a:35:c0:94:6f:c0:
                    db:3e:c8:b3:aa:34:70:00:2c:e0:a6:1d:ae:75:4e:
                    fc:b7:4e:a5:75:4c:cf:e3:96:bd:77:e3:8a:ef:d7:
                    a5:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:1D:E5:2C:AF:30:68:6E:6E:DC:31:E1:A0:D8:D4:B8:D8:23:6F:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/b13f65b2-4803-3d7d-9a4e-fa25a5bc99a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl

            X509v3 Authority Key Identifier:
                keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.61.51.0/24
                IPv6:
                  2604:bc0:6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:02:70:19:67:70:48:1b:e4:0c:d9:6e:0a:4a:f2:62:8d:01:
         9a:02:1a:1f:24:9c:99:9b:41:f0:58:30:5a:65:c0:89:ab:e8:
         c1:e1:16:1f:f1:bd:8b:11:5e:ce:71:e7:88:9e:ee:7c:7e:7f:
         4b:5f:b6:79:b3:f3:2a:3c:26:fc:6c:44:44:e5:1a:47:83:da:
         79:e5:93:b6:a0:c6:22:d0:e5:15:f7:a7:44:b0:f8:9f:c1:f1:
         d7:a4:ff:75:8e:ff:5d:d4:47:ee:91:56:c7:9b:6b:82:b7:f4:
         35:6c:71:5a:bf:4b:35:61:a1:0b:d7:2b:f9:a5:5c:83:cd:e7:
         4a:64:ba:87:4e:51:05:ec:ce:f5:97:a3:52:23:a2:77:3a:ba:
         fc:63:fb:f7:8b:04:03:0b:f8:8d:e6:fd:94:1b:9c:8a:6a:d5:
         de:c1:cd:6b:75:02:b0:de:99:5d:31:22:60:cb:2e:14:ec:15:
         39:b8:7f:67:8a:57:74:04:c8:6b:75:fa:69:ad:c1:7d:44:da:
         25:33:7b:17:2d:cb:a0:f1:91:78:03:b8:c6:0b:05:ff:5a:c6:
         14:86:a4:af:74:0c:f4:9e:20:23:d0:4a:a0:ea:b7:21:61:4a:
         e8:f0:7d:be:12:2b:d7:92:1d:17:a1:1a:f6:7c:a8:d3:42:04:
         97:83:5d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 15:26:56 2025 by rpki-client