Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/231cc2a5-51a7-3c2b-9ed2-d53d7a244148.roa
File:                     231cc2a5-51a7-3c2b-9ed2-d53d7a244148.roa (raw, json)
Hash identifier:          cUpmpROhBp7/H80NYgh+AMCcFpTH7zmGibRZpiTWwwM=
Subject key identifier:   4F:49:5B:55:CF:72:0A:F1:A3:61:ED:93:67:AE:A6:12:75:47:48:7A
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584A8491F400AAFA2D6E17848500
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/231cc2a5-51a7-3c2b-9ed2-d53d7a244148.roa
Signing time:             Mon 14 Jul 2025 17:21:33 +0000
ROA not before:           Mon 14 Jul 2025 17:21:33 +0000
ROA not after:            Sun 12 Oct 2025 17:21:33 +0000
asID:                     834
IP address blocks:        45.40.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 02 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:91:f4:00:aa:fa:2d:6e:17:84:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jul 14 17:21:33 2025 GMT
            Not After : Oct 12 17:21:33 2025 GMT
        Subject: CN=914a6618-bdc2-42d4-bfc5-b388a9867e35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:dc:b5:18:f9:4c:06:cf:1b:76:0d:5e:10:61:
                    04:22:9a:9d:06:db:ff:d1:47:11:c2:ed:e0:7a:da:
                    51:d6:02:7c:dd:81:d6:ea:e9:28:9c:e4:a7:fe:fc:
                    ce:09:00:e7:64:a4:84:23:1f:4d:ea:62:49:7c:17:
                    79:3b:9f:9d:a2:c6:42:81:67:ff:b9:05:3f:67:ca:
                    46:ad:29:ea:64:72:ec:c5:5f:09:c3:23:a2:03:0d:
                    22:d9:f1:c9:44:f1:14:0d:95:05:39:fe:01:1b:7b:
                    28:72:8b:10:41:75:5c:56:87:25:8a:f3:ba:0b:1d:
                    5e:50:c2:57:66:f0:80:20:c7:1d:89:53:2f:ca:f6:
                    4b:86:9a:13:b3:4e:61:3d:7a:f6:85:08:32:87:80:
                    b1:e5:b9:28:6d:77:f4:70:7b:1c:94:c7:62:df:a8:
                    98:ce:b8:8a:aa:d5:ae:ac:89:26:b1:aa:f1:29:d9:
                    0b:69:d2:9e:06:b6:bd:d8:a2:bb:21:2f:ad:d6:10:
                    8f:0f:1d:51:0f:5a:00:28:fb:58:8b:f1:df:30:c6:
                    72:2c:0e:de:06:eb:20:3f:a5:aa:bb:00:40:ac:5e:
                    34:d6:f9:05:f4:00:20:4b:81:1d:aa:46:02:b2:04:
                    1c:00:aa:da:17:08:86:f8:59:8c:c2:70:48:0b:2b:
                    e7:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:49:5B:55:CF:72:0A:F1:A3:61:ED:93:67:AE:A6:12:75:47:48:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/231cc2a5-51a7-3c2b-9ed2-d53d7a244148.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.40.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e3:a1:98:4e:a0:1a:ad:b4:20:5c:4b:0c:f0:d2:cb:0b:44:40:
         f7:42:64:bc:45:54:f8:e6:86:bd:3c:67:0c:8e:14:ca:01:26:
         b9:d5:a8:25:7d:c2:9a:3c:03:5e:46:a2:e2:2c:8a:99:e0:3f:
         ae:09:9a:6b:32:09:6c:7d:43:83:e7:4f:70:e6:8a:8c:8c:37:
         e5:2b:05:2f:d8:eb:91:cc:2d:ac:9b:c4:78:ad:24:80:34:74:
         a8:4d:31:00:ad:3f:1a:27:1f:9b:1b:d0:61:e2:ea:2b:c0:1d:
         55:e8:11:23:11:67:37:fc:63:c4:41:1b:aa:0b:2a:f2:dd:56:
         34:3d:4c:79:0a:3a:b4:19:bd:77:48:70:36:de:0f:cd:80:25:
         69:c6:24:0e:da:10:28:bf:c0:c9:13:32:04:d8:01:5d:44:a8:
         7c:32:9b:19:f9:7a:a8:69:0f:eb:7f:24:de:9c:f9:69:39:e1:
         f9:10:8e:38:bb:a3:c9:8f:7b:71:86:c2:8e:c2:c1:89:c5:cc:
         22:4e:ef:f6:97:a5:e0:cb:4c:d5:5f:62:93:e4:88:0b:c7:ef:
         1d:2e:22:31:cd:b7:4a:91:12:41:23:49:8f:20:41:0c:c6:e2:
         ef:52:04:44:d2:05:09:cf:24:94:9b:c6:76:64:7f:79:cc:c8:
         60:37:38:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 23:30:43 2025 by rpki-client