Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1dc5a428-360f-39aa-adc8-a92fdcc700a3.roa
File:                     1dc5a428-360f-39aa-adc8-a92fdcc700a3.roa (raw, json)
Hash identifier:          J5O8rUIaRjD3r6S9iaEp7KutaBFl+XFIH6K4Et9csmY=
Subject key identifier:   A5:69:19:F2:A6:CB:72:87:90:73:30:34:65:E8:3D:09:34:88:C7:6C
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584B8EACDE4144D13F4CA3F17740
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1dc5a428-360f-39aa-adc8-a92fdcc700a3.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     270564
IP address blocks:        45.40.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ac:de:41:44:d1:3f:4c:a3:f1:77:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=17b88f1f-6c5d-433b-9ab5-c4c44fe7cad1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a1:6c:50:52:1b:02:18:c1:5d:23:54:68:cc:
                    69:7b:7e:80:7b:cb:ae:ba:3b:76:af:2a:1f:90:95:
                    af:f4:1a:3a:6a:4d:2c:a4:02:ea:0d:66:a1:80:2d:
                    3e:2c:97:a5:0d:fa:63:34:76:29:1e:46:fe:96:e4:
                    43:2f:8b:35:cc:7a:2e:2b:80:5e:aa:4d:1f:1f:9f:
                    e5:a5:bd:e9:ce:7b:fd:f2:dd:ba:9b:36:1e:9c:78:
                    45:6c:5e:34:80:c9:0e:86:ac:23:e3:7a:4c:37:70:
                    fe:70:72:01:7d:bb:6f:a3:f8:a0:7f:53:d1:40:18:
                    ae:e0:1f:3d:25:bc:f4:5c:b8:b0:90:f6:38:d4:c4:
                    1e:d3:1e:ff:35:d3:eb:01:74:a1:14:55:3a:fb:f9:
                    77:71:87:39:c2:fb:26:39:9a:2b:a2:04:ef:45:87:
                    76:16:7e:04:82:93:48:63:a5:0f:60:19:71:57:08:
                    a5:0b:a6:6f:4e:ad:b1:b2:d0:91:d1:7a:69:cb:1d:
                    22:05:f6:30:46:87:89:7b:b0:56:eb:50:28:42:b2:
                    e8:e8:74:38:bf:0d:92:9f:e1:8d:18:9c:f7:a1:7d:
                    79:83:4f:09:6b:c7:df:f4:0b:1e:a2:22:17:19:fa:
                    84:36:37:bb:c4:97:b0:90:b2:ff:3b:61:97:1b:10:
                    3e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:69:19:F2:A6:CB:72:87:90:73:30:34:65:E8:3D:09:34:88:C7:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1dc5a428-360f-39aa-adc8-a92fdcc700a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.40.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:50:75:da:59:65:59:a9:32:f5:66:4f:65:de:a1:6f:44:b8:
         16:52:47:31:e7:f6:95:4f:1a:f7:fe:b8:16:a3:f6:46:58:ea:
         06:04:85:46:0f:88:8c:2c:51:e4:f0:43:70:f1:aa:a9:ef:e9:
         4e:ce:0a:47:3b:70:53:b7:58:eb:e8:12:55:bd:7b:1b:35:00:
         50:8d:d9:bf:51:bb:c1:53:e3:0a:fb:f5:0c:24:98:84:9e:0b:
         70:8d:5c:75:c3:42:69:4f:23:f1:bd:86:26:b5:50:38:f1:68:
         07:bb:ef:d9:18:2f:c6:ac:dd:58:f1:02:3a:7c:fc:d1:16:f4:
         6d:4b:30:1a:b0:7d:9f:4d:44:07:26:59:fd:5f:38:16:ea:ca:
         4c:ce:e5:58:00:f9:2b:f6:d2:d1:ee:60:1a:82:4c:54:b0:45:
         fc:6d:ef:98:98:92:3a:1b:29:40:bd:16:3d:68:ad:6f:31:e0:
         a5:f0:51:ba:47:28:d9:c2:fa:84:a0:bb:a6:f7:07:39:16:1d:
         2e:a9:bc:9e:d5:1b:97:65:fd:de:9e:85:28:99:aa:2d:0c:be:
         24:c7:1f:c1:cb:59:8c:50:71:46:87:29:22:98:98:4a:de:37:
         43:aa:1c:5c:48:03:96:af:b9:d7:3c:d9:0e:9d:06:60:92:7f:
         a7:c5:10:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:35:26 2025 by rpki-client