Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/836c6d6c-b014-3b85-bedd-f5a836704db0.roa
File:                     836c6d6c-b014-3b85-bedd-f5a836704db0.roa (raw, json)
Hash identifier:          +cnHC2OTZsuvcoh5yy8Zn8CA7lBTYUgF4ISG0KH50VI=
Subject key identifier:   73:A5:FD:B2:98:44:87:6A:21:FB:87:50:2B:5A:66:BC:B3:51:A9:04
Certificate issuer:       /CN=a521f5ee-89d2-4088-abb9-f69291655e39
Certificate serial:       010D0C9F4328584AE4611D93DB45A4F6EF24B600
Authority key identifier: 14:EE:0D:BC:78:58:6F:49:6A:4F:7C:2E:30:4A:4E:11:A9:FE:9B:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/836c6d6c-b014-3b85-bedd-f5a836704db0.roa
Signing time:             Mon 18 Aug 2025 01:00:33 +0000
ROA not before:           Mon 18 Aug 2025 01:00:33 +0000
ROA not after:            Sun 16 Nov 2025 02:00:33 +0000
asID:                     6233
IP address blocks:        45.62.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e4:61:1d:93:db:45:a4:f6:ef:24:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a521f5ee-89d2-4088-abb9-f69291655e39
        Validity
            Not Before: Aug 18 01:00:33 2025 GMT
            Not After : Nov 16 02:00:33 2025 GMT
        Subject: CN=9fef3815-f7bf-4d33-a9c7-451696611384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4d:e4:c1:44:80:ef:f0:c8:8e:ef:21:5f:27:
                    b1:c4:f7:49:4d:ef:86:ea:72:8b:d7:f4:46:c1:05:
                    66:d1:d6:fa:90:b3:8d:46:ca:10:47:ef:03:5f:2d:
                    40:d6:97:c4:9b:27:88:53:da:3e:2b:23:e5:54:30:
                    12:35:73:b0:99:70:52:82:ba:a7:84:ff:2a:e3:d3:
                    89:aa:1e:b0:8a:4b:a1:83:86:93:1b:f3:7a:f4:0b:
                    90:eb:ab:07:0a:96:8b:9b:7a:b9:80:14:10:c2:48:
                    2f:16:ae:11:70:58:76:27:4c:3c:ab:86:d5:d5:41:
                    87:4d:d9:ab:c9:1a:04:d5:99:9d:6d:89:18:e7:8a:
                    18:19:b1:80:00:9c:f2:54:4a:61:a4:3b:11:1d:58:
                    e9:e2:5a:6f:5f:70:68:c2:3d:18:23:4a:b6:ed:86:
                    c3:6b:f8:fd:6f:b7:96:01:11:2c:f6:cc:85:a3:68:
                    55:77:e8:32:0b:35:f6:32:a6:d3:8e:ae:9b:61:be:
                    84:f1:49:37:a4:0e:21:66:6c:a1:ff:2a:3f:6e:ee:
                    70:0b:e0:e2:92:86:cd:01:f2:e9:68:1f:7f:bc:53:
                    3f:f1:56:4d:7f:21:a7:75:86:a2:3b:d4:8f:c5:0c:
                    85:3e:52:79:56:e8:1d:85:a0:fc:a5:6c:e5:6b:e7:
                    71:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:A5:FD:B2:98:44:87:6A:21:FB:87:50:2B:5A:66:BC:B3:51:A9:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/836c6d6c-b014-3b85-bedd-f5a836704db0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.crl

            X509v3 Authority Key Identifier:
                keyid:14:EE:0D:BC:78:58:6F:49:6A:4F:7C:2E:30:4A:4E:11:A9:FE:9B:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.62.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:c2:37:f7:03:cb:64:9a:72:fa:c9:d4:b1:86:61:5c:95:e9:
         d0:78:bb:cd:b2:76:b0:cf:5f:64:fc:7f:e7:eb:d8:7a:ce:d0:
         7f:26:2b:79:b1:5d:3e:3b:db:e6:ba:9f:11:eb:2e:7c:4e:29:
         63:67:9f:1f:3a:f9:a6:51:17:10:e8:fc:db:e5:3d:24:ff:7c:
         f3:68:41:72:fb:35:53:a0:51:59:84:cb:68:79:45:d9:38:ab:
         4f:96:d0:06:e9:69:a8:4d:a2:f1:ca:0e:3f:5f:ce:61:75:67:
         90:a8:5b:5b:ec:f2:8f:32:52:fe:2d:d5:f7:49:5a:01:ba:7c:
         8d:60:1e:3a:24:cd:06:35:9c:7a:b3:bf:16:ba:93:a5:e6:0a:
         16:24:9f:de:35:94:3e:6d:dd:b2:2e:b3:4f:b8:b0:04:4e:3f:
         90:6a:03:24:e9:b1:5c:aa:b7:ec:70:45:fc:b6:68:9d:ac:f8:
         b8:c9:45:d1:8e:9c:cd:65:70:a5:c1:d1:2d:8d:22:34:81:8d:
         e8:c3:c2:23:5d:b1:c0:8d:cf:15:7b:22:b8:53:65:eb:e4:2d:
         6d:53:d9:18:72:9f:26:cd:02:c6:8d:f7:b7:1b:cc:02:60:d7:
         f7:06:69:9e:cb:66:b1:6b:de:0e:48:12:fc:16:b1:d0:26:11:
         52:15:37:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:18:35 2025 by rpki-client