Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494/56a7af7e-5fbb-3c79-94e5-7c75f99b1ed0.roa
File:                     56a7af7e-5fbb-3c79-94e5-7c75f99b1ed0.roa (raw, json)
Hash identifier:          Jf9lKVa941XY81Cc4kCPAiqlUdGt3wvS3wwRMTqgo/I=
Subject key identifier:   5D:6E:A1:71:73:B5:CA:14:C2:F4:01:16:07:E5:52:71:4C:E0:42:86
Certificate issuer:       /CN=e9e262d0-3a64-402e-81e7-5b0829596494
Certificate serial:       010D0C9F4328584AE624509B27485B78AB9B0E00
Authority key identifier: D2:1C:79:BE:61:34:D6:A4:48:63:EB:DD:04:A5:92:67:EB:E8:17:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494/56a7af7e-5fbb-3c79-94e5-7c75f99b1ed0.roa
Signing time:             Mon 18 Aug 2025 16:09:51 +0000
ROA not before:           Mon 18 Aug 2025 16:09:51 +0000
ROA not after:            Sun 16 Nov 2025 17:09:51 +0000
asID:                     9304
IP address blocks:        45.45.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494/e9e262d0-3a64-402e-81e7-5b0829596494.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494/e9e262d0-3a64-402e-81e7-5b0829596494.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e6:24:50:9b:27:48:5b:78:ab:9b:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9e262d0-3a64-402e-81e7-5b0829596494
        Validity
            Not Before: Aug 18 16:09:51 2025 GMT
            Not After : Nov 16 17:09:51 2025 GMT
        Subject: CN=9659c9c7-fbce-498e-9f3f-ca98bb394242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fe:76:05:d8:28:9f:2c:e9:2a:21:8a:dd:ac:
                    cd:8d:87:aa:34:c7:86:36:c7:60:ca:7c:06:8a:f9:
                    cf:4e:48:ce:b6:42:4a:3d:83:a4:5d:2c:69:91:9b:
                    29:67:82:c2:e6:79:e6:45:61:47:34:09:d1:b1:a2:
                    22:1a:75:fb:6a:b8:f0:a5:3c:51:94:37:33:2c:13:
                    3a:17:28:20:ab:d8:91:1f:db:f1:9e:44:da:42:9f:
                    f7:92:d7:68:31:70:cd:3d:4f:9e:74:5c:78:b7:cb:
                    d9:d2:5c:2a:b5:f6:e7:7d:24:de:51:7e:ca:29:e4:
                    58:21:9d:26:cb:c3:fc:87:99:a4:31:54:8d:78:d2:
                    eb:d0:0f:0b:66:00:fb:9a:80:c1:3c:f6:42:b6:83:
                    7c:ba:0e:0c:8d:26:30:a8:3c:37:0c:4d:6a:7e:3c:
                    e3:9b:15:95:ba:4e:e5:aa:bb:e9:1a:f9:d6:95:03:
                    6b:df:5b:bf:a9:0a:71:cb:b4:3c:33:55:2c:cf:2a:
                    7b:0a:06:76:20:31:55:42:d2:5f:dc:16:e6:95:c9:
                    f0:e1:82:31:29:d8:b2:e5:fd:96:47:e9:f1:03:bc:
                    90:98:38:93:ad:63:23:78:aa:d2:47:19:fe:d3:ba:
                    8f:08:2c:89:fa:ed:35:c4:78:7b:c5:24:ea:77:da:
                    8b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:6E:A1:71:73:B5:CA:14:C2:F4:01:16:07:E5:52:71:4C:E0:42:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494/56a7af7e-5fbb-3c79-94e5-7c75f99b1ed0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494/e9e262d0-3a64-402e-81e7-5b0829596494.crl

