Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/9c4044e4-6285-3780-a83b-902e17b7a4f3.roa
File:                     9c4044e4-6285-3780-a83b-902e17b7a4f3.roa (raw, json)
Hash identifier:          hnoGbDoGU42D0XuDRwgSBrehDqPDhx5QjIhuF6KkcFo=
Subject key identifier:   F9:C8:53:0C:82:1D:16:6B:C1:37:C5:E3:BA:3D:02:45:03:97:34:66
Certificate issuer:       /CN=fdea7099-d2e5-45e1-8c1e-a8206f549539
Certificate serial:       010D0C9F4328584B92DCDD454296B291FF4A5FF0
Authority key identifier: 53:19:5B:43:E3:45:6A:E0:13:B2:4D:A8:F8:55:36:67:FC:01:F5:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/9c4044e4-6285-3780-a83b-902e17b7a4f3.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     16509
IP address blocks:        205.201.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/fdea7099-d2e5-45e1-8c1e-a8206f549539.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/fdea7099-d2e5-45e1-8c1e-a8206f549539.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dc:dd:45:42:96:b2:91:ff:4a:5f:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdea7099-d2e5-45e1-8c1e-a8206f549539
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=4038b3bf-95e8-4e96-9bfb-5fdee3c93e09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2a:c4:38:06:64:77:b1:0e:6c:fb:34:e3:e5:
                    6e:55:69:d0:55:be:f7:bb:22:2e:25:bf:ff:6c:c1:
                    08:fa:c5:d3:2e:c3:fb:b9:69:33:dc:50:51:9a:ee:
                    e8:32:8a:c6:56:53:1e:cb:73:08:84:9f:2d:e4:cd:
                    a1:1a:52:f7:54:79:f3:62:8c:4a:41:81:18:0e:32:
                    77:8a:6b:6a:9e:fd:50:43:76:65:dc:3e:32:ad:2f:
                    9e:f2:a4:7b:d8:d8:9c:84:84:61:cb:24:a2:2d:16:
                    e1:21:32:c4:62:f7:e0:1a:64:64:3f:04:f0:5a:ca:
                    b0:c3:24:70:8a:4e:aa:19:2c:76:5f:3d:5b:7e:85:
                    92:b8:3d:12:2a:a1:6f:14:b2:93:ff:37:df:c7:07:
                    6a:f0:53:15:c7:04:50:85:ef:d8:1b:b6:7d:78:3c:
                    1e:5f:ef:6f:32:41:db:ee:6d:65:00:f1:9c:50:4d:
                    9f:0b:0b:cc:a9:44:e6:a3:1b:02:ec:35:2d:b8:7b:
                    88:96:ae:78:5b:7e:3b:11:e9:7e:dc:06:c4:1b:16:
                    1b:a6:e7:2a:66:6d:c2:a2:db:76:04:73:66:e9:dd:
                    80:bb:3d:24:d2:de:89:cb:c5:50:7f:e7:96:3b:48:
                    f6:84:ac:df:1e:74:5a:ef:c0:60:0d:d6:1a:67:22:
                    85:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:C8:53:0C:82:1D:16:6B:C1:37:C5:E3:BA:3D:02:45:03:97:34:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/9c4044e4-6285-3780-a83b-902e17b7a4f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/fdea7099-d2e5-45e1-8c1e-a8206f549539.crl

            X509v3 Authority Key Identifier:
                keyid:53:19:5B:43:E3:45:6A:E0:13:B2:4D:A8:F8:55:36:67:FC:01:F5:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.201.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:f6:4e:cc:51:8d:a6:ce:99:4d:aa:e6:cd:97:cf:20:98:a3:
         14:50:be:e6:ef:6a:7e:59:ab:41:59:f6:40:35:24:2c:45:69:
         95:c2:fa:95:24:61:84:37:62:d8:2a:4b:f6:15:19:30:e7:9d:
         b3:c8:39:38:6d:37:85:77:bc:78:f7:56:c8:e9:7b:5c:e1:24:
         47:fd:db:97:7a:0a:b9:ed:4d:e4:3d:ee:94:0c:88:2d:0f:87:
         b6:82:55:09:16:7e:8b:90:3f:d3:4b:f1:3b:8c:05:1a:64:b0:
         a0:c6:96:f3:7e:8d:ce:05:d9:54:ae:02:bb:b9:2c:ed:8d:55:
         81:46:f2:05:43:81:67:95:14:42:9d:18:05:c7:f3:d6:63:bd:
         23:50:52:19:93:a9:1e:28:7c:aa:4e:e0:0f:c4:aa:c8:da:de:
         ab:9f:b6:83:27:66:7b:c5:ff:82:ec:b9:f2:3b:98:e5:ed:e6:
         66:b6:43:d9:83:b6:81:c7:42:75:dd:5e:ce:4c:b2:c3:a5:ef:
         44:de:b7:0c:79:00:bf:fa:00:5b:95:02:90:64:ee:3d:3c:1d:
         cf:ab:45:99:f2:41:9b:fd:31:5d:2e:95:af:fe:c9:77:85:79:
         83:b5:06:da:30:bd:e7:cf:43:b5:10:6d:00:e6:37:f7:12:c3:
         b2:f2:27:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:47:16 2025 by rpki-client