Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/089e7d82-00e7-37f7-ac93-9c4ab4c1ff1e.roa
File:                     089e7d82-00e7-37f7-ac93-9c4ab4c1ff1e.roa (raw, json)
Hash identifier:          Cm7QT6VeIWaKXIIRF2WbiJDe5n9JrzvjhyViBs4JfZA=
Subject key identifier:   EE:85:54:0F:AB:47:B5:85:BD:4D:9A:C7:53:D5:06:06:16:7F:5A:8C
Certificate issuer:       /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Certificate serial:       010D0C9F4328584B047C042FF81376EAD74F4E80
Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/089e7d82-00e7-37f7-ac93-9c4ab4c1ff1e.roa
Signing time:             Fri 29 Aug 2025 13:00:41 +0000
ROA not before:           Fri 29 Aug 2025 13:00:41 +0000
ROA not after:            Thu 27 Nov 2025 14:00:41 +0000
asID:                     46261
IP address blocks:        45.59.22.0/24 maxlen: 24
                          45.59.29.0/24 maxlen: 24
                          172.102.207.0/24 maxlen: 24
                          172.102.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Sep 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:04:7c:04:2f:f8:13:76:ea:d7:4f:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
        Validity
            Not Before: Aug 29 13:00:41 2025 GMT
            Not After : Nov 27 14:00:41 2025 GMT
        Subject: CN=3da6bb14-0d00-4714-9963-a138d0ce79dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:63:da:e3:e5:a3:c5:73:dc:f7:f9:5d:81:b7:
                    c9:dd:0e:d6:83:bc:3a:44:03:e7:0d:c6:d4:bf:1f:
                    32:d2:f8:62:66:13:a4:06:47:80:5d:76:69:9a:37:
                    81:b4:8f:62:62:99:66:6a:e9:ce:f3:89:cd:c2:e1:
                    a9:dc:9a:84:b8:a6:de:ce:f9:f7:46:e8:90:ec:18:
                    e7:e4:e6:63:0c:77:ae:71:ec:1e:02:6b:04:6b:d8:
                    dd:40:d7:69:2c:bd:05:de:3f:a8:1b:76:69:5c:8d:
                    29:9a:64:01:a8:b8:f3:39:a4:94:e3:b0:99:06:0e:
                    8e:c5:83:fe:0e:69:d0:6b:39:7b:03:89:6e:de:ed:
                    84:21:b8:0d:8f:5a:c8:45:94:7c:13:be:d3:89:e9:
                    bb:c8:66:7c:ed:e2:1d:aa:a7:bb:0c:15:d8:62:cb:
                    32:28:45:13:b2:1e:b7:bd:8d:dd:8c:e7:85:4a:0a:
                    bd:42:0d:15:8d:3d:e4:60:e5:35:82:da:80:cb:9e:
                    ee:0d:4b:dd:70:d3:f6:c1:8d:57:7e:36:7e:3c:ab:
                    f0:8a:aa:fb:9e:cc:ab:7f:77:19:91:54:6b:b3:81:
                    9e:16:ec:db:5b:ce:17:27:66:a2:b6:9d:a8:d8:00:
                    80:86:24:20:a1:dc:8c:16:b3:68:60:9f:e2:d2:e5:
                    0f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:85:54:0F:AB:47:B5:85:BD:4D:9A:C7:53:D5:06:06:16:7F:5A:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/089e7d82-00e7-37f7-ac93-9c4ab4c1ff1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.22.0/24
                  45.59.29.0/24
                  172.102.207.0/24
