Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/9869b5b5-ebf9-3155-b17d-e637bdb75e61.roa
File:                     9869b5b5-ebf9-3155-b17d-e637bdb75e61.roa (raw, json)
Hash identifier:          VP1J/tFdmHg7t7zBg2olgEl4X56VxMmyE+WBBrcsjhs=
Subject key identifier:   4B:ED:7A:5D:76:A2:26:12:B3:0B:E9:26:02:C6:9A:42:77:69:E6:70
Certificate issuer:       /CN=451e8d9f-d9ea-45cf-8fb9-2811e86b81b2
Certificate serial:       010D0C9F4328584AF52145572AC5E6857320F700
Authority key identifier: F2:B3:28:9C:11:A4:6A:18:99:01:CF:9B:8D:24:3E:97:D0:04:17:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/9869b5b5-ebf9-3155-b17d-e637bdb75e61.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     6206
IP address blocks:        45.126.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:45:57:2a:c5:e6:85:73:20:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=451e8d9f-d9ea-45cf-8fb9-2811e86b81b2
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=003af94a-cc62-4dd9-acf2-1866f0f528b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:94:75:59:63:f1:17:39:5d:fd:24:11:f8:b6:
                    01:3c:d6:00:14:50:03:c5:3b:2c:bd:10:3b:96:a1:
                    2e:97:ff:8e:a5:fa:92:18:71:d1:26:53:d6:fc:68:
                    00:65:18:50:86:a6:9b:84:28:82:d6:05:7d:66:10:
                    54:66:ca:4b:ff:1b:ee:5c:65:d6:02:f0:e9:fb:ce:
                    14:c7:f0:03:2c:68:ef:06:65:cf:d4:fd:98:c5:d8:
                    73:71:d6:5e:bc:30:f9:9f:53:77:7c:56:7f:a6:f9:
                    53:75:d2:e5:2d:c3:e0:0f:26:df:a1:30:62:ce:56:
                    1d:1b:65:0c:2f:f7:3b:b8:f8:60:97:f9:95:c0:85:
                    53:ba:cd:16:7b:ae:ab:b7:38:0b:f7:19:bb:5e:63:
                    0d:9d:83:f9:bd:8d:1c:33:ee:da:09:b9:b5:e1:20:
                    20:73:e7:ad:94:e7:aa:92:8d:93:04:dc:f7:5e:c4:
                    65:4b:1c:8d:ef:9f:42:61:69:cb:02:fb:eb:53:41:
                    cd:2e:25:6b:d8:70:8b:1e:21:f9:9b:83:e5:ab:66:
                    3a:c2:0f:a8:c0:9a:d2:95:e0:eb:7e:2d:9e:98:2c:
                    2f:2c:e9:bf:93:7a:fe:2a:33:c6:55:62:35:86:bf:
                    f3:89:db:51:ff:8a:9b:fc:8e:81:63:55:29:17:7b:
                    3e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:ED:7A:5D:76:A2:26:12:B3:0B:E9:26:02:C6:9A:42:77:69:E6:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/9869b5b5-ebf9-3155-b17d-e637bdb75e61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.crl

            X509v3 Authority Key Identifier:
                keyid:F2:B3:28:9C:11:A4:6A:18:99:01:CF:9B:8D:24:3E:97:D0:04:17:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.126.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:89:f5:f5:45:d3:51:8d:49:06:48:4c:d5:60:9e:fb:01:01:
         fb:86:f3:bf:b8:29:66:89:01:5d:7c:a0:b2:2c:9f:c2:4c:a2:
         1c:b9:0f:2a:bc:95:a0:56:ea:ca:96:58:f5:a3:73:7c:f3:c0:
         57:e8:8c:aa:ab:cb:dd:56:cc:7c:f7:26:e1:0f:f7:43:41:4c:
         ba:47:59:e6:be:0e:68:f6:ef:78:2a:80:77:25:27:5f:3d:83:
         57:4e:e7:0c:75:8b:d6:45:89:a1:ec:f5:51:97:3c:22:ed:8c:
         41:12:e6:00:a7:1d:ab:f2:20:d0:55:bb:fa:da:4a:45:e6:ee:
         f2:c1:0e:19:60:0c:f0:db:28:21:a4:b5:bc:2d:0d:81:07:bf:
         b7:12:eb:49:ff:71:7c:aa:e5:9f:36:3f:7c:b2:e8:58:56:5a:
         c9:f1:e4:06:a8:2a:62:8f:9f:bc:2b:8b:42:92:d8:d2:d1:d5:
         00:15:ff:33:3d:6c:bd:88:ca:ae:cd:65:52:3e:21:d9:4f:8c:
         3a:e8:51:40:7c:34:88:61:a1:ba:16:0b:cf:a7:43:91:e3:c0:
         b4:c3:59:25:4f:fd:3b:94:6e:9b:16:2d:fd:71:27:ae:fb:8c:
         94:00:6c:88:9e:d9:98:80:7c:fe:11:0e:30:b8:87:76:84:9d:
         25:74:fb:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 13:45:18 2025 by rpki-client