Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/4efb66c7-f73b-3f94-8345-2e707a347971.roa
File:                     4efb66c7-f73b-3f94-8345-2e707a347971.roa (raw, json)
Hash identifier:          WwUA/q0KiVrjIOMDrD5g3oM6eOZz4o4G6b85QgXOUWI=
Subject key identifier:   EC:5E:FA:ED:C3:43:BB:D7:53:41:1C:60:DE:CA:05:C2:85:2D:86:10
Certificate issuer:       /CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
Certificate serial:       010D0C9F4328584AE7A59E830101F2FB27A86FC0
Authority key identifier: 68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/4efb66c7-f73b-3f94-8345-2e707a347971.roa
Signing time:             Tue 19 Aug 2025 05:06:12 +0000
ROA not before:           Tue 19 Aug 2025 05:06:12 +0000
ROA not after:            Mon 17 Nov 2025 06:06:12 +0000
asID:                     14956
IP address blocks:        45.59.113.0/24 maxlen: 24
                          45.59.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e7:a5:9e:83:01:01:f2:fb:27:a8:6f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
        Validity
            Not Before: Aug 19 05:06:12 2025 GMT
            Not After : Nov 17 06:06:12 2025 GMT
        Subject: CN=21145d8f-d1e0-4d6b-a0b1-250ea1acf1d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4e:d0:fe:29:1e:88:a8:a2:1a:7b:52:95:e5:
                    1a:7c:ce:6f:72:59:b5:f1:32:f2:01:dd:54:f9:de:
                    5e:25:2b:68:ba:f0:33:2d:fa:92:28:5a:74:0a:cf:
                    ce:75:1e:96:41:8b:55:06:c4:d6:51:d2:2c:cd:5a:
                    d6:6d:ab:6a:9f:42:04:23:73:f6:60:08:4f:4e:76:
                    e8:46:67:40:fe:bd:fa:e0:61:f8:d6:29:48:d7:a5:
                    5b:13:af:f6:66:dd:1c:00:80:e7:d3:15:c8:0b:fc:
                    a1:0e:ce:02:d7:7c:e3:49:d5:66:c2:44:31:20:7d:
                    f2:ec:83:69:84:37:1f:d6:8b:e3:1f:2e:76:bd:b7:
                    fd:d3:8f:2f:ce:51:17:c1:03:0a:e2:88:ac:65:fc:
                    30:d9:13:b4:51:a3:6e:bc:01:9a:6e:fe:95:ba:87:
                    f2:89:39:79:19:06:58:47:14:50:c8:5e:8e:c8:07:
                    17:b2:03:7e:8d:0a:93:5b:4e:c0:59:93:fe:52:72:
                    df:67:02:eb:f3:c5:eb:d7:7c:e3:92:60:9f:7a:53:
                    94:47:c7:be:eb:8d:f7:dd:c9:aa:d9:ef:1b:17:d8:
                    36:d9:9b:0f:c3:94:6e:e8:9f:19:35:e1:90:2c:59:
                    3a:36:7d:41:4b:b6:8f:ba:ae:7f:1a:3c:f6:4c:f9:
                    e2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:5E:FA:ED:C3:43:BB:D7:53:41:1C:60:DE:CA:05:C2:85:2D:86:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/4efb66c7-f73b-3f94-8345-2e707a347971.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl

            X509v3 Authority Key Identifier:
                keyid:68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.113.0/24
                  45.59.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:f6:89:31:bc:8a:7f:ca:f7:01:2f:85:80:7b:ac:99:63:b0:
         04:c9:74:b3:6f:23:46:e0:c2:f4:60:6c:a9:dc:57:5a:90:ff:
         0c:97:57:10:7f:59:e3:8e:c5:d9:ce:b4:3a:03:51:19:a7:75:
         b6:06:1a:6a:c0:a2:19:7a:f5:2d:d2:7b:e0:ca:11:37:a1:5a:
         58:1d:2d:47:e3:41:fa:68:32:51:72:c3:9e:27:f2:ea:25:96:
         9f:b9:4e:2c:c3:38:98:fe:62:52:1f:cc:be:c7:e8:72:e3:dd:
         1a:1a:3a:61:6a:19:c1:e6:59:27:dd:4d:b0:06:c6:d3:03:3f:
         00:fc:c6:d6:90:a3:cb:d5:96:45:05:e8:54:10:eb:c9:aa:49:
         61:ee:df:88:ff:fa:cd:fb:fb:53:83:7e:5a:a4:34:b4:92:61:
         2e:5c:76:08:4a:ae:d7:4f:36:e1:6a:d7:0f:34:46:9e:21:7a:
         92:d0:7b:fb:41:d0:4a:c0:3b:fc:af:37:d2:e8:d1:ec:98:48:
         02:d0:f8:41:47:bb:36:0b:d9:4c:6f:2a:9c:08:90:53:36:0b:
         db:1f:d2:53:ff:cb:74:88:d5:f3:d4:38:95:1d:12:19:d7:7b:
         87:41:28:68:f2:a6:22:24:a9:d4:a9:c3:d0:0e:95:38:8c:9f:
         eb:bf:f3:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 10:27:11 2025 by rpki-client