Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7b044ed2-f4dc-459c-862c-cdb186e69eb1/8d04810d-b3a8-3d6f-84da-812950ac1e2a.roa
File:                     8d04810d-b3a8-3d6f-84da-812950ac1e2a.roa (raw, json)
Hash identifier:          ZQE5cX9Exw9+cZbTvszUUHB5CXG1IVo3CqVG5pIzrzw=
Subject key identifier:   FF:00:3C:A3:A4:A4:28:A3:FB:89:04:BD:68:7B:35:76:26:3A:7F:FB
Certificate issuer:       /CN=7b044ed2-f4dc-459c-862c-cdb186e69eb1
Certificate serial:       010D0C9F4328584B2B918CEA0FAA7CA1243C0E00
Authority key identifier: 61:B5:28:D9:9F:4F:40:32:EA:73:C5:44:3F:3D:E0:13:77:EC:56:A4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7b044ed2-f4dc-459c-862c-cdb186e69eb1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7b044ed2-f4dc-459c-862c-cdb186e69eb1/8d04810d-b3a8-3d6f-84da-812950ac1e2a.roa
Signing time:             Fri 12 Sep 2025 13:00:42 +0000
ROA not before:           Fri 12 Sep 2025 13:00:42 +0000
ROA not after:            Thu 11 Dec 2025 14:00:42 +0000
asID:                     30182
IP address blocks:        45.59.172.0/22 maxlen: 24
                          199.87.88.0/21 maxlen: 24
                          208.69.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7b044ed2-f4dc-459c-862c-cdb186e69eb1/7b044ed2-f4dc-459c-862c-cdb186e69eb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7b044ed2-f4dc-459c-862c-cdb186e69eb1/7b044ed2-f4dc-459c-862c-cdb186e69eb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7b044ed2-f4dc-459c-862c-cdb186e69eb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2b:91:8c:ea:0f:aa:7c:a1:24:3c:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b044ed2-f4dc-459c-862c-cdb186e69eb1
        Validity
            Not Before: Sep 12 13:00:42 2025 GMT
            Not After : Dec 11 14:00:42 2025 GMT
        Subject: CN=8f1e5269-3d07-4a22-9cea-57ad7c263920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5e:cc:90:57:27:13:5b:e7:a3:09:60:5a:0a:
                    dd:cc:96:52:c1:eb:82:4d:74:e8:e6:35:31:e5:25:
                    16:2b:cb:9c:98:fb:53:3d:72:6f:80:6f:81:19:e3:
                    48:38:2a:5c:a7:00:49:43:90:96:50:6d:4b:6a:ee:
                    dc:1e:4c:70:ca:33:d0:a1:41:8e:5d:6d:54:6f:f4:
                    98:88:c0:e5:3a:9f:c0:52:76:d3:c8:8d:39:de:46:
                    85:14:62:5b:96:e0:ba:b8:0a:e2:5d:d9:5c:31:e7:
                    fd:5b:4c:1e:2f:ee:e9:e9:22:b4:e0:43:75:64:4a:
                    21:7a:8c:5e:f1:f9:51:76:54:d2:da:ab:d6:12:6a:
                    30:97:e1:b4:eb:66:e9:59:d7:9e:d4:ee:4b:7c:9a:
                    0a:22:1f:17:eb:88:9f:db:c7:6a:05:f1:9d:1a:f7:
                    e2:5b:da:0f:b1:08:4c:fd:65:b1:8d:6f:df:6d:77:
                    44:02:ab:e0:5c:1f:59:ef:1d:50:d3:86:06:3d:e6:
                    f7:4c:7a:aa:69:69:61:51:2b:37:85:68:69:da:46:
                    0c:e8:cb:6a:cc:2e:48:82:58:10:de:d7:58:41:d1:
                    74:b4:2c:be:89:1a:c5:67:11:44:ab:2f:9b:e0:70:
                    ea:b5:16:77:48:bf:be:ca:5d:8e:4e:2e:e9:25:e2:
                    65:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:00:3C:A3:A4:A4:28:A3:FB:89:04:BD:68:7B:35:76:26:3A:7F:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7b044ed2-f4dc-459c-862c-cdb186e69eb1/8d04810d-b3a8-3d6f-84da-812950ac1e2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7b044ed2-f4dc-459c-862c-cdb186e69eb1/7b044ed2-f4dc-459c-862c-cdb186e69eb1.crl

            X509v3 Authority Key Identifier:
                keyid:61:B5:28:D9:9F:4F:40:32:EA:73:C5:44:3F:3D:E0:13:77:EC:56:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7b044ed2-f4dc-459c-862c-cdb186e69eb1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.172.0/22
                  199.87.88.0/21
                  208.69.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:11:da:f7:5a:de:52:e6:5f:ba:94:12:86:78:c4:06:8c:d4:
         a2:6c:10:09:ec:13:19:11:87:06:b1:0a:46:c9:b5:f5:c2:48:
         17:b0:17:e1:57:4b:b2:b9:a1:5d:47:e3:c2:bf:3d:e8:8e:42:
         aa:4f:a6:4d:0a:8d:d2:56:5b:e2:f7:15:71:d6:f6:85:a1:3d:
         c9:d9:56:64:ae:24:66:c2:f0:42:e7:d4:50:8b:53:df:a9:59:
         26:61:28:ca:f8:9b:4b:08:7b:77:f1:5f:2a:44:d4:95:7d:bc:
         95:8f:0c:3a:35:c8:cc:c8:21:02:4a:87:38:e5:37:45:bd:23:
         c9:c9:be:ec:a6:f3:57:ff:c2:50:38:80:e9:78:63:0e:ec:1e:
         4b:f7:6f:7b:b1:8a:23:e5:01:14:5a:48:5f:2c:88:dd:2e:0c:
         2f:fb:cb:06:0c:42:3e:2e:c8:f1:a9:33:7b:5a:6a:da:cb:b1:
         cf:92:ce:92:fb:b6:d4:6b:40:19:60:80:55:69:c4:0e:1d:7f:
         16:4b:bc:90:e1:f2:4e:ee:6c:1c:8f:63:48:72:48:44:fe:c7:
         7c:de:74:b6:f1:6c:e5:9b:30:d2:2d:dd:44:7b:41:b0:58:eb:
         7c:79:5f:ec:f5:57:cc:95:a2:5f:04:8a:e1:f1:0e:67:2b:84:
         fb:36:64:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:04:50 2025 by rpki-client