Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f51fd4e1-1364-3313-a755-24c34a08407c.roa
File:                     f51fd4e1-1364-3313-a755-24c34a08407c.roa (raw, json)
Hash identifier:          1eM0JlwHqY//2SLgkqLKeUS+mIywCz6/QlNX0GJX4B8=
Subject key identifier:   F2:2D:D4:15:47:18:36:DA:E4:BD:CD:B2:BF:25:FD:2C:08:44:E4:55
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B3DB6F526DCB0CB56FA4D73E0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f51fd4e1-1364-3313-a755-24c34a08407c.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     63949
IP address blocks:        45.33.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b6:f5:26:dc:b0:cb:56:fa:4d:73:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=6a66f925-516c-4e93-8d4a-831cf0b00978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:13:49:7e:cc:37:50:81:7c:1c:23:e3:6b:29:
                    e4:29:f9:e5:a2:7b:d1:8e:5c:8b:2f:f1:19:12:e3:
                    98:58:03:6d:f0:c2:43:9d:4b:91:cc:be:c0:15:1c:
                    bd:87:ea:a6:61:31:92:45:b1:88:1d:e2:4e:61:0a:
                    fc:d6:3c:49:97:32:e0:f5:17:49:bd:44:88:33:ac:
                    7f:97:97:85:29:b9:ec:0d:48:1a:24:16:06:ec:f2:
                    3d:79:65:db:cc:cb:6e:55:29:33:f5:b6:4b:bc:84:
                    50:b4:03:be:88:9a:a8:3d:3b:12:1c:a7:f0:e3:39:
                    d2:a4:2b:77:8f:8e:5e:ed:5c:6d:fb:f9:ec:77:92:
                    f2:20:bb:aa:f1:51:36:88:3c:80:af:61:0d:65:05:
                    36:71:c3:14:7c:44:85:07:83:eb:a3:9f:c6:77:a3:
                    c6:f4:e3:18:c3:57:8f:8e:cd:f4:a6:cf:fa:cb:74:
                    12:06:91:34:6e:c7:c8:40:87:13:70:a5:c2:28:15:
                    f7:83:25:a8:a0:4c:f7:e2:cb:a7:6d:f2:42:88:cf:
                    88:f5:d2:45:22:a3:40:af:c8:5a:03:6c:2d:92:c4:
                    5c:ed:2e:f8:e7:b5:46:a3:48:9f:ef:9e:e7:d6:18:
                    28:3f:96:f5:dd:ef:b5:7e:ca:3c:ae:14:9e:ad:47:
                    61:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:2D:D4:15:47:18:36:DA:E4:BD:CD:B2:BF:25:FD:2C:08:44:E4:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f51fd4e1-1364-3313-a755-24c34a08407c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.33.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:c6:c8:7c:5c:cc:3a:b2:1a:db:58:73:91:15:f2:5b:92:cd:
         e5:be:a0:7c:80:3c:36:0f:0a:d2:69:56:fe:69:0d:40:e6:b2:
         2d:d7:0a:49:15:b2:3b:c2:6b:ea:dd:37:b5:68:78:93:10:29:
         91:84:7c:52:ff:27:f0:69:fc:d6:85:43:2e:0a:f5:a3:83:dd:
         ee:ae:8b:d8:9e:72:23:64:e7:09:dd:dd:ba:3f:d7:0f:cf:f4:
         31:76:81:f8:c7:b7:76:7d:55:f8:da:ef:ac:ce:e4:9d:1c:58:
         f3:d9:63:d9:36:24:60:8c:f1:34:50:1b:09:f7:40:6c:fc:90:
         97:68:be:58:35:93:ee:b3:fc:a4:c0:b1:64:14:40:9d:ec:df:
         1f:83:9e:ea:bd:2a:7f:0a:5e:f4:b4:e5:df:1f:f2:54:cb:e2:
         60:36:4a:7b:50:aa:6b:9c:82:7b:c4:10:88:32:e3:1d:4d:2c:
         dc:bb:60:19:07:66:0f:2f:7d:cb:d7:21:91:bb:03:71:91:33:
         8b:62:3c:79:fd:66:2b:16:8c:a2:3f:7d:eb:1f:c0:a1:3d:58:
         ca:a6:81:ad:ed:f6:5d:7c:33:47:fe:93:3e:60:2c:67:a9:97:
         1e:fe:9b:a0:f5:42:ac:a6:99:0b:c1:59:e6:97:af:c5:a7:5f:
         ae:6b:25:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:18:28 2025 by rpki-client