            X509v3 Authority Key Identifier:
                keyid:D2:1C:79:BE:61:34:D6:A4:48:63:EB:DD:04:A5:92:67:EB:E8:17:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:82:26:38:0e:6a:1e:ac:d9:5f:e0:1d:4d:bb:4f:23:f5:97:
         4f:90:2f:de:1c:88:c1:f7:d3:27:c0:fc:0b:41:a4:f0:8a:ea:
         a3:9d:1a:5b:4f:e4:42:3c:2d:ee:12:34:4a:c4:c9:8d:1f:4f:
         0c:2a:a0:dd:8c:89:ca:31:57:83:51:3d:8d:25:5e:93:78:34:
         e6:b1:c4:d7:28:4e:09:83:ed:e0:fa:12:19:ad:79:0f:4f:61:
         14:71:16:2d:fa:a0:76:0d:52:6c:29:3e:8a:de:93:9d:93:98:
         8c:7e:fb:80:05:b8:32:0f:0e:15:d0:07:1b:1f:9b:67:6f:fd:
         ca:d1:6f:8c:5c:9a:b5:b5:92:c8:f4:21:15:9a:14:97:c0:0e:
         48:b7:ad:23:3c:1b:0b:a5:0f:88:59:13:f0:fe:55:56:f7:92:
         ff:f5:c6:31:2e:ab:af:07:04:69:8b:88:e4:3e:f0:7e:2b:d1:
         5d:70:49:04:d4:d2:ae:28:12:67:e3:76:96:09:82:dd:5c:67:
         53:18:a0:df:4e:38:dc:fb:79:e6:6a:a1:f7:1a:62:0d:aa:30:
         07:e1:3b:44:d1:24:d6:30:c0:0f:d1:21:88:f8:d6:7a:e2:b7:
         76:92:f2:f7:50:88:8b:a4:75:85:83:cb:50:09:ef:aa:5c:24:
         c0:90:68:58
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErmJFCbJ0hbeKubDgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTllMjYyZDAtM2E2NC00MDJlLTgxZTctNWIwODI5NTk2
NDk0MB4XDTI1MDgxODE2MDk1MVoXDTI1MTExNjE3MDk1MVowLzEtMCsGA1UEAxMk
OTY1OWM5YzctZmJjZS00OThlLTlmM2YtY2E5OGJiMzk0MjQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/52BdgonyzpKiGK3azNjYeqNMeGNsdgynwG
ivnPTkjOtkJKPYOkXSxpkZspZ4LC5nnmRWFHNAnRsaIiGnX7arjwpTxRlDczLBM6
Fyggq9iRH9vxnkTaQp/3ktdoMXDNPU+edFx4t8vZ0lwqtfbnfSTeUX7KKeRYIZ0m
y8P8h5mkMVSNeNLr0A8LZgD7moDBPPZCtoN8ug4MjSYwqDw3DE1qfjzjmxWVuk7l
qrvpGvnWlQNr31u/qQpxy7Q8M1Uszyp7CgZ2IDFVQtJf3Bbmlcnw4YIxKdiy5f2W
R+nxA7yQmDiTrWMjeKrSRxn+07qPCCyJ+u01xHh7xSTqd9qLoQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF1uoXFztcoUwvQBFgflUnFM4EKGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lOWUy
NjJkMC0zYTY0LTQwMmUtODFlNy01YjA4Mjk1OTY0OTQvNTZhN2FmN2UtNWZiYi0z
Yzc5LTk0ZTUtN2M3NWY5OWIxZWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTllMjYyZDAtM2E2NC00MDJlLTgx
ZTctNWIwODI5NTk2NDk0L2U5ZTI2MmQwLTNhNjQtNDAyZS04MWU3LTViMDgyOTU5
NjQ5NC5jcmwwHwYDVR0jBBgwFoAU0hx5vmE01qRIY+vdBKWSZ+voF7AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lOWUyNjJkMC0zYTY0LTQwMmUtODFlNy01YjA4
Mjk1OTY0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALS3RMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHKCJjgOah6s2V/gHU27TyP1l0+QL94ciMH30yfA/AtBpPCK6qOdGltP
5EI8Le4SNErEyY0fTwwqoN2MicoxV4NRPY0lXpN4NOaxxNcoTgmD7eD6EhmteQ9P
YRRxFi36oHYNUmwpPorek52TmIx++4AFuDIPDhXQBxsfm2dv/crRb4xcmrW1ksj0
IRWaFJfADki3rSM8GwulD4hZE/D+VVb3kv/1xjEuq68HBGmLiOQ+8H4r0V1wSQTU
0q4oEmfjdpYJgt1cZ1MYoN9OONz7eeZqofcaYg2qMAfhO0TRJNYwwA/RIYj41nri
t3aS8vdQiIukdYWDy1AJ76pcJMCQaFg=
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:06:24 2025 by rpki-client