Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/aabc9ac0-a28e-3f13-99f4-a8cfa8236056.roa
File:                     aabc9ac0-a28e-3f13-99f4-a8cfa8236056.roa (raw, json)
Hash identifier:          Wci7f4RsrGBAorHIu0ktfQGPl2Kq7P6f00wr1g0rIWY=
Subject key identifier:   4D:1E:37:05:B2:BC:B5:20:04:1B:C1:AC:B5:8C:65:2F:2F:9D:D6:65
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584B7B21F8FAE9CC10C0C91EF480
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/aabc9ac0-a28e-3f13-99f4-a8cfa8236056.roa
Signing time:             Sat 11 Oct 2025 01:00:30 +0000
ROA not before:           Sat 11 Oct 2025 01:00:30 +0000
ROA not after:            Fri 09 Jan 2026 02:00:30 +0000
asID:                     62610
IP address blocks:        45.40.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7b:21:f8:fa:e9:cc:10:c0:c9:1e:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Oct 11 01:00:30 2025 GMT
            Not After : Jan  9 02:00:30 2026 GMT
        Subject: CN=5e518c0e-23a6-4a4d-a1f3-c8cde4f32f7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:27:40:b9:f1:df:ec:96:8e:2c:dd:9f:e6:16:
                    5a:84:49:40:85:4f:38:66:3f:c5:98:2b:00:14:5f:
                    00:31:86:1a:5c:43:97:f8:21:a6:50:fa:3b:3d:96:
                    a7:d9:67:6e:e7:b0:9f:19:7f:59:f8:0a:da:0f:0d:
                    a9:0d:71:e6:ef:62:45:e6:47:ba:ff:41:f6:3b:73:
                    91:44:d5:b4:48:ef:4e:5d:cf:23:7f:a9:c0:24:f5:
                    b5:66:df:26:42:58:25:2c:f5:da:f7:24:6f:00:2c:
                    35:ca:68:92:d8:eb:47:1f:7c:8a:5a:b8:79:70:55:
                    95:61:ae:07:45:9c:be:b5:10:52:8d:e6:43:72:e9:
                    ba:ec:3a:4d:31:a1:65:87:4a:95:18:02:34:bf:61:
                    41:1e:d9:9e:01:27:ff:0b:bf:2f:68:4b:57:ac:80:
                    c2:5b:75:d9:0b:9f:95:58:e1:a1:75:73:87:90:65:
                    c7:53:94:50:28:34:81:f3:26:6a:6e:a4:f2:e3:d9:
                    17:5b:c2:79:a2:91:44:09:18:35:80:35:27:6a:df:
                    21:b2:31:39:95:e4:b4:7a:01:4d:12:0a:fe:30:00:
                    e4:b0:28:d1:b7:02:89:91:8b:f1:45:66:90:8e:f4:
                    45:c9:42:49:5d:81:47:f2:5b:93:bc:50:af:aa:2f:
                    36:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:1E:37:05:B2:BC:B5:20:04:1B:C1:AC:B5:8C:65:2F:2F:9D:D6:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/aabc9ac0-a28e-3f13-99f4-a8cfa8236056.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.40.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:21:fb:98:5e:4d:e2:c7:7d:8e:31:09:c5:03:67:06:ee:7b:
         f1:14:03:15:2d:6e:e0:ce:ad:6f:ce:52:5f:33:a6:fd:79:0f:
         8c:17:da:36:41:37:db:d1:79:cc:39:63:74:24:91:b9:ba:72:
         30:d1:26:63:d0:46:da:e7:3c:a0:48:69:7e:24:08:23:ed:40:
         98:a2:16:69:e3:ce:ab:54:d8:e8:5d:19:ef:7f:62:05:30:d0:
         e4:4e:d4:1a:3b:9d:1d:bb:74:9d:d3:ac:d1:1c:09:d2:f1:c4:
         38:85:ca:2b:33:61:a1:b7:52:da:c5:59:c4:0d:32:2c:6d:2d:
         39:be:2d:d7:41:41:fa:af:c1:5a:e8:49:90:d8:e8:28:50:28:
         c6:93:ac:85:ae:c8:05:ca:ed:73:67:2c:68:04:9b:b5:07:55:
         c3:ba:f7:5e:29:18:45:59:83:55:c0:be:32:c5:7e:a9:3f:49:
         51:ca:54:97:90:5c:d8:d5:88:4d:6e:24:06:15:bd:84:8b:3f:
         68:6e:37:9e:f7:cc:e9:1d:50:55:ba:b2:2f:8f:ae:d2:69:a2:
         6f:da:23:49:10:27:87:2a:be:d3:d8:eb:be:68:2d:b9:3e:4f:
         83:1c:ad:73:1d:94:4b:8a:b3:9e:b1:a0:01:81:d9:e4:86:09:
         38:0c:e8:fb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt7Ifj66cwQwMke9IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm
M2E1MB4XDTI1MTAxMTAxMDAzMFoXDTI2MDEwOTAyMDAzMFowLzEtMCsGA1UEAxMk
NWU1MThjMGUtMjNhNi00YTRkLWExZjMtYzhjZGU0ZjMyZjdjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhidAufHf7JaOLN2f5hZahElAhU84Zj/FmCsA
FF8AMYYaXEOX+CGmUPo7PZan2Wdu57CfGX9Z+AraDw2pDXHm72JF5ke6/0H2O3OR
RNW0SO9OXc8jf6nAJPW1Zt8mQlglLPXa9yRvACw1ymiS2OtHH3yKWrh5cFWVYa4H
RZy+tRBSjeZDcum67DpNMaFlh0qVGAI0v2FBHtmeASf/C78vaEtXrIDCW3XZC5+V
WOGhdXOHkGXHU5RQKDSB8yZqbqTy49kXW8J5opFECRg1gDUnat8hsjE5leS0egFN
Egr+MADksCjRtwKJkYvxRWaQjvRFyUJJXYFH8luTvFCvqi828QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE0eNwWyvLUgBBvBrLWMZS8vndZlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy
MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvYWFiYzlhYzAtYTI4ZS0z
ZjEzLTk5ZjQtYThjZmE4MjM2MDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj
NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh
ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj
NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSg7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK0h+5heTeLHfY4xCcUDZwbue/EUAxUtbuDOrW/OUl8zpv15D4wX2jZB
N9vRecw5Y3Qkkbm6cjDRJmPQRtrnPKBIaX4kCCPtQJiiFmnjzqtU2OhdGe9/YgUw
0ORO1Bo7nR27dJ3TrNEcCdLxxDiFyiszYaG3UtrFWcQNMixtLTm+LddBQfqvwVro
SZDY6ChQKMaTrIWuyAXK7XNnLGgEm7UHVcO6914pGEVZg1XAvjLFfqk/SVHKVJeQ
XNjViE1uJAYVvYSLP2huN573zOkdUFW6si+PrtJpom/aI0kQJ4cqvtPY675oLbk+
T4McrXMdlEuKs56xoAGB2eSGCTgM6Ps=
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:22:57 2025 by rpki-client