Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/75cc4461-ba77-33cc-aad1-3ea2779516d9.roa
File:                     75cc4461-ba77-33cc-aad1-3ea2779516d9.roa (raw, json)
Hash identifier:          AbrRq0+lVNYwYr0NVMb/quITH2X7dF+j8nxpSzMYh2s=
Subject key identifier:   23:17:F3:64:DD:C8:4D:70:EB:39:70:46:6A:36:CC:A2:89:4A:B6:08
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584AFF4DE8A4243CFE5DB61A5840
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/75cc4461-ba77-33cc-aad1-3ea2779516d9.roa
Signing time:             Wed 27 Aug 2025 16:28:52 +0000
ROA not before:           Wed 27 Aug 2025 16:28:52 +0000
ROA not after:            Tue 25 Nov 2025 17:28:52 +0000
asID:                     401905
IP address blocks:        45.40.114.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Sep 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ff:4d:e8:a4:24:3c:fe:5d:b6:1a:58:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Aug 27 16:28:52 2025 GMT
            Not After : Nov 25 17:28:52 2025 GMT
        Subject: CN=ea9bced1-25bb-418f-8450-113d707ac866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:34:e3:d1:4b:51:36:78:a6:4b:81:e5:54:01:
                    2b:6d:51:88:d5:38:5f:a3:86:1d:be:27:a1:e8:75:
                    e4:ce:12:9c:fe:5c:df:e1:53:62:b0:18:cd:07:c2:
                    b2:bd:0a:ba:68:ed:ca:66:89:56:98:de:5c:61:bc:
                    cf:f8:04:bc:cc:0b:24:d2:f5:bb:ca:a0:97:44:40:
                    c7:a5:7e:dd:4c:e6:36:18:52:75:5f:3f:eb:52:17:
                    5b:bf:85:72:29:20:9e:32:2f:d3:b5:22:ca:79:b2:
                    2d:7b:68:97:52:bb:07:79:ac:9f:69:07:5a:1b:d1:
                    4b:a1:8e:af:7f:39:33:93:19:28:d2:3b:44:5d:18:
                    00:57:42:39:47:11:97:c3:49:07:20:79:7d:15:a8:
                    38:36:db:00:db:a6:33:13:b7:61:bd:39:8a:47:6f:
                    c7:0d:bb:52:b7:28:8a:ca:34:c9:e4:22:e7:f3:60:
                    07:45:01:31:60:f1:80:42:f9:55:b6:73:1b:6f:90:
                    89:26:28:86:96:cd:24:e3:40:54:a8:f7:78:3f:0f:
                    f8:8c:4f:f6:6f:75:12:46:41:9d:40:68:12:2b:16:
                    e9:43:d1:31:b4:29:d5:02:56:af:ed:d8:c8:79:5a:
                    65:7e:31:19:27:cd:cd:a8:93:58:90:12:b7:06:5b:
                    19:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:17:F3:64:DD:C8:4D:70:EB:39:70:46:6A:36:CC:A2:89:4A:B6:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/75cc4461-ba77-33cc-aad1-3ea2779516d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.40.114.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:d8:f7:02:1b:a2:58:fe:c8:aa:7b:bb:dc:8f:ba:b2:88:a0:
         72:97:ba:fc:d6:02:c8:dc:e3:67:90:06:77:85:aa:90:a2:ae:
         73:7b:86:5c:e3:f9:b6:af:d8:2d:0b:5b:e4:72:68:63:c2:f8:
         b0:40:c1:31:1c:e7:46:47:51:f7:f8:7e:6e:32:cf:a9:de:d8:
         b0:27:da:78:0d:49:97:14:d6:30:64:96:76:a8:b2:1e:b0:28:
         e6:dd:09:0c:4c:71:68:c2:dc:36:5a:0e:6e:18:a5:6d:a8:28:
         a7:56:53:74:3b:fa:4b:78:ce:f6:2c:af:69:d6:ce:ce:03:77:
         6a:62:e6:49:8c:38:a6:72:40:c2:00:c9:7a:52:8a:82:7e:00:
         bf:27:6a:ef:df:f5:61:87:82:ba:76:6a:37:a2:3e:6c:bb:0a:
         df:e3:d1:e1:5b:97:6e:b8:7a:63:cb:ac:ab:80:38:fa:8d:94:
         79:06:31:51:63:68:84:79:f4:9d:67:01:2c:17:cd:ce:c6:ca:
         4b:58:b3:13:b1:32:ab:92:d5:53:5d:16:07:d7:d9:f1:76:1a:
         56:6f:3a:54:40:9c:4a:c3:88:77:38:0b:4c:bd:84:be:1c:43:
         c5:6a:4e:d9:54:c1:a3:24:e2:e7:ee:24:e7:d3:65:a0:0a:0f:
         dd:e8:51:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 11:21:50 2025 by rpki-client