Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/720ef0d4-37b5-3ae0-8d7e-60432cbf232f.roa
File:                     720ef0d4-37b5-3ae0-8d7e-60432cbf232f.roa (raw, json)
Hash identifier:          ydMz90+xCf9csePYfcyJkMGx6oWufhz+EeWSMhoXC9o=
Subject key identifier:   E8:13:3B:42:3E:D8:73:93:B6:42:9E:7E:84:40:72:3A:49:D3:65:35
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584A7085EDE6A0EC46D8B0180CA0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/720ef0d4-37b5-3ae0-8d7e-60432cbf232f.roa
Signing time:             Mon 07 Jul 2025 13:01:05 +0000
ROA not before:           Mon 07 Jul 2025 13:01:05 +0000
ROA not after:            Sun 05 Oct 2025 13:01:05 +0000
asID:                     212609
IP address blocks:        45.40.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:70:85:ed:e6:a0:ec:46:d8:b0:18:0c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jul  7 13:01:05 2025 GMT
            Not After : Oct  5 13:01:05 2025 GMT
        Subject: CN=6e2edc89-0e7e-4843-91fc-a53581312f9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:44:72:f5:6a:dd:bf:e8:90:36:42:7f:2a:54:
                    8e:f2:24:ab:22:39:65:85:f4:3f:25:0d:10:32:d1:
                    dd:51:93:bd:59:cc:85:1b:27:ef:6e:92:a3:7c:28:
                    0f:70:b7:70:b6:90:d5:cd:87:7a:5d:28:23:8c:c4:
                    c2:64:f6:6b:d5:76:fb:3f:30:47:89:83:90:72:87:
                    22:6d:51:75:98:f8:c4:54:a3:c3:ef:a2:4b:ec:2d:
                    d0:22:58:5b:39:cf:5e:9c:3b:1e:d1:27:ad:7b:4b:
                    f4:c0:03:24:54:2c:41:96:d5:e9:5f:86:00:60:27:
                    1a:53:cf:c2:0f:bb:3f:a9:8a:57:1c:06:66:4d:a0:
                    36:92:8e:56:ff:ef:25:68:16:93:be:ee:f5:36:00:
                    76:fd:72:43:a4:8a:db:71:dc:3d:39:51:b6:c0:c9:
                    f8:1e:5f:22:f7:53:47:ad:ad:8e:7b:94:7c:0b:70:
                    d9:a8:cc:3a:bb:dd:24:b4:1e:64:c3:d9:d9:32:ca:
                    3d:d2:f7:b4:2f:42:78:e6:10:c6:68:53:93:41:a0:
                    18:6a:a5:9d:43:2c:21:ed:37:d0:da:0e:2f:c3:99:
                    7a:b8:26:a3:a7:34:1c:6d:16:9c:d7:16:a1:33:70:
                    45:a4:91:16:9d:93:62:f4:a2:bb:88:ca:41:93:e6:
                    c3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:13:3B:42:3E:D8:73:93:B6:42:9E:7E:84:40:72:3A:49:D3:65:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/720ef0d4-37b5-3ae0-8d7e-60432cbf232f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.40.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:f0:2e:b5:60:a7:1b:3e:b9:fa:76:99:18:5b:b9:0d:90:0e:
         dd:5b:b5:fa:7f:db:5d:7f:97:e6:78:62:44:b6:8a:5e:a6:5b:
         e2:cb:c3:24:9f:99:48:d5:8a:85:02:69:f4:ec:e7:2b:51:c2:
         91:b7:3d:7d:e4:7d:84:4e:05:07:12:e9:4a:ad:1e:1e:2f:b1:
         ff:ba:90:48:a8:f7:4b:cb:03:68:19:e4:a1:7d:fe:81:09:df:
         9e:30:3e:78:b5:83:7b:7d:73:47:09:69:7d:e0:f8:a8:0b:b4:
         77:8d:46:f7:3b:db:c2:ae:d2:c2:6f:ce:1e:73:fe:c1:18:19:
         1a:c8:87:e2:cf:a9:92:95:5a:b9:24:c7:f5:ff:25:4c:3c:68:
         ed:85:7f:29:58:46:a9:b8:9e:73:2d:bb:85:cc:65:fa:c0:ca:
         a1:ca:ad:0c:4d:09:ab:3e:68:a3:bf:3c:59:fb:12:9f:ef:33:
         eb:51:1f:db:0f:07:6a:5a:f4:14:e8:01:62:ab:1d:85:44:cf:
         d6:34:9c:3c:4f:9a:d5:3c:d1:b0:08:af:e2:5a:8a:5a:af:7c:
         07:7f:de:e4:74:f9:2d:31:2d:b2:a6:6d:2c:70:ce:f1:16:f5:
         ec:e4:b1:51:bd:fb:70:bf:1c:26:01:88:68:38:47:c7:bd:49:
         56:c2:79:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 19 05:05:21 2025 by rpki-client