Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/ef75e4f6-a3d6-3f3d-af4c-5bfcbb5104cf.roa
File:                     ef75e4f6-a3d6-3f3d-af4c-5bfcbb5104cf.roa (raw, json)
Hash identifier:          awY3Vyh8Zh4LAr30Gn6kcQo1QDtEbocWPaQu5GgmamI=
Subject key identifier:   20:99:40:29:76:EF:E2:3D:F8:13:5D:F4:28:57:49:B2:46:1A:6D:45
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F4328584B6A61E6FABF5290587D0E5480
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/ef75e4f6-a3d6-3f3d-af4c-5bfcbb5104cf.roa
Signing time:             Sun 05 Oct 2025 01:00:32 +0000
ROA not before:           Sun 05 Oct 2025 01:00:32 +0000
ROA not after:            Sat 03 Jan 2026 02:00:32 +0000
asID:                     55293
IP address blocks:        45.4.172.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6a:61:e6:fa:bf:52:90:58:7d:0e:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Oct  5 01:00:32 2025 GMT
            Not After : Jan  3 02:00:32 2026 GMT
        Subject: CN=ba1136c3-e719-4c11-a700-4d060df653ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:55:b1:88:1c:e3:47:00:04:a5:57:a4:a0:fb:
                    ce:79:7d:64:72:7d:c3:89:1e:b2:f0:c5:ec:b2:ae:
                    eb:1d:3c:8c:92:a5:be:b9:c8:d5:02:c4:18:3b:c7:
                    9b:cb:77:21:90:ef:60:86:bd:52:21:e4:d0:56:4e:
                    c7:fd:5e:47:dc:f3:38:4e:d7:38:6e:e5:fb:0a:20:
                    5d:6e:9b:8c:f5:c3:ca:49:86:4b:8b:3e:3f:c2:09:
                    ee:cc:2d:9e:7a:cd:42:44:d3:ce:14:b0:15:88:2e:
                    8e:03:78:52:08:01:f5:70:07:c9:74:f2:5b:35:19:
                    d8:11:c8:33:7a:b9:b1:46:72:d2:b1:69:c4:6c:f2:
                    1b:d5:2e:ff:02:f8:7d:d5:1c:b4:81:bf:f4:58:9a:
                    62:fc:93:9e:61:5d:bb:b4:92:30:45:77:d2:2f:ff:
                    0b:a8:fc:3e:0d:ce:ac:22:4f:77:9c:36:66:03:aa:
                    c1:ee:2f:fc:2c:ae:bc:2c:73:f5:d7:34:89:b2:ec:
                    d9:26:5f:84:7f:f9:8b:44:78:6c:4f:cd:93:c8:49:
                    c8:b7:97:e5:d2:a5:cf:f7:e3:a7:74:8d:2f:cf:67:
                    f3:6a:a6:aa:62:1a:b7:89:70:70:dd:f7:c2:5e:18:
                    7f:f5:d9:26:1f:c9:56:39:c9:d0:c9:f0:46:7c:65:
                    e1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:99:40:29:76:EF:E2:3D:F8:13:5D:F4:28:57:49:B2:46:1A:6D:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/ef75e4f6-a3d6-3f3d-af4c-5bfcbb5104cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:21:d5:87:5d:94:f2:64:f5:8c:c2:c5:b1:09:cc:1e:a0:f0:
         70:33:0d:0e:28:32:cd:78:83:60:96:24:8b:5b:e0:b6:ef:b9:
         6d:f2:df:fe:50:a0:28:4f:34:28:85:e6:b1:93:a4:e3:e9:02:
         85:5b:0e:fe:2f:e4:61:88:6d:df:d1:c4:47:51:de:34:51:7e:
         d9:09:10:ab:56:2e:20:d4:cd:5a:83:73:fa:70:3c:ae:76:e7:
         ab:42:f3:fc:4f:f6:68:b8:5d:11:95:d3:38:fa:e1:56:4d:fe:
         9f:70:fe:6c:11:a4:fb:cc:22:e4:c0:ac:41:5b:32:57:56:c1:
         4a:05:15:18:19:b8:e4:d3:e9:1e:2a:11:59:61:1b:3b:08:d5:
         85:e9:96:94:27:c4:5a:88:3a:32:ae:6b:65:47:b9:28:a5:6e:
         75:fa:e0:86:91:24:5a:5c:3e:c8:2a:ff:68:b3:72:7b:13:24:
         d7:7c:d1:ae:4c:31:b7:c1:b0:f1:60:85:e1:17:89:ec:25:38:
         e7:b3:f9:23:ca:49:1f:67:ee:43:c8:ac:d9:95:86:cd:fa:01:
         dd:2d:11:ad:59:4d:23:9a:7b:b7:94:68:f7:29:ba:eb:f4:79:
         54:75:c2:0a:0e:da:43:a2:52:15:32:1d:2d:af:43:dc:2b:7f:
         bd:7e:a7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:07:04 2025 by rpki-client