Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/c3df9a95-31cb-32fb-ab05-03d96e85bbfc.roa
File:                     c3df9a95-31cb-32fb-ab05-03d96e85bbfc.roa (raw, json)
Hash identifier:          SKhDwXTjYTZg9wZ3JYEUcTuaaEwTKw9ClE9yd2zZRuI=
Subject key identifier:   7E:22:87:7E:ED:51:D8:7E:BD:4A:C8:EC:78:F4:FF:4A:AD:F8:0E:86
Certificate issuer:       /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
Certificate serial:       010D0C9F4328584A94D0DB60E13D3DE50E611400
Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/c3df9a95-31cb-32fb-ab05-03d96e85bbfc.roa
Signing time:             Sun 20 Jul 2025 13:01:04 +0000
ROA not before:           Sun 20 Jul 2025 13:01:04 +0000
ROA not after:            Sat 18 Oct 2025 13:01:04 +0000
asID:                     36007
IP address blocks:        45.61.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:94:d0:db:60:e1:3d:3d:e5:0e:61:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
        Validity
            Not Before: Jul 20 13:01:04 2025 GMT
            Not After : Oct 18 13:01:04 2025 GMT
        Subject: CN=15fa3264-90fa-4dd3-bfaa-b63685941b6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:fc:cf:35:0c:ed:cf:9f:ee:98:b8:b5:d9:cf:
                    7e:60:40:0b:18:ea:f8:0c:d3:75:23:67:94:de:f3:
                    16:fa:64:54:a2:8c:b8:4d:65:78:a9:1f:bf:44:a1:
                    8a:96:0e:1d:a3:39:5c:12:43:cd:3a:1b:7a:77:77:
                    b1:3c:69:d8:b6:47:73:eb:0f:a2:16:61:5e:26:ad:
                    94:93:9a:21:aa:7a:b2:de:f0:d4:0c:db:06:4b:69:
                    61:bc:f2:f7:0b:b1:a3:c0:c0:a8:bd:b0:0c:52:1d:
                    d5:63:f3:3c:64:25:4d:03:d5:af:9c:df:9c:2e:e8:
                    32:fc:8c:02:c5:ae:e7:4d:15:c5:e8:59:16:6b:81:
                    e8:52:2d:11:68:1c:87:71:8b:82:67:fe:2c:74:9a:
                    fc:51:5a:f7:36:cb:2d:60:fa:9a:82:c1:bd:4a:4e:
                    2d:4b:74:53:f5:3d:d8:06:b0:ef:97:82:d5:71:52:
                    a7:2a:0f:40:3f:ac:23:90:a8:5e:a8:f2:ef:d8:a9:
                    77:90:03:28:90:95:15:50:b4:1b:73:86:de:a0:61:
                    6b:6f:8d:a6:f3:8d:fc:8b:37:51:09:77:ec:8b:39:
                    d0:76:15:01:4b:20:71:2e:e2:10:45:8c:6c:3b:48:
                    33:c3:5e:6a:9f:6c:0d:f9:ba:7f:13:39:6c:ee:9d:
                    76:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:22:87:7E:ED:51:D8:7E:BD:4A:C8:EC:78:F4:FF:4A:AD:F8:0E:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/c3df9a95-31cb-32fb-ab05-03d96e85bbfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl

            X509v3 Authority Key Identifier:
                keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.61.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:f2:95:6f:d7:71:89:f4:5f:37:bf:bc:cd:fb:70:1a:8f:3a:
         82:6d:bf:0e:3d:58:94:e7:1e:20:1b:89:b7:d1:eb:f3:fa:04:
         40:d4:7d:84:7f:3b:85:05:31:55:98:00:5a:3e:80:31:ae:de:
         d4:b9:ab:25:95:6b:bb:bb:fa:a3:1d:aa:c4:53:e1:d0:a9:98:
         f1:89:41:e0:9b:40:e2:d2:28:c3:d6:ec:58:d0:b7:bd:e7:dc:
         ce:3d:cc:1b:ef:ba:0e:44:d6:74:51:fb:85:71:b2:40:0e:47:
         29:0b:3d:93:14:88:64:cb:13:3c:8c:11:1c:c5:b4:63:ad:b3:
         5b:fb:9e:09:a3:51:41:c0:ef:be:b7:ca:6f:2d:a5:0a:eb:b4:
         92:0e:78:76:63:28:73:87:18:5f:b0:11:ff:c6:e2:dd:b6:63:
         ca:9a:d4:84:9d:18:eb:f9:04:3d:73:09:43:98:c8:ce:97:dd:
         bc:74:04:09:87:93:68:61:57:88:fc:61:f4:4b:70:35:ef:e6:
         61:e3:24:a1:6b:59:1f:43:1e:13:22:53:57:f5:00:cd:46:a2:
         e2:95:ad:d5:0e:43:ce:26:05:56:a9:62:21:53:10:c7:4e:d3:
         86:7f:e8:37:33:b2:67:f5:a9:91:41:ca:e6:c8:b8:d9:c2:26:
         60:5e:ab:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:46:04 2025 by rpki-client