Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/53009550-1451-3677-ae05-9e5e5e0b9c09.roa
File:                     53009550-1451-3677-ae05-9e5e5e0b9c09.roa (raw, json)
Hash identifier:          Jy6J4EKdBWDMd6o7lCxmILvEhJzVx9aBfu1R9qOwKJk=
Subject key identifier:   D9:23:A7:03:28:71:29:A5:5A:B2:2A:EF:0D:E7:D2:AA:CD:66:08:76
Certificate issuer:       /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Certificate serial:       010D0C9F4328584B6201EF600D71E868ECFF5980
Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/53009550-1451-3677-ae05-9e5e5e0b9c09.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     3257
IP address blocks:        45.56.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:01:ef:60:0d:71:e8:68:ec:ff:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=87dd35ba-9013-44c8-8faa-36e850aff412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:fd:b6:7b:07:b3:69:b8:c1:01:72:26:0b:e8:
                    5c:a1:19:70:ea:5a:19:ff:0d:b9:d9:18:21:77:7b:
                    bd:87:0a:50:8b:78:71:39:ce:a0:ae:04:fd:b3:94:
                    0a:c3:ba:94:5c:2b:d9:91:0b:b9:b5:8a:03:3e:9f:
                    c0:28:a7:a9:85:2c:aa:ac:b4:7f:c8:d7:e0:77:ee:
                    6d:39:56:ad:dc:e3:80:ee:1d:35:39:6c:8e:05:3c:
                    e8:02:25:91:53:83:43:96:77:fe:fc:f0:f6:bf:59:
                    c2:29:e4:bd:af:a0:e8:af:61:a9:ee:7b:49:38:eb:
                    2d:fd:9e:49:0f:45:a3:2b:54:50:d0:44:18:de:7c:
                    e9:ee:dc:dc:2d:c8:43:28:ea:c4:db:cd:5c:8d:e2:
                    3a:5e:9c:0d:f2:b4:ae:fd:3d:a8:5d:7e:e3:e6:26:
                    6a:08:c1:90:3d:2b:ac:bd:55:9d:3c:18:ca:3f:e6:
                    a3:e1:1c:e7:8f:6d:26:4a:03:23:76:77:57:1b:93:
                    3b:f6:dd:94:ff:89:09:81:aa:0e:0b:0e:8a:09:10:
                    ba:bf:7a:50:49:d2:1a:81:6f:e5:c2:94:40:96:df:
                    59:5b:99:8c:2e:59:9f:6b:1f:f0:64:e4:95:01:ad:
                    d7:82:8e:9f:b4:c4:ba:83:93:2f:4b:c1:a4:bc:d0:
                    ce:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:23:A7:03:28:71:29:A5:5A:B2:2A:EF:0D:E7:D2:AA:CD:66:08:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/53009550-1451-3677-ae05-9e5e5e0b9c09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl

            X509v3 Authority Key Identifier:
                keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.56.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:0a:52:e2:e1:ce:b1:fa:0d:c1:e9:12:d3:4d:c2:8f:84:47:
         40:b6:e3:6a:45:34:31:54:37:04:76:1d:b4:32:8b:24:7e:e0:
         17:0d:2a:51:00:6a:97:22:a2:dd:93:5b:e4:78:6d:95:f6:91:
         0d:a4:b3:76:29:d6:b8:95:85:d0:53:ef:40:41:c0:be:60:78:
         6f:cf:88:03:df:2b:45:d5:53:6a:fc:9d:43:73:09:15:94:a3:
         4a:56:36:ea:98:84:54:b3:9f:4b:08:9e:30:73:1b:a0:19:1f:
         06:04:6c:6d:3f:9c:fb:2b:86:52:5f:9f:84:f0:cc:58:e2:e7:
         78:4e:63:5b:ef:a9:ac:e1:d4:ce:d5:4b:61:67:66:ab:4c:68:
         6c:04:95:c9:83:66:c2:10:32:d5:67:aa:49:67:67:b0:6e:f4:
         07:cf:0e:5a:f9:bb:19:e0:76:a0:77:48:4a:02:a3:81:fb:59:
         11:6b:9a:b2:9b:11:bc:d1:0a:bc:21:cd:12:b4:c0:05:fe:36:
         9a:d0:81:1b:bb:60:04:e6:7f:c2:5b:ba:96:0d:44:07:0d:80:
         f9:d3:27:ea:b4:87:bf:4f:39:37:4f:6c:d3:08:e8:96:d1:ab:
         95:b8:ce:2b:6b:4e:8c:40:df:17:34:f6:4f:ae:e5:43:c7:4b:
         2c:a5:94:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:39:31 2025 by rpki-client