Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/408a0c19-0e7d-3cf4-9b9a-4d7208e232c2.roa
File:                     408a0c19-0e7d-3cf4-9b9a-4d7208e232c2.roa (raw, json)
Hash identifier:          fzZD09f6O8iwfTqaUr8Q6FOcKQe7WZg7cR+M1KxjHpE=
Subject key identifier:   FF:DA:BA:96:68:B7:BD:71:9B:05:36:69:6D:06:3F:24:87:E0:68:EB
Certificate issuer:       /CN=9f07c9e2-648c-4ca2-8784-02ac3c144538
Certificate serial:       010D0C9F4328584B87B21E2AF71B2A12AE9D6780
Authority key identifier: 64:75:EB:7C:25:7B:70:FF:79:31:BF:57:7E:7C:BA:C6:74:D1:CE:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/408a0c19-0e7d-3cf4-9b9a-4d7208e232c2.roa
Signing time:             Wed 15 Oct 2025 13:00:38 +0000
ROA not before:           Wed 15 Oct 2025 13:00:38 +0000
ROA not after:            Tue 13 Jan 2026 14:00:38 +0000
asID:                     53356
IP address blocks:        45.59.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/9f07c9e2-648c-4ca2-8784-02ac3c144538.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/9f07c9e2-648c-4ca2-8784-02ac3c144538.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:87:b2:1e:2a:f7:1b:2a:12:ae:9d:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f07c9e2-648c-4ca2-8784-02ac3c144538
        Validity
            Not Before: Oct 15 13:00:38 2025 GMT
            Not After : Jan 13 14:00:38 2026 GMT
        Subject: CN=42082e90-be57-4e84-aa54-153f595f3660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a6:7f:ef:b0:9e:21:b7:e7:a8:84:28:ff:fa:
                    51:f1:16:31:16:51:45:64:00:ab:07:d3:95:2f:9d:
                    d5:49:89:13:00:91:f5:52:14:93:36:90:7d:f7:dd:
                    cf:d4:32:cd:53:5f:7b:d5:0e:53:14:7d:19:42:ff:
                    f1:d9:b6:41:35:66:75:36:ae:fe:be:c1:86:13:e0:
                    a2:38:3e:a6:71:31:4a:aa:87:ab:24:94:d1:5f:59:
                    cf:74:16:02:2c:b2:e9:cb:b0:cc:51:be:cd:ce:6b:
                    9b:26:25:80:84:a8:db:64:96:ff:5e:c3:2b:bc:36:
                    b6:60:bc:59:44:94:06:45:66:ce:8a:69:b5:ec:5b:
                    fd:26:8a:86:70:94:18:80:45:09:fd:aa:dc:7e:be:
                    12:95:0e:16:f2:dc:db:52:69:f8:04:8a:c3:1b:f1:
                    56:07:38:7d:c1:ab:0f:88:47:fe:ac:67:50:ce:d3:
                    14:6f:72:86:93:9b:45:de:dc:ad:05:a2:02:41:51:
                    82:65:08:dc:1b:0e:30:11:00:e3:b1:44:cc:df:f1:
                    0c:ad:58:f3:c9:14:a8:51:d7:78:fc:72:30:40:d8:
                    a2:3b:ce:ca:5d:0e:3b:31:d5:5e:0a:99:82:a7:54:
                    3d:40:bc:72:bd:68:68:d5:2c:e4:31:30:89:5b:8a:
                    d9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:DA:BA:96:68:B7:BD:71:9B:05:36:69:6D:06:3F:24:87:E0:68:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/408a0c19-0e7d-3cf4-9b9a-4d7208e232c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/9f07c9e2-648c-4ca2-8784-02ac3c144538.crl

            X509v3 Authority Key Identifier:
                keyid:64:75:EB:7C:25:7B:70:FF:79:31:BF:57:7E:7C:BA:C6:74:D1:CE:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:52:ae:7a:f6:34:04:de:6f:7f:02:10:a4:c0:38:13:5f:21:
         8a:4b:59:47:67:1e:9b:d4:16:69:3a:02:4d:bd:e0:fa:ee:9f:
         a4:a0:2d:8d:f6:ab:da:29:b9:99:0b:cb:e9:f5:8a:a2:bb:43:
         e7:9b:6b:3c:d9:aa:54:d8:60:c1:ea:8d:e3:64:42:00:5f:05:
         10:e0:64:f6:75:94:b1:1d:eb:dc:03:f3:e1:20:2e:61:87:0a:
         95:48:97:04:8d:75:a2:6a:41:fe:75:d2:39:e1:11:b0:a4:b5:
         2f:da:35:2d:6a:ff:84:3e:1f:63:e3:e7:47:81:1a:1c:38:49:
         07:f4:af:18:13:bd:80:46:a3:c0:c3:98:b2:9c:ed:5c:e7:5f:
         d1:cc:40:34:70:4f:1c:c9:53:33:b4:03:61:70:c8:b9:29:24:
         24:66:06:d8:f5:21:b2:3c:9b:aa:24:f8:a4:c3:b2:4a:47:14:
         9c:35:7c:4e:08:a2:ec:34:4d:2a:e7:da:d5:7e:70:9b:c3:e1:
         79:21:2d:97:8d:79:bc:cf:e0:70:87:3e:17:c1:e7:e1:0a:9c:
         a6:7b:bd:94:39:a5:73:73:8c:3c:4e:6d:4a:d4:5e:16:f6:3a:
         ad:a7:fd:6e:2e:a8:a9:5a:4b:b1:31:76:66:9f:68:4d:38:42:
         2e:8f:7f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:29:13 2025 by rpki-client