Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/ceb06be8-602c-3b37-8ee5-ecc299990815.roa
File:                     ceb06be8-602c-3b37-8ee5-ecc299990815.roa (raw, json)
Hash identifier:          AabT/XWh3D85mwZPNImi0s+VqjVzlhXMurSRQMRZm/o=
Subject key identifier:   30:EC:56:D9:46:DD:12:FE:78:D6:3D:56:33:C3:07:95:1B:7C:43:06
Certificate issuer:       /CN=52fbdac8-20c0-4da4-8654-27b4bf592930
Certificate serial:       010D0C9F4328584B5DD1EDA483242E3D86D398C0
Authority key identifier: 83:F5:A6:59:FF:1E:96:96:C8:E5:B4:B9:DF:F6:3D:37:29:30:A4:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/ceb06be8-602c-3b37-8ee5-ecc299990815.roa
Signing time:             Tue 30 Sep 2025 13:00:40 +0000
ROA not before:           Tue 30 Sep 2025 13:00:40 +0000
ROA not after:            Mon 29 Dec 2025 14:00:40 +0000
asID:                     394491
IP address blocks:        45.45.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/52fbdac8-20c0-4da4-8654-27b4bf592930.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/52fbdac8-20c0-4da4-8654-27b4bf592930.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5d:d1:ed:a4:83:24:2e:3d:86:d3:98:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52fbdac8-20c0-4da4-8654-27b4bf592930
        Validity
            Not Before: Sep 30 13:00:40 2025 GMT
            Not After : Dec 29 14:00:40 2025 GMT
        Subject: CN=a3cf9671-4a72-47bd-a952-889a0d88cf9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a2:54:99:32:42:6c:90:51:4e:ce:0f:f5:10:
                    3c:d9:eb:3a:06:5d:16:b1:d6:27:32:ba:7c:44:30:
                    32:eb:d6:fe:4a:6f:e9:dc:81:82:4b:9b:da:15:6d:
                    98:10:c3:e7:24:0a:28:e7:16:73:3e:2d:96:d9:35:
                    67:d6:c3:32:5c:68:19:1a:93:c8:a8:55:6c:ea:cf:
                    b5:6e:fb:08:3a:1f:1f:c5:77:d6:3c:0a:c5:50:56:
                    69:e1:82:5e:3a:ba:19:52:91:c6:8b:4f:f8:bf:c6:
                    f5:92:e6:82:fc:2e:f2:49:3a:76:f6:61:aa:56:12:
                    0d:e1:eb:7d:28:56:a8:7e:93:bd:15:7a:3b:72:c0:
                    c9:80:1b:71:89:fd:c3:14:f9:e8:de:70:08:93:37:
                    2b:a6:59:5d:58:08:0d:14:22:b7:67:74:5c:38:e6:
                    7e:57:03:ff:1c:cc:33:cd:69:05:fb:5d:e7:ca:3e:
                    8d:80:eb:09:20:b7:81:cf:6e:04:fc:0e:3d:4f:be:
                    59:a7:c1:2e:36:4f:5c:8f:4a:1a:f4:f6:08:37:24:
                    ae:c6:fc:64:96:2f:1e:10:c8:f8:c1:0e:33:2f:3c:
                    1f:cc:04:19:c1:ba:8a:2b:5a:90:1b:ec:c1:b1:5f:
                    ba:fc:7d:60:02:4e:d5:d3:49:14:39:5f:cc:ba:6a:
                    37:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:EC:56:D9:46:DD:12:FE:78:D6:3D:56:33:C3:07:95:1B:7C:43:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/ceb06be8-602c-3b37-8ee5-ecc299990815.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/52fbdac8-20c0-4da4-8654-27b4bf592930.crl

            X509v3 Authority Key Identifier:
                keyid:83:F5:A6:59:FF:1E:96:96:C8:E5:B4:B9:DF:F6:3D:37:29:30:A4:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:3c:12:4e:8e:20:b5:c0:41:8c:6a:6d:1a:d2:76:c5:87:24:
         de:1f:3c:8a:73:b9:81:09:c9:06:ca:85:dd:48:83:2e:0b:77:
         0a:0d:33:64:63:d8:2c:a7:0d:85:d9:a5:4b:a1:c5:cd:ae:9f:
         ea:a1:04:e8:9b:c0:35:02:e2:4b:20:06:e3:94:eb:09:a5:4d:
         18:18:6f:ca:1d:4b:9c:40:d4:30:4a:54:64:c1:91:30:38:01:
         a5:c5:55:d8:82:72:df:a1:44:70:c6:64:89:21:ba:d1:03:e6:
         16:79:b4:65:4b:d2:c8:07:d1:b3:03:ab:91:7b:a5:b9:e7:19:
         e6:ac:ce:c5:9b:07:2e:11:d9:ba:93:8c:71:f1:63:7c:cb:5f:
         99:a2:c8:6b:53:d8:9c:b4:86:6a:fa:bf:e5:b6:07:29:ec:28:
         29:d4:42:36:ea:58:d8:5d:c3:7a:2e:96:f3:98:70:fa:7a:2a:
         6f:9d:bb:57:f7:21:11:2b:c5:7a:22:b5:21:72:dc:16:39:1b:
         31:3f:62:05:0b:33:46:0c:f8:e0:e0:ec:f2:82:71:ae:e6:47:
         04:fa:c0:87:3b:b3:a1:a4:30:a0:bb:46:64:50:bc:6f:db:f2:
         bf:7c:f2:8d:4b:9b:2f:95:22:43:bc:3c:5b:71:28:4d:3a:99:
         4b:5c:9e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:51:41 2025 by rpki-client