Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0f24a760-0a44-48c2-ad3f-8326d01b1ac5/789a0372-176b-3537-a073-6987814c95fa.roa
File:                     789a0372-176b-3537-a073-6987814c95fa.roa (raw, json)
Hash identifier:          rghcNpdEE9pQmaQJgHyZzBb/q02Y5xMwbsqVEA28V/Y=
Subject key identifier:   E7:FE:74:A8:2E:E3:8D:11:D7:4D:20:58:02:19:6E:22:F1:14:C8:D8
Certificate issuer:       /CN=0f24a760-0a44-48c2-ad3f-8326d01b1ac5
Certificate serial:       010D0C9F4328584AD23BAB1E4F615DE3E3685580
Authority key identifier: BD:9E:60:8F:1B:CB:AC:89:03:06:00:60:52:31:09:62:40:01:E8:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0f24a760-0a44-48c2-ad3f-8326d01b1ac5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0f24a760-0a44-48c2-ad3f-8326d01b1ac5/789a0372-176b-3537-a073-6987814c95fa.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     399760
IP address blocks:        45.45.148.0/24 maxlen: 24
                          2602:fc62::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0f24a760-0a44-48c2-ad3f-8326d01b1ac5/0f24a760-0a44-48c2-ad3f-8326d01b1ac5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0f24a760-0a44-48c2-ad3f-8326d01b1ac5/0f24a760-0a44-48c2-ad3f-8326d01b1ac5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0f24a760-0a44-48c2-ad3f-8326d01b1ac5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:ab:1e:4f:61:5d:e3:e3:68:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f24a760-0a44-48c2-ad3f-8326d01b1ac5
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=70b4f6d0-37d6-4e67-9cc5-f0c0cf737d40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:32:89:70:24:5d:cc:07:9c:0c:f0:6d:dc:b1:
                    b3:27:0c:25:a6:42:a4:7a:4c:76:03:1e:cd:52:ba:
                    3c:e0:9e:49:8d:fd:9e:b8:0a:3b:b1:46:14:23:65:
                    0c:1e:49:6f:64:4b:14:7b:17:65:74:5b:6b:83:2e:
                    be:bc:82:04:d6:c9:bc:31:79:f4:d7:6f:f3:22:17:
                    62:99:1a:71:32:a9:04:a5:f9:a9:f1:be:74:6d:23:
                    7f:ca:2e:57:34:8d:c1:c4:f5:35:3f:32:16:4d:c0:
                    c8:71:23:ad:1d:5e:7f:01:d4:26:f4:46:4b:4f:06:
                    f8:3a:7e:f3:d7:5e:1f:2f:85:4b:46:a4:d6:01:02:
                    2f:8b:12:a5:f4:fd:35:2f:42:d9:7b:0a:8a:46:13:
                    76:ba:aa:54:f0:d4:10:c5:07:23:57:f3:f3:2f:9b:
                    60:d7:02:08:e3:3c:3f:5b:c3:5d:ef:22:01:c3:eb:
                    18:83:67:6b:10:d7:aa:70:b2:2f:3a:05:ce:ac:c5:
                    5e:84:f0:e3:29:9a:50:cd:d2:d6:1e:a8:eb:28:8b:
                    9a:c3:40:81:4a:a2:74:90:ab:8a:70:f2:a5:b7:75:
                    ee:cd:f4:54:d7:b9:bf:1d:ab:bd:35:aa:cb:90:c3:
                    8a:14:c9:11:76:94:a5:c4:aa:e8:bb:25:e7:d4:da:
                    db:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:FE:74:A8:2E:E3:8D:11:D7:4D:20:58:02:19:6E:22:F1:14:C8:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0f24a760-0a44-48c2-ad3f-8326d01b1ac5/789a0372-176b-3537-a073-6987814c95fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0f24a760-0a44-48c2-ad3f-8326d01b1ac5/0f24a760-0a44-48c2-ad3f-8326d01b1ac5.crl

            X509v3 Authority Key Identifier:
                keyid:BD:9E:60:8F:1B:CB:AC:89:03:06:00:60:52:31:09:62:40:01:E8:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0f24a760-0a44-48c2-ad3f-8326d01b1ac5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.148.0/24
                IPv6:
                  2602:fc62::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:5c:be:b7:6d:99:6a:bb:f6:0c:19:14:58:d5:37:a1:3c:b0:
         46:78:1a:2a:7a:57:be:49:56:5e:39:2f:bb:53:be:3c:04:06:
         89:5d:2a:25:d3:ef:ef:e4:95:ef:74:fa:a9:54:d2:d7:e6:68:
         d0:b1:53:bf:1e:09:d7:5f:f2:f8:33:e8:0b:b7:6c:af:25:8b:
         17:80:d9:2e:b9:6d:5a:85:df:e2:53:18:89:de:5e:ab:aa:ea:
         94:94:95:c9:7a:30:82:31:02:74:c9:11:5f:a1:1c:58:c2:f6:
         e8:c4:20:c3:66:70:f4:55:32:be:e0:ab:c6:62:69:3b:40:07:
         36:25:22:26:05:5e:8e:fc:2f:58:a3:5f:14:4a:0f:f5:bb:65:
         66:e7:8b:be:a1:24:90:3c:fb:e4:3d:93:68:15:7b:b6:e7:27:
         aa:ed:e5:90:59:e1:a6:62:2f:41:ce:4d:b5:74:b0:6c:ec:55:
         a5:42:92:95:df:bd:10:44:02:64:4f:a1:80:7b:86:e6:14:32:
         92:ca:c9:fc:ad:53:85:1d:ce:6a:aa:7a:7e:d6:eb:8e:69:ed:
         61:01:6d:85:0d:96:a2:6e:47:ad:3e:ad:0a:0a:bb:ec:2d:d2:
         73:ba:af:40:75:a6:08:dd:42:f8:54:69:87:05:f7:ca:8c:2a:
         b9:03:d3:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:20:59 2025 by rpki-client