Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/5a3a0e4f-4839-3877-86b8-ec3ff681e3f1.roa
File:                     5a3a0e4f-4839-3877-86b8-ec3ff681e3f1.roa (raw, json)
Hash identifier:          CIQ79vyjDYVc54p6kFiO17zBRWx3fYialcTYRk4Be/M=
Subject key identifier:   5C:AC:C1:13:CA:36:C6:C5:86:9E:0D:43:66:37:4A:45:E4:C7:CE:BF
Certificate issuer:       /CN=0c772b4b-15fb-4b38-b505-dfe915dae9cd
Certificate serial:       010D0C9F4328584B477C7D0C838ACC7DE7204B00
Authority key identifier: F1:45:52:CC:E6:22:4E:29:4E:15:2D:5C:E4:BD:DD:05:3A:08:B5:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/5a3a0e4f-4839-3877-86b8-ec3ff681e3f1.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     34553
IP address blocks:        45.59.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/0c772b4b-15fb-4b38-b505-dfe915dae9cd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/0c772b4b-15fb-4b38-b505-dfe915dae9cd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:7d:0c:83:8a:cc:7d:e7:20:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c772b4b-15fb-4b38-b505-dfe915dae9cd
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=13365075-5b63-47df-a7e5-ff1647c86c30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4d:b4:b5:2e:97:37:5c:63:fa:e1:9b:d8:9e:
                    6f:63:04:ae:6b:ca:87:1a:7b:35:a8:92:15:9a:5c:
                    e9:c5:a1:f9:9b:82:08:cb:e2:c6:e4:13:51:99:6b:
                    f1:51:7a:f9:f4:ce:f4:20:c0:36:c7:dd:48:02:35:
                    ee:1c:a3:b0:26:43:58:25:dc:ec:cc:cd:96:db:ab:
                    9e:1c:31:62:e2:da:e0:29:90:c1:c4:99:2e:0e:bb:
                    2f:5e:4b:14:57:e8:1a:5c:33:ce:3b:01:98:8c:32:
                    53:b6:57:26:90:11:27:8d:df:ad:92:b3:13:f3:e0:
                    ca:32:ea:ff:08:e6:1c:0b:71:b3:38:c7:c9:49:8e:
                    bc:3f:fb:02:be:44:ba:53:f3:2c:b6:98:fb:47:a6:
                    97:e3:6f:33:53:63:c1:c7:a6:89:98:4a:f8:a5:c6:
                    85:89:4f:73:8b:4b:50:71:f0:6a:94:0f:42:27:00:
                    de:93:56:24:cf:a2:a7:3a:aa:9a:19:59:2d:e9:c1:
                    98:24:c5:6f:f8:ef:c1:a2:1b:b7:5d:91:c5:73:bd:
                    8e:d6:2a:52:f7:02:e7:00:87:bf:8f:f1:c4:c1:69:
                    38:75:15:17:d5:c3:f0:00:f6:8b:45:a1:81:c4:de:
                    2f:5e:bc:3b:8b:a2:bc:1d:67:60:92:82:61:ad:e4:
                    b4:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:AC:C1:13:CA:36:C6:C5:86:9E:0D:43:66:37:4A:45:E4:C7:CE:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/5a3a0e4f-4839-3877-86b8-ec3ff681e3f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/0c772b4b-15fb-4b38-b505-dfe915dae9cd.crl

            X509v3 Authority Key Identifier:
                keyid:F1:45:52:CC:E6:22:4E:29:4E:15:2D:5C:E4:BD:DD:05:3A:08:B5:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d3:7c:c8:86:38:25:ce:73:b5:c2:0b:5f:13:0a:9a:cf:db:15:
         ec:76:8a:7d:e0:11:a7:d1:d2:dc:3a:84:a3:fc:ee:d1:50:70:
         b6:f1:d9:90:68:e0:67:9f:32:ed:41:a2:7d:64:f6:d1:1c:fc:
         90:5b:bd:9b:45:5f:5a:5d:aa:64:89:a9:9f:2a:85:0e:d8:8f:
         4d:c5:65:7b:8b:c0:0a:6e:ac:e2:b0:48:f3:f5:0f:4d:dc:66:
         b7:08:eb:37:54:45:1c:ed:eb:70:77:a9:7c:ec:90:55:fc:30:
         dc:88:f3:0e:d2:2b:7e:bc:b6:b5:05:e8:08:4e:2e:b5:c8:ee:
         28:09:71:c0:8d:66:00:97:f8:7d:87:0c:a8:ea:b1:91:1c:eb:
         23:66:be:a2:66:fb:ec:be:c2:1b:97:42:bf:4b:65:cf:0d:b4:
         6f:b9:d4:01:90:16:47:00:fc:73:8c:c9:84:5f:68:c2:82:92:
         70:e8:3e:91:bf:b4:aa:1e:70:28:b1:e6:05:02:57:ce:de:9a:
         f7:da:01:a2:ce:01:42:bf:34:a0:c2:20:c7:6a:d3:92:e7:fe:
         c9:76:d8:02:44:12:8d:f8:10:a8:17:92:05:ad:35:21:02:0b:
         95:a1:f9:cc:5d:ce:d9:de:99:88:2e:3c:2b:4e:22:40:8e:f0:
         fe:b5:7d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:35:59 2025 by rpki-client