                  172.102.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:6b:04:e2:11:3d:26:b5:6d:af:0f:2c:b8:aa:f8:68:88:86:
         5f:dc:f6:da:ef:a9:9c:12:79:28:81:88:6a:cc:c6:fd:bc:df:
         e8:31:b5:fb:bf:85:69:21:0e:21:24:ef:75:13:d8:75:42:53:
         6e:36:98:9f:2a:c4:76:5e:a5:4f:41:fe:d6:b7:cd:9e:af:86:
         8b:58:f2:15:f1:fd:83:8c:3c:fe:b9:4b:90:d2:6b:67:82:74:
         7f:da:6a:d5:35:ac:4f:71:4f:70:20:ca:68:3b:b0:15:9d:69:
         e5:d0:f2:5c:69:6f:43:90:b9:5e:64:7e:de:ac:b6:ac:22:4a:
         5a:d2:88:47:17:0a:23:71:e2:34:f5:8e:fd:d4:40:72:6d:07:
         22:6d:31:1f:db:48:aa:95:c0:b1:1d:11:da:62:4a:06:2b:f3:
         27:63:6d:63:81:cd:11:3e:16:ac:e5:82:f3:f7:18:53:6b:cd:
         e6:3f:77:04:88:5b:20:d4:30:89:d7:e6:51:20:5c:00:32:c4:
         a0:4f:f5:6f:de:61:8e:81:f7:48:7d:2d:d1:92:60:b5:fe:70:
         2e:fa:50:fd:cd:4d:ef:5b:4d:15:a1:e8:7d:52:15:d7:ab:12:
         d1:3c:ac:83:fd:ae:24:50:1e:88:33:a1:6d:af:db:0d:d9:32:
         5b:cc:ad:7a
-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWEsEfAQv+BN26tdPToAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDY5NjQxMmYtNTdkNy00OWJhLWI1MTQtNmIxYzZhYjQz
M2E0MB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk
M2RhNmJiMTQtMGQwMC00NzE0LTk5NjMtYTEzOGQwY2U3OWRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2Pa4+WjxXPc9/ldgbfJ3Q7Wg7w6RAPnDcbU
vx8y0vhiZhOkBkeAXXZpmjeBtI9iYplmaunO84nNwuGp3JqEuKbezvn3RuiQ7Bjn
5OZjDHeuceweAmsEa9jdQNdpLL0F3j+oG3ZpXI0pmmQBqLjzOaSU47CZBg6OxYP+
DmnQazl7A4lu3u2EIbgNj1rIRZR8E77Tiem7yGZ87eIdqqe7DBXYYssyKEUTsh63
vY3djOeFSgq9Qg0VjT3kYOU1gtqAy57uDUvdcNP2wY1XfjZ+PKvwiqr7nsyrf3cZ
kVRrs4GeFuzbW84XJ2aitp2o2ACAhiQgodyMFrNoYJ/i0uUPwwIDAQABo4IDZzCC
A2MwHQYDVR0OBBYEFO6FVA+rR7WFvU2ax1PVBgYWf1qMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2
NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFjNmFiNDMzYTQvMDg5ZTdkODItMDBlNy0z
N2Y3LWFjOTMtOWM0YWI0YzFmZjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDY5NjQxMmYtNTdkNy00OWJhLWI1
MTQtNmIxYzZhYjQzM2E0LzQ2OTY0MTJmLTU3ZDctNDliYS1iNTE0LTZiMWM2YWI0
MzNhNC5jcmwwHwYDVR0jBBgwFoAUDEqUiZ1mzw8ZEo8f9lmkgUdYNdgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFj
NmFiNDMzYTQuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALTsWAwQA
LTsdAwQArGbPAwQArGbbMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr
BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz
Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAA1rBOIRPSa1ba8PLLiq+GiIhl/c9trv
qZwSeSiBiGrMxv283+gxtfu/hWkhDiEk73UT2HVCU242mJ8qxHZepU9B/ta3zZ6v
hotY8hXx/YOMPP65S5DSa2eCdH/aatU1rE9xT3Agymg7sBWdaeXQ8lxpb0OQuV5k
ft6stqwiSlrSiEcXCiNx4jT1jv3UQHJtByJtMR/bSKqVwLEdEdpiSgYr8ydjbWOB
zRE+FqzlgvP3GFNrzeY/dwSIWyDUMInX5lEgXAAyxKBP9W/eYY6B90h9LdGSYLX+
cC76UP3NTe9bTRWh6H1SFderEtE8rIP9riRQHogzoW2v2w3ZMlvMrXo=
-----END CERTIFICATE-----
Generated at Sun Sep 7 03:27:48 2025 by rpki-client