Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92/f9288161-5a04-3eb2-a7d4-9fdb78c58d1c.roa
File:                     f9288161-5a04-3eb2-a7d4-9fdb78c58d1c.roa (raw, json)
Hash identifier:          fJqUVR7Sz4XR/0bod4nyMNlYr3F8bR2ONJQg6uaJ5V8=
Subject key identifier:   59:6E:02:F6:DA:F0:C3:F4:70:07:E9:41:2F:59:E9:E0:EA:E6:4E:2E
Certificate issuer:       /CN=b05e76f8-7e37-4663-ae5f-9f03054cfe92
Certificate serial:       010D0C9F4328584AD23BAFFDB3589953FF2BB900
Authority key identifier: 34:D0:72:D6:CB:A5:9B:93:4E:96:2F:C0:50:7B:B3:F7:4A:A2:02:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92/f9288161-5a04-3eb2-a7d4-9fdb78c58d1c.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     399871
IP address blocks:        45.45.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92/b05e76f8-7e37-4663-ae5f-9f03054cfe92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92/b05e76f8-7e37-4663-ae5f-9f03054cfe92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:af:fd:b3:58:99:53:ff:2b:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b05e76f8-7e37-4663-ae5f-9f03054cfe92
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=b076c084-fa26-4ef8-8ee4-a9f2c2a6737b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:da:28:20:e9:ce:89:f9:6d:bd:a8:2e:02:c1:
                    fd:b0:34:fd:85:b9:95:e4:a9:0c:bf:9e:46:38:c4:
                    1a:fe:91:70:d5:92:f3:ef:fe:9d:a0:90:b3:8b:16:
                    c8:24:34:82:11:b1:72:18:72:ee:d5:ed:17:b2:aa:
                    3e:5a:e1:a5:9a:53:00:69:18:1b:a5:e5:64:07:f3:
                    52:36:b0:e6:81:d7:d8:8f:bf:b1:05:9f:6d:c7:94:
                    48:b8:fb:86:37:82:74:a5:95:57:a9:c6:fc:b0:53:
                    a6:f9:3b:dc:a8:03:ff:c5:2f:ee:52:f7:77:8f:22:
                    fb:98:fb:d9:c3:59:12:0d:6c:60:b2:9b:cd:50:88:
                    b7:6e:a7:d8:03:74:a9:ed:a0:5f:16:f3:17:12:56:
                    d0:9a:72:dd:2b:65:2a:1a:ee:cd:31:44:52:8d:40:
                    f8:41:92:78:3a:13:61:16:87:a6:4c:3f:7c:95:28:
                    e2:b1:54:57:70:05:b0:16:86:cc:59:0f:9a:1c:60:
                    5b:ff:1b:01:cf:bc:8a:e5:8b:6a:c1:bf:89:d8:b8:
                    4c:69:6c:04:d1:c1:07:39:45:17:ef:9b:00:4c:05:
                    57:4c:25:ba:20:07:60:73:3f:bf:05:d2:19:58:5f:
                    f4:9f:e4:09:a8:dd:46:97:ec:fa:c7:47:92:1e:91:
                    0b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:6E:02:F6:DA:F0:C3:F4:70:07:E9:41:2F:59:E9:E0:EA:E6:4E:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92/f9288161-5a04-3eb2-a7d4-9fdb78c58d1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92/b05e76f8-7e37-4663-ae5f-9f03054cfe92.crl

            X509v3 Authority Key Identifier:
                keyid:34:D0:72:D6:CB:A5:9B:93:4E:96:2F:C0:50:7B:B3:F7:4A:A2:02:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:d2:ff:a0:c3:10:02:23:e4:97:2e:6b:59:6e:cf:09:dd:12:
         4e:fa:3d:0c:02:78:82:a5:0a:9a:f8:7b:44:d0:ad:c2:44:50:
         ef:b9:5e:81:c1:12:97:f8:ad:b7:72:7b:01:b4:02:b2:67:8e:
         47:a9:57:76:31:be:57:1b:e3:c5:85:ac:ab:2c:fc:a9:b5:75:
         7b:47:ca:d7:80:1b:49:4f:a5:4f:ca:f0:4e:6a:7d:d0:08:fc:
         7a:a6:a2:d1:94:5e:6e:cf:40:f1:69:6d:63:e8:a5:fd:97:ef:
         2f:fc:d9:16:a8:da:e6:64:fb:30:9e:4f:73:15:57:fc:5d:e0:
         58:b9:d4:54:30:98:a9:29:a8:db:3a:f1:34:e5:1d:d1:92:f1:
         f0:c6:f7:cd:05:27:ed:96:b0:5e:4e:c9:9b:01:24:2e:46:80:
         f6:ed:de:ec:b1:a7:25:03:8f:22:71:7f:4c:d7:ba:cf:78:88:
         96:14:f9:2c:8f:5f:eb:32:ac:6a:e7:d1:33:fb:43:a7:45:1f:
         51:9e:05:9e:43:51:a0:a6:5c:08:1a:84:78:ba:09:c4:9a:3e:
         b1:b4:72:35:a9:51:cc:3e:18:43:e7:5f:bd:2b:2e:3b:e0:ce:
         fa:d0:8f:23:33:2c:e1:06:3c:de:f5:d1:a8:bd:2c:fa:12:a3:
         c8:fa:e1:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:52:20 2025 by rpki-client