Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/b5305974-b6a0-3146-97ed-a648a7e7cbb8.roa
File:                     b5305974-b6a0-3146-97ed-a648a7e7cbb8.roa (raw, json)
Hash identifier:          jnsnQi2tNk6Hp+CTvg6UvNE2UFaJHO5+ssE5Sm5nE34=
Subject key identifier:   BE:13:A0:13:0D:EF:3E:10:27:23:B8:48:8E:34:82:DE:1A:DA:E6:E9
Certificate issuer:       /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
Certificate serial:       010D0C9F4328584B59A1C8AE995D5B29264CB240
Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/b5305974-b6a0-3146-97ed-a648a7e7cbb8.roa
Signing time:             Mon 29 Sep 2025 01:00:33 +0000
ROA not before:           Mon 29 Sep 2025 01:00:33 +0000
ROA not after:            Sun 28 Dec 2025 02:00:33 +0000
asID:                     396948
IP address blocks:        45.61.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:59:a1:c8:ae:99:5d:5b:29:26:4c:b2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
        Validity
            Not Before: Sep 29 01:00:33 2025 GMT
            Not After : Dec 28 02:00:33 2025 GMT
        Subject: CN=0f6780c6-8c1c-4939-a208-581c8a5b510c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c4:22:c3:42:03:ce:cd:53:e7:7f:3e:49:3e:
                    20:ba:f9:19:e2:ae:bb:74:3f:fa:1c:19:aa:8c:c3:
                    15:da:a1:70:06:17:86:ff:24:96:59:fe:66:7b:26:
                    eb:6e:34:0b:57:41:38:f2:2a:24:6e:52:39:ff:42:
                    21:f1:86:f1:b5:98:c3:30:8b:9e:4d:b6:20:3c:e2:
                    dd:4e:8b:70:4a:57:87:85:2d:b4:6b:1a:cb:bd:48:
                    2a:ab:d4:2c:2f:73:5e:a7:2e:7e:1d:6c:df:d8:1d:
                    0e:33:c5:99:05:4f:2d:bb:dd:f0:2a:c8:db:83:9b:
                    58:3c:36:aa:1b:11:0c:e4:a1:be:80:8a:d4:4b:90:
                    7e:21:f3:41:09:31:58:58:3d:3e:f7:3a:d6:ed:2d:
                    f2:d1:92:fa:e4:19:23:80:61:69:2b:ec:5a:64:09:
                    57:28:e7:51:ea:7e:16:87:fc:2f:87:00:5a:9d:fe:
                    68:7b:54:52:d3:6d:ca:c7:1b:0f:8a:58:9d:b9:a4:
                    d2:31:e1:2e:87:b8:db:20:c7:41:4e:42:bc:bb:ba:
                    7f:b7:7b:f5:e7:e8:e9:68:7e:86:ec:da:fe:09:65:
                    2b:a7:95:9d:1d:3b:7b:30:bd:d1:9f:1f:94:7e:20:
                    7e:8e:16:4d:2f:59:91:ea:02:a1:e6:b1:99:5e:e4:
                    25:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:13:A0:13:0D:EF:3E:10:27:23:B8:48:8E:34:82:DE:1A:DA:E6:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/b5305974-b6a0-3146-97ed-a648a7e7cbb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl

            X509v3 Authority Key Identifier:
                keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.61.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:7c:b2:5b:9b:a0:76:08:51:5f:65:d1:55:7d:24:e3:2a:71:
         6b:c2:56:24:8d:ce:a9:6e:35:63:07:23:e4:c6:6b:8d:e9:39:
         c3:7e:9e:87:da:cf:f8:e7:a8:27:c6:04:5f:06:4c:e1:1c:dc:
         9b:43:2e:7f:85:c0:7e:c5:b3:0b:f1:0d:9d:01:e3:d4:f0:4d:
         de:1b:e5:d5:a4:d8:dd:cb:18:31:49:93:05:a5:63:6a:63:67:
         26:b0:fc:0e:31:e6:7c:95:e7:06:5e:85:f8:b2:a0:2f:09:2e:
         f7:40:ab:d5:57:3d:d7:d2:7b:af:cb:fc:d5:96:07:a7:16:ed:
         4e:b2:61:04:6d:82:03:50:e6:90:d4:0b:3e:d5:a7:07:4b:1b:
         2b:7c:3e:49:fe:d2:7f:8a:74:55:1b:64:d5:e8:3f:52:d5:53:
         4c:e7:fb:80:a8:b1:db:6f:06:22:c5:20:11:b4:40:55:2b:7d:
         1a:4f:57:02:27:6b:af:50:bb:35:cc:97:69:50:51:fa:53:e0:
         54:67:ee:96:09:0e:71:18:b9:d8:ac:fa:ab:54:87:ef:03:3e:
         50:1a:3e:ce:cc:04:8f:1e:d4:5b:6c:65:dd:98:da:a3:41:02:
         a1:e8:93:24:51:94:c0:bc:84:ef:46:79:83:76:f1:00:f3:74:
         57:ba:31:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:34:50 2025 by rpki-client