Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/186909b2-1f38-3535-ba9a-aa83c426facb.roa
File:                     186909b2-1f38-3535-ba9a-aa83c426facb.roa (raw, json)
Hash identifier:          /7HX6tpME0k2h3PqyuJLKVov5bbro3jobUHYgy9w/0M=
Subject key identifier:   4B:01:46:76:EA:1D:9A:B0:3C:1B:26:E5:2F:43:0E:FD:7E:E3:48:70
Certificate issuer:       /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Certificate serial:       010D0C9F4328584B6201EEBC5402501D09C01500
Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/186909b2-1f38-3535-ba9a-aa83c426facb.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     46261
IP address blocks:        45.59.18.0/24 maxlen: 24
                          45.59.21.0/24 maxlen: 24
                          45.59.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:01:ee:bc:54:02:50:1d:09:c0:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=52992e6d-4768-4add-94cb-d0e6fdf313cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a3:18:00:da:61:cf:c6:e1:99:32:6e:da:fe:
                    5f:4d:48:61:06:b8:28:c2:4f:87:a8:a0:ce:d6:6b:
                    50:1d:a7:86:5e:47:4a:76:4f:33:ed:98:3f:a5:9f:
                    f8:6b:d8:dc:e3:f0:f1:43:0b:fa:12:33:1d:cf:43:
                    af:35:2c:c0:f1:6f:20:a7:7e:99:08:84:9a:af:32:
                    e1:92:a0:ac:f9:59:5f:c3:cf:9c:c7:c2:c1:42:3b:
                    d5:e8:74:bc:aa:ea:66:d0:b8:15:49:18:0c:bf:25:
                    d4:48:23:28:5a:43:44:dc:de:9d:84:d6:5f:63:75:
                    bc:c6:4a:9c:48:4a:6f:77:7d:fe:a6:40:89:67:78:
                    52:0d:11:12:4a:b3:2e:8c:8f:c7:fe:8b:ce:b4:d4:
                    8f:ce:4c:19:ea:bb:68:ec:ee:80:23:e0:44:40:a8:
                    f3:0e:8e:da:cb:64:ff:ee:63:1f:b9:fc:c6:82:7b:
                    c4:2d:bc:83:83:fa:3f:c0:bb:4d:16:6d:cc:fa:f0:
                    db:6e:cb:88:c7:35:64:b1:0b:42:c5:e6:0b:17:17:
                    35:fd:ec:a8:74:92:ce:60:41:57:12:5c:a3:24:52:
                    b0:60:36:c3:99:6a:d6:41:0a:02:fd:8c:53:7c:8a:
                    aa:93:04:48:22:b6:d7:38:8d:7b:9f:d9:19:cc:74:
                    65:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:01:46:76:EA:1D:9A:B0:3C:1B:26:E5:2F:43:0E:FD:7E:E3:48:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/186909b2-1f38-3535-ba9a-aa83c426facb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.18.0/24
                  45.59.21.0/24
                  45.59.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:f0:08:d8:a9:43:ae:a1:72:47:27:99:0a:29:4c:ac:35:ed:
         8d:6f:7f:a8:a1:ac:63:e7:53:40:70:7a:4b:3d:32:59:39:7e:
         0a:f6:01:4e:69:c9:81:c1:5c:3c:71:1d:89:a2:42:44:f8:9d:
         10:52:6b:40:48:45:dc:d8:48:40:6c:ed:ae:62:89:8f:b5:25:
         df:71:41:8f:82:4b:29:36:01:2b:6a:2d:27:21:c1:45:b6:1a:
         a6:18:a5:d3:d1:12:11:ce:33:f6:a2:a5:8e:4b:39:fd:49:9b:
         29:2a:5a:d2:c1:07:93:7d:dc:70:9b:4c:06:57:44:d4:22:01:
         fd:79:67:b1:5b:71:93:b8:8f:53:67:44:09:4f:ff:df:e4:15:
         30:14:91:6f:8b:3c:1c:34:89:38:3a:60:1a:19:e8:81:2a:70:
         69:f0:cc:c5:e9:c8:1e:aa:c8:cc:38:b4:be:ee:30:11:65:c6:
         26:26:d8:9c:e5:7a:bc:ee:31:80:eb:9b:aa:58:d3:33:65:55:
         13:30:d7:cc:b5:c4:87:fe:84:6f:52:93:47:e8:55:92:6d:69:
         3a:fc:80:28:76:3b:8b:82:f8:ee:6c:7c:5b:39:0f:9c:70:7c:
         c0:96:53:48:0f:28:3c:ce:c0:47:58:8e:7c:da:35:8a:c5:90:
         64:96:a2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:01:59 2025 by rpki-client