Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0fd3dad9-a391-3edb-96a3-c59e44a0127d.roa
File:                     0fd3dad9-a391-3edb-96a3-c59e44a0127d.roa (raw, json)
Hash identifier:          g5z1JAt1yeCzj6/j2Ek81mGVP7N7pv6lwxPBvYF8KT8=
Subject key identifier:   FF:8A:50:47:4C:08:10:CE:D8:2D:73:3F:29:E2:D1:72:9B:55:19:EF
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584ADC00FBADBC929A0E184AD640
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0fd3dad9-a391-3edb-96a3-c59e44a0127d.roa
Signing time:             Fri 15 Aug 2025 01:00:32 +0000
ROA not before:           Fri 15 Aug 2025 01:00:32 +0000
ROA not after:            Thu 13 Nov 2025 02:00:32 +0000
asID:                     30036
IP address blocks:        45.59.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:dc:00:fb:ad:bc:92:9a:0e:18:4a:d6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug 15 01:00:32 2025 GMT
            Not After : Nov 13 02:00:32 2025 GMT
        Subject: CN=23b004d1-eab6-4de5-aa95-ebb04d521697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:26:ab:3b:22:8c:8b:9b:f9:fb:1c:86:36:34:
                    cb:77:6a:54:a3:b2:87:86:42:db:4a:fd:17:de:1b:
                    e1:c1:d9:36:c9:12:d3:ab:78:4d:e3:06:cc:a9:ed:
                    2d:ad:d4:b0:76:d0:34:19:c4:d1:85:9a:dc:80:1f:
                    89:00:a5:25:d8:ee:b3:4b:a3:9c:94:37:9c:1c:ad:
                    c7:67:e5:80:2a:3e:5d:39:14:7a:89:5b:f2:5d:22:
                    8f:f1:d4:b7:ad:9a:40:cb:a7:02:23:d2:24:52:9e:
                    b2:46:b6:cf:9b:52:51:00:a4:43:f9:0e:20:30:5d:
                    f6:8e:af:0d:a0:5c:50:8c:ae:e9:d5:67:1e:c1:09:
                    73:88:04:91:eb:30:4b:1c:20:d9:92:54:47:89:e6:
                    bb:11:90:72:e2:89:81:08:12:ae:e9:f0:6c:ea:d8:
                    e9:88:ea:11:c0:79:83:14:e8:b8:90:16:00:a2:55:
                    33:b2:f8:7e:90:5d:83:0b:4b:83:48:a6:70:90:de:
                    5a:c2:94:ab:e5:37:05:bb:75:d8:76:8e:16:f2:5e:
                    e9:99:29:79:0c:e2:bf:4f:89:a5:8c:73:6a:7f:7c:
                    f8:11:76:ac:5d:e5:31:1f:d6:57:c0:d4:a7:28:97:
                    25:bd:8f:d9:99:7e:ff:d7:d3:2e:04:e2:40:f7:32:
                    ca:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:8A:50:47:4C:08:10:CE:D8:2D:73:3F:29:E2:D1:72:9B:55:19:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0fd3dad9-a391-3edb-96a3-c59e44a0127d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:01:93:91:db:ff:fb:2d:2d:36:10:e7:09:a0:4a:96:21:b2:
         4a:67:1d:db:6a:6d:77:75:aa:c6:70:75:86:bd:69:60:1b:56:
         4e:0b:6d:01:70:0d:38:98:69:18:20:b0:7b:74:66:a8:2f:b9:
         aa:84:d0:57:a7:96:42:be:97:24:9c:d5:1b:b8:c9:08:01:36:
         2b:0b:19:7f:a1:a4:ab:17:4d:46:bc:f2:51:4c:0e:09:18:3c:
         00:ba:59:e9:d7:26:7c:97:fe:9d:e2:74:a1:e6:a1:48:9a:d8:
         42:2f:5a:88:92:c8:73:a6:cf:6d:83:27:78:a4:e5:49:9a:16:
         1f:7a:ec:47:1e:42:10:70:d8:f6:d3:d2:0b:81:09:5e:74:08:
         9a:9d:0e:34:1d:50:3c:65:34:f0:e6:f6:cb:6b:bf:7a:fa:d0:
         b4:0f:2d:b4:f2:dd:b6:19:dc:cc:74:ec:01:1a:36:04:3e:0c:
         3e:ce:79:67:c9:7a:a4:54:02:a2:9c:52:fe:a9:8e:23:d6:5b:
         7b:20:2f:06:99:5b:9a:57:10:10:b4:ae:53:f9:08:3e:2c:9f:
         67:97:98:68:ed:9d:3f:2e:95:c1:6c:31:95:d2:97:f2:f3:3c:
         6f:d0:d8:40:66:3f:2f:0c:4f:3d:ac:f0:d6:b4:88:0c:73:f1:
         8c:62:31:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:02:44 2025 by rpki-client