Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494/74f6ef3b-8089-3363-b296-6a4f529647ea.roa
File:                     74f6ef3b-8089-3363-b296-6a4f529647ea.roa (raw, json)
Hash identifier:          ihGa7jrHb8nrS58hr5HxH5b7lKL+EwxkGi5N0pks//Q=
Subject key identifier:   50:67:2E:BB:7F:40:75:6F:59:73:5F:EB:7D:A4:52:31:BA:3D:C7:73
Certificate issuer:       /CN=e9e262d0-3a64-402e-81e7-5b0829596494
Certificate serial:       010D0C9F4328584AD80179F6FFD987F4F342AC00
Authority key identifier: D2:1C:79:BE:61:34:D6:A4:48:63:EB:DD:04:A5:92:67:EB:E8:17:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494/74f6ef3b-8089-3363-b296-6a4f529647ea.roa
Signing time:             Wed 13 Aug 2025 14:38:20 +0000
ROA not before:           Wed 13 Aug 2025 14:38:20 +0000
ROA not after:            Tue 11 Nov 2025 15:38:20 +0000
asID:                     401838
IP address blocks:        45.45.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494/e9e262d0-3a64-402e-81e7-5b0829596494.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494/e9e262d0-3a64-402e-81e7-5b0829596494.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d8:01:79:f6:ff:d9:87:f4:f3:42:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9e262d0-3a64-402e-81e7-5b0829596494
        Validity
            Not Before: Aug 13 14:38:20 2025 GMT
            Not After : Nov 11 15:38:20 2025 GMT
        Subject: CN=2887aa7f-ff4e-4cc8-9d61-4808fd18534f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9a:4c:11:b4:93:25:e8:31:b3:9b:2f:01:9c:
                    87:58:65:32:22:d1:f6:b8:e5:20:b6:cb:95:ec:3e:
                    a4:b2:de:3c:a6:cd:94:67:35:7d:db:e9:03:f1:1c:
                    00:15:e9:99:ec:2a:90:f4:10:a7:61:29:42:e0:9f:
                    47:c1:af:c7:96:db:b1:8a:f0:24:43:55:6b:a3:e6:
                    84:34:25:99:bf:b4:83:9e:14:c0:24:b4:4f:72:88:
                    cc:54:45:e9:98:db:72:18:ee:b1:b9:0f:07:44:78:
                    67:98:59:df:b7:c0:d7:5a:0e:4a:b3:f2:27:93:30:
                    85:c9:f9:c3:d3:c1:7c:8d:92:78:b7:23:5f:8e:a9:
                    16:97:54:99:8d:6e:c6:81:43:68:19:31:93:a2:62:
                    04:6f:2a:fa:f6:8f:bd:03:93:7b:7b:8e:0c:be:60:
                    43:22:56:4a:dc:b5:f7:74:f4:11:3f:32:ec:8e:31:
                    83:4a:1c:ec:38:1a:3b:09:9e:b5:cc:6e:7d:75:3f:
                    18:41:92:4b:a0:e8:07:df:c0:bf:97:08:e5:cc:2f:
                    ec:48:ce:ba:04:4f:10:d1:99:a9:d2:67:2c:88:94:
                    af:27:90:0c:f6:64:76:e2:5b:08:fa:b0:9e:2b:a1:
                    f3:ed:61:6d:c3:c3:f1:f4:ac:64:5f:a4:d9:a0:43:
                    75:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:67:2E:BB:7F:40:75:6F:59:73:5F:EB:7D:A4:52:31:BA:3D:C7:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494/74f6ef3b-8089-3363-b296-6a4f529647ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494/e9e262d0-3a64-402e-81e7-5b0829596494.crl

