Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/70223726-522b-3882-97c5-dbf180615c24.roa
File:                     70223726-522b-3882-97c5-dbf180615c24.roa (raw, json)
Hash identifier:          rmCg3mHJcpElU3lrPl2dywm2/009MxVqxIHDHrAFMp4=
Subject key identifier:   37:C5:BF:CA:6E:FF:5A:30:DA:50:6F:1B:D8:EB:41:77:AB:81:A1:1E
Certificate issuer:       /CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
Certificate serial:       010D0C9F4328584B1C36B75BC6A8F48EB97A5240
Authority key identifier: 68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/70223726-522b-3882-97c5-dbf180615c24.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     399804
IP address blocks:        45.59.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:b7:5b:c6:a8:f4:8e:b9:7a:52:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=b7bcbbef-45b3-4769-9e5e-753d9055fcd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:15:1b:ae:0b:f8:c5:0d:47:e5:c9:62:8a:0a:
                    97:47:e4:41:84:c1:d5:c9:00:27:1f:39:a9:7c:98:
                    c3:cb:8f:09:b3:e4:77:b4:e5:a4:55:a6:af:42:17:
                    74:97:fe:42:39:c4:f0:ae:8a:b5:b6:e6:6c:bb:e9:
                    9a:08:1c:3f:5a:d2:1f:b8:16:fd:c6:e0:a9:04:d9:
                    9f:53:5b:bf:7b:f5:c0:06:7a:c1:f5:f0:ac:79:5b:
                    6f:3f:d6:33:1f:79:b3:4a:ac:0c:64:fe:db:00:d5:
                    77:aa:e6:48:19:33:52:51:5b:6f:ac:91:54:ad:ea:
                    76:34:df:65:10:10:8e:ab:68:3e:2d:d6:7f:e0:39:
                    dc:73:78:c7:46:ad:36:55:ab:df:ad:68:04:34:b2:
                    cf:57:df:72:83:87:a4:80:2b:7b:60:f4:d8:da:74:
                    37:a0:4b:7d:77:22:83:e5:fd:87:f7:cd:c3:6a:e5:
                    24:36:bf:29:9a:b8:ba:cc:bd:e0:5c:1c:65:81:7a:
                    d7:2c:25:d9:4f:0a:ad:07:0c:8f:8e:d7:51:48:40:
                    12:a3:18:ec:7c:5d:f4:d4:ad:57:bf:0e:f2:99:eb:
                    e3:32:a7:a0:93:91:95:6b:83:84:f7:18:62:9d:56:
                    5a:59:25:fe:a6:74:f0:b5:df:92:19:6d:50:aa:c0:
                    75:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:C5:BF:CA:6E:FF:5A:30:DA:50:6F:1B:D8:EB:41:77:AB:81:A1:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/70223726-522b-3882-97c5-dbf180615c24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl

            X509v3 Authority Key Identifier:
                keyid:68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:3f:bc:ee:99:3b:8f:a5:3a:f8:ab:4e:f1:00:1d:cc:33:af:
         72:d4:41:89:80:89:f9:e6:fa:46:5b:14:40:da:f5:9d:93:60:
         1d:6d:f9:e0:9c:f9:c4:f3:14:5d:5d:75:cf:b7:a7:87:44:1f:
         13:79:97:21:9f:32:51:4a:6a:34:f6:83:c0:2a:ee:bd:a6:e8:
         97:a4:9d:c3:16:3a:40:95:bc:6c:b3:67:ba:fa:80:42:30:9f:
         6b:07:46:d6:db:89:e3:27:29:7c:ff:2c:4d:38:02:0b:71:66:
         81:fc:fd:ec:5e:f7:bf:43:80:df:2a:df:a8:36:8a:fc:fa:20:
         8b:cc:a5:3a:16:b0:1e:ba:58:a6:87:ec:1d:be:ab:3b:4b:4e:
         ee:02:bc:0e:48:ba:8e:ab:21:84:a2:2a:10:23:c1:82:0d:47:
         15:f9:fd:e0:25:90:b7:7d:18:72:ac:4b:74:5f:03:99:16:17:
         af:76:86:9a:c5:3f:ea:a1:b4:ad:5a:cf:15:8e:3d:35:d3:30:
         bb:02:ea:fb:70:61:ff:e1:5a:93:6b:01:dd:52:a4:1f:7c:9d:
         35:be:53:ff:0f:da:c2:58:1c:3e:21:4c:66:6b:bf:03:b6:7f:
         44:9f:ab:34:e9:2c:c4:25:2d:9c:78:e8:17:c9:de:d8:ec:00:
         81:75:13:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:21:50 2025 by rpki-client