Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/f5888c18-f7ee-3c25-a160-5cd4632d848c.roa
File:                     f5888c18-f7ee-3c25-a160-5cd4632d848c.roa (raw, json)
Hash identifier:          ubvJnPtiemAK6lvbbmbN6vu8z96HMbVzwqdtZUvFWF4=
Subject key identifier:   0D:79:10:6C:D7:5C:A8:77:67:A1:1B:17:48:46:CB:12:A0:C4:BF:EC
Certificate issuer:       /CN=45de47ca-0b52-44ab-af26-767d8a671192
Certificate serial:       010D0C9F4328584B79BCBD663C86C280ECFB4880
Authority key identifier: C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/f5888c18-f7ee-3c25-a160-5cd4632d848c.roa
Signing time:             Fri 10 Oct 2025 13:00:37 +0000
ROA not before:           Fri 10 Oct 2025 13:00:37 +0000
ROA not after:            Thu 08 Jan 2026 14:00:37 +0000
asID:                     5645
IP address blocks:        69.172.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:bc:bd:66:3c:86:c2:80:ec:fb:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45de47ca-0b52-44ab-af26-767d8a671192
        Validity
            Not Before: Oct 10 13:00:37 2025 GMT
            Not After : Jan  8 14:00:37 2026 GMT
        Subject: CN=019ad26f-d5ec-4d28-97b1-785b106b9e85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:49:b7:9d:ca:6b:a3:64:36:32:45:e3:07:56:
                    7b:86:a2:27:20:41:54:c5:0f:06:42:32:54:0f:47:
                    fe:a9:13:8e:8f:7f:0d:0d:c6:1f:f2:e4:c6:25:ac:
                    02:59:a5:99:4d:a8:bb:55:01:e5:9a:93:95:f7:a2:
                    5e:23:97:92:9a:62:79:1b:8e:81:1f:f0:83:c0:70:
                    8e:33:55:29:d5:bc:90:f3:56:d8:a8:10:2b:75:0a:
                    a0:37:ee:91:4a:06:bb:cd:26:0a:33:2d:f6:c1:8a:
                    ba:65:cb:a9:a0:23:a3:d4:12:75:5c:de:e1:60:88:
                    77:dd:98:6c:01:73:d5:35:8b:91:c6:41:67:3f:0c:
                    d1:1a:21:71:59:b5:07:ef:66:d6:89:60:a1:d6:3f:
                    fe:4f:ed:11:2a:0c:44:93:44:c1:57:d0:0d:1a:b9:
                    17:e7:48:1d:1c:3e:59:6d:b0:d0:22:4d:29:3c:3e:
                    51:71:e1:78:21:1c:ef:2c:4e:7f:24:93:8b:c5:e8:
                    e5:80:b6:f4:18:58:8c:70:c5:47:e8:ac:6d:11:d9:
                    2c:21:be:ac:ff:b5:4d:86:d0:c4:8d:49:fb:96:bc:
                    15:92:cb:00:9d:9c:b4:ba:17:5f:8c:58:81:11:6d:
                    6d:c9:ed:52:cb:16:5e:9a:bf:eb:f9:e5:f3:69:86:
                    92:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:79:10:6C:D7:5C:A8:77:67:A1:1B:17:48:46:CB:12:A0:C4:BF:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/f5888c18-f7ee-3c25-a160-5cd4632d848c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl

            X509v3 Authority Key Identifier:
                keyid:C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.172.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:a2:82:cc:99:1f:6c:e6:b5:51:6b:75:c9:dc:97:73:81:5b:
         0a:02:2f:75:6f:6b:a5:51:97:ff:c1:6b:19:a8:89:db:78:ef:
         1a:35:d7:90:03:b4:99:95:9f:16:52:cc:30:c8:46:75:eb:f7:
         06:01:93:40:45:6d:b5:dc:e9:b7:8c:20:9c:21:25:68:78:f7:
         65:41:79:92:d5:e2:5d:26:b9:fe:eb:b8:ad:1c:22:15:16:83:
         a1:ec:e1:0c:98:d9:ba:fd:65:07:a6:0d:ef:2a:35:7e:8c:fc:
         86:df:88:57:55:5f:ce:63:9f:d3:11:bb:dd:e0:b6:93:6c:ea:
         f5:25:25:c1:8a:1f:cc:0c:1c:1d:51:de:91:68:20:e9:c1:30:
         d1:19:ce:3f:ac:56:7c:e8:3c:3a:c3:eb:c6:6e:2e:b2:95:e7:
         0e:50:9e:66:52:b6:60:fc:b0:08:18:70:f2:24:4c:bc:74:ce:
         9d:2e:31:31:e1:75:42:3c:44:26:53:c5:df:05:f4:97:bc:9a:
         79:6f:2c:0a:00:13:f3:20:41:ec:6c:4c:c3:f2:5c:19:9e:52:
         9e:08:33:e1:a4:9f:87:f4:76:e0:95:36:3d:ac:18:15:30:2b:
         e4:c0:0b:ce:1f:0f:45:9a:35:db:d8:44:5f:bd:a4:aa:e4:71:
         d8:0f:cb:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:40:37 2025 by rpki-client