Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/32f1e2da-70bb-36bb-811e-18bf24fd1fe7.roa
File:                     32f1e2da-70bb-36bb-811e-18bf24fd1fe7.roa (raw, json)
Hash identifier:          H3C86dvNnWAta8XmqHlNebTqQCUEasE+XbPFe62dMKI=
Subject key identifier:   8F:A0:1B:E4:19:C6:FF:AC:36:D5:D1:C8:68:EF:4F:F5:70:70:74:22
Certificate issuer:       /CN=451e8d9f-d9ea-45cf-8fb9-2811e86b81b2
Certificate serial:       010D0C9F4328584B110BFC0BD02B1E955C7959C0
Authority key identifier: F2:B3:28:9C:11:A4:6A:18:99:01:CF:9B:8D:24:3E:97:D0:04:17:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/32f1e2da-70bb-36bb-811e-18bf24fd1fe7.roa
Signing time:             Wed 03 Sep 2025 01:00:33 +0000
ROA not before:           Wed 03 Sep 2025 01:00:33 +0000
ROA not after:            Tue 02 Dec 2025 02:00:33 +0000
asID:                     44016
IP address blocks:        45.91.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:11:0b:fc:0b:d0:2b:1e:95:5c:79:59:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=451e8d9f-d9ea-45cf-8fb9-2811e86b81b2
        Validity
            Not Before: Sep  3 01:00:33 2025 GMT
            Not After : Dec  2 02:00:33 2025 GMT
        Subject: CN=695c6206-cb79-4484-bdcf-ebe8d724bcf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ac:97:81:95:4a:8b:8e:02:eb:81:2a:48:cd:
                    6a:d1:5d:b9:7a:68:bb:22:95:c9:8d:94:2f:a4:93:
                    79:1e:8a:df:ab:68:ee:0c:93:a8:99:71:36:0d:d4:
                    03:5f:40:fb:5c:e3:55:12:47:2f:f8:a2:59:d3:6b:
                    72:0b:be:7e:7b:65:d5:24:fd:bc:4d:30:13:b0:73:
                    29:36:36:a0:49:6a:8e:46:23:32:70:3c:ca:51:77:
                    33:3e:32:b1:48:c6:45:63:74:f1:aa:c1:19:2a:7b:
                    01:6a:30:fc:17:1d:75:2f:00:d9:8f:1c:2c:e5:46:
                    a9:f5:96:a8:08:13:35:40:95:82:0a:4e:7a:28:b3:
                    2b:59:37:c8:bc:aa:74:7b:28:05:96:ce:7f:c1:28:
                    08:9a:32:d4:a1:fb:c4:ce:84:15:d5:c0:fc:94:9b:
                    33:0f:ee:c0:f3:aa:9a:e5:7b:48:eb:40:6f:ba:7d:
                    29:0e:ef:a6:3a:24:fb:36:e5:11:80:40:01:14:db:
                    8f:35:f6:97:d7:86:21:0b:f8:55:1e:e5:85:95:75:
                    a2:c6:d2:b2:9a:13:28:3a:9c:a4:e4:ed:e2:fc:e4:
                    fd:f4:7c:5a:e4:3f:3f:c5:48:ae:d3:28:bb:9e:28:
                    c3:1e:b1:26:3e:b4:e1:df:dc:f6:80:4b:3f:e1:a0:
                    22:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:A0:1B:E4:19:C6:FF:AC:36:D5:D1:C8:68:EF:4F:F5:70:70:74:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/32f1e2da-70bb-36bb-811e-18bf24fd1fe7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.crl

            X509v3 Authority Key Identifier:
                keyid:F2:B3:28:9C:11:A4:6A:18:99:01:CF:9B:8D:24:3E:97:D0:04:17:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.91.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:79:76:8a:dc:94:18:cf:44:a6:ff:42:8a:75:a9:18:d8:1b:
         2d:8c:f5:7c:e0:a1:e0:3d:93:b2:19:fc:43:f9:bd:a5:9b:fa:
         ce:bd:5d:b7:31:7d:ff:07:9c:a4:18:16:bb:23:e3:8b:4f:63:
         b4:6f:6c:55:b0:97:bd:6e:00:ef:aa:0f:a5:b2:2a:1a:cf:dc:
         b9:4f:53:85:c0:a3:a4:fa:5e:65:6d:e3:6c:2a:11:d4:28:3b:
         e3:a8:ed:f8:87:a0:05:43:7c:6c:dd:78:c6:ae:b5:66:87:dd:
         dc:1f:06:f5:41:27:f5:33:92:5e:df:f0:b1:77:dc:77:50:07:
         35:83:1a:cd:9d:01:04:a3:10:4e:0d:ac:45:4c:5c:f5:e7:11:
         7b:55:99:29:bf:90:bd:6d:96:04:10:71:20:a9:fe:ec:37:de:
         f6:e6:8a:7c:d4:54:c5:56:2b:a2:d7:90:50:1d:42:22:26:f3:
         cb:69:fb:31:32:22:b5:93:fb:7a:c3:2d:e6:5b:49:70:2a:62:
         7b:68:db:2b:d0:cc:9f:0e:2d:d6:8d:2c:24:eb:2d:52:cb:92:
         bd:8e:e6:d6:3e:ff:af:c6:33:0b:53:10:f1:41:71:b1:65:a4:
         de:dd:73:5e:2e:5f:21:96:79:18:e4:16:eb:a3:da:28:74:a7:
         e6:4b:21:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 13:45:17 2025 by rpki-client