Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c13a9f6d-dba8-394e-a7be-b5d087535fbd.roa
File:                     c13a9f6d-dba8-394e-a7be-b5d087535fbd.roa (raw, json)
Hash identifier:          SdYIluM39PHeSy91pO6fFpS8pY2JnRZ5NNTlT/UxNOk=
Subject key identifier:   EF:35:36:56:37:9E:7C:A2:38:87:DB:48:B2:8C:57:79:BD:F6:FE:95
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584ADC00FE961047113F848DCA80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c13a9f6d-dba8-394e-a7be-b5d087535fbd.roa
Signing time:             Fri 15 Aug 2025 01:00:32 +0000
ROA not before:           Fri 15 Aug 2025 01:00:32 +0000
ROA not after:            Thu 13 Nov 2025 02:00:32 +0000
asID:                     30036
IP address blocks:        45.59.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:dc:00:fe:96:10:47:11:3f:84:8d:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug 15 01:00:32 2025 GMT
            Not After : Nov 13 02:00:32 2025 GMT
        Subject: CN=5468347c-be81-40b7-82ff-075743eff915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:a0:a1:39:23:88:59:1d:4d:7e:cd:64:d7:15:
                    eb:7c:5f:2a:fa:2d:c9:b1:af:53:a5:1f:4f:ed:6a:
                    32:c8:7c:55:f0:8c:fb:65:21:41:eb:3b:d5:ae:1f:
                    64:b9:c8:12:91:04:e2:f0:5e:05:1d:13:ae:9f:7b:
                    b3:d7:b8:85:25:40:c3:c3:7c:5a:90:56:89:20:d5:
                    40:91:ff:84:c8:04:de:71:3a:83:01:44:c5:22:d7:
                    10:ad:10:f5:e1:b9:12:b0:5b:70:e6:bd:8f:9c:3d:
                    21:7a:24:69:f2:33:31:26:d7:26:02:9e:07:8e:7b:
                    24:ab:ee:78:c3:99:03:d1:9b:43:a9:75:f1:20:70:
                    67:1f:b0:27:88:b9:17:13:7c:ff:45:3f:a3:e2:ee:
                    ff:11:13:7e:7a:ae:1e:c5:7c:fc:75:d8:7c:a3:cb:
                    11:ff:fa:f8:fc:7a:a5:84:1e:bd:6b:dd:26:22:2f:
                    09:24:0f:57:cd:0f:62:a3:86:4b:ec:63:52:83:55:
                    e0:f2:67:be:62:98:7d:b3:37:b0:d1:da:b7:37:e0:
                    2f:92:b4:56:3c:12:4e:db:2a:75:4d:44:f3:c6:ee:
                    c0:7e:23:94:ff:b7:8d:dd:2f:c1:3b:f0:f6:28:c2:
                    f7:07:ac:62:88:f0:3e:44:a4:29:6b:d1:81:2f:c6:
                    6a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:35:36:56:37:9E:7C:A2:38:87:DB:48:B2:8C:57:79:BD:F6:FE:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c13a9f6d-dba8-394e-a7be-b5d087535fbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:2b:4a:89:6b:75:f7:73:d3:6a:ff:7f:40:56:1e:ec:01:5a:
         0d:da:d3:9f:75:d1:94:f5:f6:47:12:5e:dc:57:5e:d7:69:8a:
         6c:04:85:56:11:4b:eb:07:f2:58:d5:d4:a9:10:9c:37:d3:8c:
         c3:d1:6f:53:70:34:6d:5d:84:a8:1a:6c:4f:b3:ac:b9:e9:2c:
         e2:e1:6b:92:06:75:93:9d:31:ad:04:c5:d0:ec:02:74:7e:3b:
         17:38:25:65:c3:be:0a:09:c9:c4:67:80:de:25:67:f4:ad:6a:
         cc:9d:d4:cb:4f:b7:9e:73:fb:44:89:4b:4a:c9:28:3f:fc:f2:
         6e:86:18:c5:96:2c:72:b6:2b:79:43:9c:c4:3e:46:67:55:89:
         4e:0d:a6:aa:b2:fe:65:91:39:1c:8b:10:1f:6a:ca:0b:dc:31:
         ec:9b:65:f6:52:a3:18:3b:60:10:d9:bb:2c:76:81:c8:31:e7:
         5e:bb:3c:15:9a:f1:a8:43:16:cf:e5:84:c6:5a:7b:24:5d:73:
         5a:d3:6c:b5:72:a2:af:47:e1:d6:b7:bf:7d:ad:3f:01:0b:2c:
         6a:76:25:96:f7:08:2c:da:d4:8c:aa:aa:7c:b1:93:55:fa:c7:
         37:bc:73:26:bb:8a:16:ae:4a:85:be:2a:79:40:5b:3e:01:8c:
         3e:3e:61:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:53:23 2025 by rpki-client