Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/240f9d0d-a17f-35e3-8ade-de3e78530574.roa
File:                     240f9d0d-a17f-35e3-8ade-de3e78530574.roa (raw, json)
Hash identifier:          ODM3oaMOJP4sNZ/xllDSnseacmJV1O5gxu2FNwr8lUk=
Subject key identifier:   F1:5E:DD:13:31:04:B3:8F:44:8C:21:47:25:AD:B4:56:C3:1E:4D:ED
Certificate issuer:       /CN=146a096d-134a-4c52-9243-da3981810107
Certificate serial:       010D0C9F4328584B3DB705410871DC1648A86C80
Authority key identifier: 8F:11:51:BB:3C:25:40:6A:C7:4F:EB:65:C9:D8:3C:34:D2:A3:A3:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/240f9d0d-a17f-35e3-8ade-de3e78530574.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     26658
IP address blocks:        45.43.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/146a096d-134a-4c52-9243-da3981810107.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/146a096d-134a-4c52-9243-da3981810107.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b7:05:41:08:71:dc:16:48:a8:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=146a096d-134a-4c52-9243-da3981810107
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=bea8782a-2378-4492-a342-b4dfab1e7021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:68:5e:ab:e2:de:2f:b5:59:24:06:04:99:db:
                    39:b7:e1:2a:2e:f5:92:f4:f2:10:d3:e1:1d:4f:8c:
                    a1:ee:b2:be:47:9c:e0:0c:ec:91:67:c4:14:5f:1e:
                    76:51:66:19:14:98:23:06:ac:3c:e9:9b:54:a3:87:
                    d2:fd:f6:5a:fd:8d:67:05:81:bc:58:ce:aa:1d:34:
                    7a:ac:8c:ad:d5:43:c6:08:57:80:ac:3a:4e:c1:2c:
                    ee:18:5b:45:dc:ca:d1:6b:fb:c8:b9:00:dd:b6:08:
                    38:0c:7b:d3:82:70:21:86:9d:df:03:86:dc:ea:67:
                    32:fc:2e:df:1e:60:c6:cb:00:b7:b8:1f:ac:30:3f:
                    74:6f:0b:e0:b3:89:c6:a5:04:f2:cb:77:f7:e5:1f:
                    eb:35:38:a4:8a:35:ea:79:70:8b:f4:a2:1f:d9:d3:
                    41:87:ea:72:0d:f5:13:ad:78:5e:57:81:aa:c5:2d:
                    23:a2:e8:62:4c:43:f2:f8:4f:92:87:52:ab:70:ef:
                    0c:0a:af:7c:69:1c:bf:39:a0:62:e0:dc:c8:52:ee:
                    3e:7c:2f:9e:13:84:53:ff:f9:a9:60:ec:d2:59:08:
                    7a:b2:42:1a:d7:d0:e1:6b:66:fe:60:95:1f:0b:ae:
                    b6:39:10:b2:48:c7:e4:7c:60:df:e9:12:40:63:0e:
                    ad:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:5E:DD:13:31:04:B3:8F:44:8C:21:47:25:AD:B4:56:C3:1E:4D:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/240f9d0d-a17f-35e3-8ade-de3e78530574.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/146a096d-134a-4c52-9243-da3981810107.crl

            X509v3 Authority Key Identifier:
                keyid:8F:11:51:BB:3C:25:40:6A:C7:4F:EB:65:C9:D8:3C:34:D2:A3:A3:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.43.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:83:2e:b2:e1:24:54:8f:5c:9a:f7:d9:c2:01:71:5e:e7:fc:
         04:8e:80:08:5f:52:94:e2:a4:ab:03:46:f5:44:ca:47:0e:41:
         e3:4d:dc:dc:7e:18:34:bb:35:ba:46:2c:e3:19:17:d9:31:a6:
         26:09:9e:ed:56:35:03:9a:99:07:0b:36:4d:be:1b:55:81:ff:
         fc:47:4f:ac:86:4a:ac:16:8e:4a:49:b8:76:a7:fe:7c:0f:6b:
         72:99:4b:35:08:b7:3b:a3:74:52:0c:b5:8e:e6:41:e0:03:e1:
         f8:5f:aa:a2:26:dd:d9:cf:cd:84:2c:9e:37:13:91:cc:1b:da:
         a6:a5:df:68:4c:54:3c:89:22:bb:db:eb:76:27:b4:f3:91:04:
         05:0c:4d:51:dd:34:cc:95:96:a9:9a:a6:b5:d6:ff:59:89:72:
         cd:a3:82:ee:fd:43:a3:36:52:85:b0:0d:3e:be:1b:b7:4c:8b:
         3f:73:14:0d:aa:ad:58:97:1e:b1:a9:26:1f:6f:f2:c2:1a:73:
         88:4d:1b:43:63:b1:22:e6:48:73:02:b6:6b:9f:e3:e0:78:92:
         a2:e0:e1:2d:51:44:aa:a3:ef:79:db:b1:5c:0b:7f:4b:d8:b4:
         5f:8a:fa:b3:ce:71:52:4d:bd:65:34:2f:74:bf:53:75:6d:0c:
         1c:68:54:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:31:41 2025 by rpki-client