Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/b2e5fba4-debb-33ce-9e47-3f6161344f86.roa
File:                     b2e5fba4-debb-33ce-9e47-3f6161344f86.roa (raw, json)
Hash identifier:          a+zjSh4ao8OWEEnbnN5YPd1iMSRbrJfl1V5qV+YqQ4M=
Subject key identifier:   B6:BC:C5:EB:38:71:71:A7:1D:3A:FC:46:29:6C:8F:E3:DC:65:4C:20
Certificate issuer:       /CN=22f3c152-12b6-441e-b4d6-66feab870c4d
Certificate serial:       010D0C9F4328584AD6EE963E3522832F65EA3140
Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/b2e5fba4-debb-33ce-9e47-3f6161344f86.roa
Signing time:             Wed 13 Aug 2025 05:24:28 +0000
ROA not before:           Wed 13 Aug 2025 05:24:28 +0000
ROA not after:            Tue 11 Nov 2025 06:24:28 +0000
asID:                     401838
IP address blocks:        45.62.161.0/24 maxlen: 24
                          45.62.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d6:ee:96:3e:35:22:83:2f:65:ea:31:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d
        Validity
            Not Before: Aug 13 05:24:28 2025 GMT
            Not After : Nov 11 06:24:28 2025 GMT
        Subject: CN=a0d9870f-e45f-4ac4-b264-a8a6ecaac9da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f5:01:43:45:ab:84:b8:9f:9c:d3:89:c0:c1:
                    0b:7c:c8:cd:2d:36:d2:0a:cd:ef:c1:9a:d4:00:14:
                    0c:f3:06:ec:89:83:31:5b:e9:79:1a:ff:b7:7b:ca:
                    5e:84:e7:22:7e:6c:6e:b5:54:3f:3b:57:d6:e2:89:
                    44:c5:22:46:aa:dc:38:7f:2b:ab:14:25:27:ca:c9:
                    db:33:87:c9:91:a7:d6:a6:15:98:df:10:f5:6b:5d:
                    54:73:1f:dc:f5:c9:14:1e:fa:12:ca:b7:4b:9b:27:
                    2e:43:43:d4:05:6f:73:b8:cf:89:85:cc:46:36:1c:
                    c8:7d:ea:aa:c4:e3:17:1e:4c:68:32:67:2f:4f:32:
                    73:a6:a4:83:6f:54:ab:03:cd:11:20:73:e8:f5:c8:
                    e8:ad:2d:49:e0:c3:6f:10:9d:e2:7e:c8:df:78:f8:
                    51:3a:a3:f1:4b:22:85:a3:73:40:e8:2b:c7:71:6c:
                    08:49:38:67:13:91:b3:b6:1e:13:ed:e5:bc:9d:2f:
                    70:56:47:fa:c6:d5:1b:f1:dd:0a:6f:1c:a6:34:d2:
                    81:9d:db:61:6e:1b:5c:60:3e:99:9f:fe:11:24:76:
                    df:be:97:e6:fc:22:f8:f9:cb:cb:5b:1f:a6:97:d2:
                    14:ba:f6:1d:a3:14:a7:2e:ba:49:61:0f:86:ea:81:
                    61:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:BC:C5:EB:38:71:71:A7:1D:3A:FC:46:29:6C:8F:E3:DC:65:4C:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/b2e5fba4-debb-33ce-9e47-3f6161344f86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl

            X509v3 Authority Key Identifier:
                keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.62.161.0/24
                  45.62.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:73:d2:a1:bd:c9:cf:79:cd:70:0a:54:63:b4:5d:ac:33:e1:
         c8:30:bd:07:45:50:53:cb:1e:d3:9d:3d:eb:e6:fe:04:e9:20:
         d6:c3:ea:eb:2f:c9:d0:2f:29:cf:d9:39:57:86:37:be:c7:39:
         8a:b5:a9:0d:47:a0:4a:0c:d4:72:a3:61:ea:d6:b3:a4:b8:14:
         42:b2:a6:78:1c:0e:b5:37:b3:69:57:90:be:77:99:c5:52:57:
         30:9c:d8:bb:2b:54:4c:b5:0b:4f:6e:31:42:b3:33:23:e3:b9:
         66:5a:1f:ab:0b:0b:10:96:95:4f:28:aa:39:9d:28:76:5f:d1:
         60:1a:b3:c0:90:6d:2e:93:89:35:0c:40:0e:8f:19:22:91:77:
         2e:ca:04:28:cf:f9:c5:c0:39:31:91:97:df:ce:42:87:ee:2f:
         a7:95:1f:d8:8b:ac:d5:f3:64:0a:05:89:22:65:d5:e4:bd:d6:
         c8:61:38:c8:87:9b:6e:55:50:9c:4d:d9:f7:24:05:ce:3a:6e:
         29:96:1d:35:75:be:c2:f9:6a:b3:3e:37:70:2a:96:f6:97:87:
         36:87:c9:2f:bd:b9:ea:53:7f:f4:a3:03:a1:e1:ea:af:71:36:
         a1:59:df:5b:00:d7:df:23:f5:b1:6f:88:c7:a0:28:f9:f3:08:
         e5:97:20:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:00:19 2025 by rpki-client