Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c95ce3d-c60a-4a89-8fef-bc6c44d54f54/108f695e-beb6-3f8c-917a-4c9a702aff9d.roa
File:                     108f695e-beb6-3f8c-917a-4c9a702aff9d.roa (raw, json)
Hash identifier:          8exvAzLMsL0TSu/E+70K0M2syvdcsMz8p6kJLObj3dg=
Subject key identifier:   A6:93:56:1F:0E:8C:97:7E:E1:04:97:A8:17:E6:68:CC:0E:88:4A:60
Certificate issuer:       /CN=5c95ce3d-c60a-4a89-8fef-bc6c44d54f54
Certificate serial:       010D0C9F4328584A6AF094DC2EA6DDEDE9699880
Authority key identifier: B2:93:8C:DF:4E:61:AC:DE:34:BC:B0:1F:BB:7C:32:EE:04:26:A1:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c95ce3d-c60a-4a89-8fef-bc6c44d54f54.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c95ce3d-c60a-4a89-8fef-bc6c44d54f54/108f695e-beb6-3f8c-917a-4c9a702aff9d.roa
Signing time:             Sat 05 Jul 2025 13:01:04 +0000
ROA not before:           Sat 05 Jul 2025 13:01:04 +0000
ROA not after:            Fri 03 Oct 2025 13:01:04 +0000
asID:                     16509
IP address blocks:        45.45.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c95ce3d-c60a-4a89-8fef-bc6c44d54f54/5c95ce3d-c60a-4a89-8fef-bc6c44d54f54.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c95ce3d-c60a-4a89-8fef-bc6c44d54f54/5c95ce3d-c60a-4a89-8fef-bc6c44d54f54.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c95ce3d-c60a-4a89-8fef-bc6c44d54f54.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6a:f0:94:dc:2e:a6:dd:ed:e9:69:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c95ce3d-c60a-4a89-8fef-bc6c44d54f54
        Validity
            Not Before: Jul  5 13:01:04 2025 GMT
            Not After : Oct  3 13:01:04 2025 GMT
        Subject: CN=6f7d1956-35a1-493d-98c3-4bd6b8938d95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4f:c8:30:a0:5c:26:9b:38:4a:5a:36:9e:b8:
                    b3:66:dd:9e:7f:23:35:7a:8a:18:34:bb:24:c8:63:
                    f9:de:1c:3a:12:24:3a:68:17:fb:3f:bc:ce:15:7b:
                    8b:51:6f:58:f8:ea:a7:2f:3b:cd:66:6c:f1:ab:03:
                    82:5f:00:5d:1a:4d:2e:ba:55:eb:e5:e5:af:dd:b9:
                    8b:b2:0c:37:06:11:dd:cc:b0:83:e2:a4:6e:74:4c:
                    3a:2c:fd:d4:c9:e4:29:62:2e:af:a8:8f:fc:7b:97:
                    b3:64:cc:b8:e3:da:6d:9c:74:70:e6:d5:c6:11:b7:
                    a5:48:45:9a:f1:56:59:63:d3:09:94:36:4c:45:d0:
                    ee:9a:54:db:2a:7a:23:4c:6a:a0:11:32:33:95:f9:
                    d8:dc:a6:bb:50:55:d5:bd:11:59:20:4a:85:6e:53:
                    60:af:47:c5:8d:2c:36:25:07:c9:6a:35:62:94:64:
                    20:bd:d5:ff:e9:aa:ce:15:3e:90:83:4f:94:de:c1:
                    af:59:48:e5:51:09:64:fe:01:65:a3:7f:5b:68:46:
                    de:16:36:18:66:05:b2:c5:48:1e:fc:20:be:e2:df:
                    f4:5e:3f:29:02:4f:08:6b:af:57:54:21:a5:e8:73:
                    3e:23:b8:37:91:a6:52:41:38:94:32:8e:46:ba:f6:
                    8b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:93:56:1F:0E:8C:97:7E:E1:04:97:A8:17:E6:68:CC:0E:88:4A:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c95ce3d-c60a-4a89-8fef-bc6c44d54f54/108f695e-beb6-3f8c-917a-4c9a702aff9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c95ce3d-c60a-4a89-8fef-bc6c44d54f54/5c95ce3d-c60a-4a89-8fef-bc6c44d54f54.crl

            X509v3 Authority Key Identifier:
                keyid:B2:93:8C:DF:4E:61:AC:DE:34:BC:B0:1F:BB:7C:32:EE:04:26:A1:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c95ce3d-c60a-4a89-8fef-bc6c44d54f54.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:af:b5:e0:d5:2a:3b:c1:fa:1a:8b:ab:51:20:48:15:ac:72:
         f1:87:bc:4d:91:a1:da:d0:c9:04:f4:a3:8e:ed:01:63:67:98:
         46:3b:05:47:17:45:0e:73:86:7c:a0:d3:ae:66:e8:e2:44:9d:
         2b:a3:7c:f5:0a:47:29:25:47:a0:f3:cd:01:eb:6c:24:42:21:
         c1:91:47:f4:bf:d2:81:22:2e:4c:ae:c4:d6:bd:70:85:34:26:
         7b:76:87:03:53:ec:3e:a4:28:71:1a:6f:8c:2e:7f:db:8a:6e:
         28:84:52:33:d8:43:38:9a:9e:7a:e0:92:64:8d:9d:ec:07:1d:
         97:49:60:14:a2:d6:a0:2b:84:40:ac:91:76:a7:80:a3:b3:af:
         a4:9b:2f:76:f6:9e:9f:11:09:56:67:87:bb:7a:5c:48:64:64:
         a9:6b:ef:91:99:b7:b2:a5:bd:e9:16:d1:f8:04:b5:49:cd:73:
         f9:3d:29:fa:c6:7f:15:88:29:a4:e6:28:d9:ad:0f:4f:4f:00:
         8d:34:17:91:8d:2e:bc:e2:9b:c5:1b:4c:ec:17:26:07:22:9d:
         72:ab:18:e8:2c:b7:6d:1f:fb:22:6c:10:94:6d:1c:29:98:33:
         22:e1:1e:eb:63:1f:1f:0d:bd:fa:a3:08:fe:35:3a:fd:ec:69:
         cd:9e:83:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 19:52:12 2025 by rpki-client