            X509v3 Authority Key Identifier:
                keyid:D2:1C:79:BE:61:34:D6:A4:48:63:EB:DD:04:A5:92:67:EB:E8:17:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:b2:ea:e4:3a:d4:a2:a4:d6:6d:6e:0a:8d:27:7b:cb:e3:7a:
         ce:1c:c6:5f:13:fe:d5:a3:e0:20:bb:1a:1c:18:cb:99:2a:ca:
         86:f4:b2:2c:35:62:bb:12:ce:63:70:03:2e:7d:b3:fd:26:24:
         d3:f2:fc:29:79:62:dd:f0:0d:bc:01:fd:3a:7c:5f:aa:29:b3:
         37:ab:e6:98:5e:77:d0:8e:fb:94:fe:e5:24:b6:2d:22:ec:25:
         ac:f6:f7:50:2f:75:71:2b:15:dd:5b:4c:1c:3a:00:4c:8f:e4:
         75:39:0d:5c:fa:31:06:4f:51:e2:8c:31:3e:ac:0c:15:55:38:
         28:74:40:53:77:cf:a0:2f:97:a6:3d:48:ff:a2:a9:fe:e2:91:
         d3:a1:33:62:0b:4a:3f:b2:b8:fb:9e:dd:1b:8b:a9:ee:02:7c:
         0b:e1:6d:31:e4:5d:23:a9:38:27:70:4a:32:6b:0e:50:42:0f:
         fe:a9:a5:f1:4b:98:97:ae:e0:7c:77:3f:6b:47:6b:d9:92:d5:
         8a:ce:f7:9e:04:a1:9e:6f:21:c8:d1:0e:ae:d4:0c:29:10:f6:
         0e:ae:61:ab:6c:6f:f9:56:bd:ba:ff:40:25:43:80:37:19:8e:
         4c:b7:bc:01:77:ef:ab:08:3d:93:06:e7:7b:e9:ff:1f:ca:f8:
         99:8c:0c:4e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErYAXn2/9mH9PNCrAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTllMjYyZDAtM2E2NC00MDJlLTgxZTctNWIwODI5NTk2
NDk0MB4XDTI1MDgxMzE0MzgyMFoXDTI1MTExMTE1MzgyMFowLzEtMCsGA1UEAxMk
Mjg4N2FhN2YtZmY0ZS00Y2M4LTlkNjEtNDgwOGZkMTg1MzRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5pMEbSTJegxs5svAZyHWGUyItH2uOUgtsuV
7D6kst48ps2UZzV92+kD8RwAFemZ7CqQ9BCnYSlC4J9Hwa/HltuxivAkQ1Vro+aE
NCWZv7SDnhTAJLRPcojMVEXpmNtyGO6xuQ8HRHhnmFnft8DXWg5Ks/InkzCFyfnD
08F8jZJ4tyNfjqkWl1SZjW7GgUNoGTGTomIEbyr69o+9A5N7e44MvmBDIlZK3LX3
dPQRPzLsjjGDShzsOBo7CZ61zG59dT8YQZJLoOgH38C/lwjlzC/sSM66BE8Q0Zmp
0mcsiJSvJ5AM9mR24lsI+rCeK6Hz7WFtw8Px9KxkX6TZoEN1HwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFBnLrt/QHVvWXNf632kUjG6PcdzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lOWUy
NjJkMC0zYTY0LTQwMmUtODFlNy01YjA4Mjk1OTY0OTQvNzRmNmVmM2ItODA4OS0z
MzYzLWIyOTYtNmE0ZjUyOTY0N2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTllMjYyZDAtM2E2NC00MDJlLTgx
ZTctNWIwODI5NTk2NDk0L2U5ZTI2MmQwLTNhNjQtNDAyZS04MWU3LTViMDgyOTU5
NjQ5NC5jcmwwHwYDVR0jBBgwFoAU0hx5vmE01qRIY+vdBKWSZ+voF7AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lOWUyNjJkMC0zYTY0LTQwMmUtODFlNy01YjA4
Mjk1OTY0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALS3QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGiy6uQ61KKk1m1uCo0ne8vjes4cxl8T/tWj4CC7GhwYy5kqyob0siw1
YrsSzmNwAy59s/0mJNPy/Cl5Yt3wDbwB/Tp8X6opszer5phed9CO+5T+5SS2LSLs
Jaz291AvdXErFd1bTBw6AEyP5HU5DVz6MQZPUeKMMT6sDBVVOCh0QFN3z6Avl6Y9
SP+iqf7ikdOhM2ILSj+yuPue3RuLqe4CfAvhbTHkXSOpOCdwSjJrDlBCD/6ppfFL
mJeu4Hx3P2tHa9mS1YrO954EoZ5vIcjRDq7UDCkQ9g6uYatsb/lWvbr/QCVDgDcZ
jky3vAF376sIPZMG53vp/x/K+JmMDE4=
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:17:15 2025 by rpki-client