Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d5cea8ba-a1a0-49ac-b5d4-1d207695255c/a8478cd5-6e87-34f0-b54b-e5f2ab41f7cc.roa
File:                     a8478cd5-6e87-34f0-b54b-e5f2ab41f7cc.roa (raw, json)
Hash identifier:          /QjAPPup+DazEjqikTU18e2NTyZC/4nmcJ8MrvQh2Kk=
Subject key identifier:   47:62:A1:AC:42:0A:B4:52:0C:BE:BF:B5:A5:8A:35:78:A9:83:F1:D8
Certificate issuer:       /CN=d5cea8ba-a1a0-49ac-b5d4-1d207695255c
Certificate serial:       010D0C9F4328584B8BE23391879221D277BE5200
Authority key identifier: 87:BA:96:8A:82:31:42:0D:8E:1C:C4:65:10:67:9B:B3:89:97:3B:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d5cea8ba-a1a0-49ac-b5d4-1d207695255c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d5cea8ba-a1a0-49ac-b5d4-1d207695255c/a8478cd5-6e87-34f0-b54b-e5f2ab41f7cc.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     399856
IP address blocks:        45.45.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d5cea8ba-a1a0-49ac-b5d4-1d207695255c/d5cea8ba-a1a0-49ac-b5d4-1d207695255c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d5cea8ba-a1a0-49ac-b5d4-1d207695255c/d5cea8ba-a1a0-49ac-b5d4-1d207695255c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d5cea8ba-a1a0-49ac-b5d4-1d207695255c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:33:91:87:92:21:d2:77:be:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5cea8ba-a1a0-49ac-b5d4-1d207695255c
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=237ab48b-ca25-4615-bad0-3d47758f6c2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:84:96:5c:14:c4:0e:9b:ce:5a:b2:3f:0d:70:
                    a0:f3:93:74:3c:24:9d:4c:e0:36:4a:a2:ae:a6:4f:
                    c1:b7:fe:2f:64:1f:fd:d4:fc:f9:9a:10:1d:c6:80:
                    3d:2e:e5:eb:58:ec:48:5d:43:de:5b:35:91:4e:7e:
                    09:88:9e:8a:43:bb:75:0b:2e:58:29:91:26:ce:90:
                    d4:cb:06:cf:ae:94:a5:b2:c6:32:d0:02:44:da:c0:
                    42:bd:5a:bf:62:9c:e4:41:04:32:ed:45:97:5c:1d:
                    71:de:ae:4d:23:7a:c7:55:3b:28:c5:23:1f:54:60:
                    c7:67:a0:6c:ed:50:69:c2:fc:c8:f9:e7:4f:2a:32:
                    10:f9:ff:2d:cd:de:b1:cd:c9:03:23:fc:18:5e:67:
                    16:4e:a4:6c:ed:d1:55:1c:14:de:84:ce:0b:9c:ec:
                    3f:9e:b5:0a:d9:8d:ad:b5:e3:39:12:79:86:51:90:
                    0a:3b:82:f3:9a:68:55:1a:0a:ae:f6:e4:0b:a7:10:
                    bd:ac:29:61:8a:47:e3:2c:0e:d8:ec:43:a0:79:5b:
                    90:2b:05:59:dd:73:70:47:bb:0c:04:40:73:9c:85:
                    71:15:b5:89:7c:6a:42:49:13:e4:63:3c:4c:f7:4a:
                    96:5a:50:e7:65:31:03:51:d2:c2:c7:b9:18:94:13:
                    40:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:62:A1:AC:42:0A:B4:52:0C:BE:BF:B5:A5:8A:35:78:A9:83:F1:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d5cea8ba-a1a0-49ac-b5d4-1d207695255c/a8478cd5-6e87-34f0-b54b-e5f2ab41f7cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d5cea8ba-a1a0-49ac-b5d4-1d207695255c/d5cea8ba-a1a0-49ac-b5d4-1d207695255c.crl

            X509v3 Authority Key Identifier:
                keyid:87:BA:96:8A:82:31:42:0D:8E:1C:C4:65:10:67:9B:B3:89:97:3B:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d5cea8ba-a1a0-49ac-b5d4-1d207695255c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:e5:d9:5b:82:9e:11:b9:95:81:0d:c7:fc:41:52:0c:c3:89:
         44:30:56:36:3e:e3:c2:de:c4:cc:e0:95:9e:96:5d:48:1d:de:
         01:77:b4:86:c5:f9:d0:ad:fc:a4:4f:88:22:07:47:47:af:99:
         eb:64:c7:ba:c0:e2:13:1c:e0:d5:4b:39:f0:a4:25:0b:ac:5b:
         93:7f:6b:83:c9:c2:52:9b:cb:84:39:b2:d1:fd:5e:6e:79:91:
         3e:4b:f3:ce:d3:e3:68:57:5a:2d:fe:b8:80:28:b9:cc:31:ed:
         9e:fd:d5:39:2b:66:33:9b:ef:9a:c4:b9:4f:b1:9e:9a:49:71:
         9b:89:04:19:a4:99:12:1d:9b:c0:f6:8f:66:20:c9:b6:a2:56:
         f7:7a:da:98:e4:63:ac:5b:26:d0:f8:57:17:50:0e:38:41:af:
         a3:38:5a:3c:4f:b0:f2:1d:7c:5d:27:57:f4:8d:80:4d:f0:ae:
         39:67:d3:4c:74:cd:27:b2:fe:6c:ea:be:67:f8:03:1b:6d:25:
         b3:f6:4e:1b:fa:c6:33:78:48:93:ef:ad:da:af:d6:04:92:2b:
         51:8d:cc:8f:21:83:60:c0:c2:14:48:c0:07:6c:64:40:1d:36:
         ed:51:f9:48:17:06:7e:fa:1b:21:ed:1f:35:3a:c3:43:b3:eb:
         bc:56:d0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:07:42 2025 by rpki-client