Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/f9874a22-9a02-398f-86a6-217e95468149.roa
File:                     f9874a22-9a02-398f-86a6-217e95468149.roa (raw, json)
Hash identifier:          slkSAvGfikvD66d+11xLhyNyGD1nMIQPicHnk97O28Y=
Subject key identifier:   32:79:BC:51:B2:BE:65:FF:79:94:9A:40:B6:F5:F0:B3:E4:AC:A5:7A
Certificate issuer:       /CN=af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3
Certificate serial:       010D0C9F4328584AD66B9A5F786B6FF352D2A380
Authority key identifier: B2:BB:D7:45:02:8D:36:D6:C2:33:7F:4D:48:8C:43:47:21:60:07:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/f9874a22-9a02-398f-86a6-217e95468149.roa
Signing time:             Wed 13 Aug 2025 01:00:32 +0000
ROA not before:           Wed 13 Aug 2025 01:00:32 +0000
ROA not after:            Tue 11 Nov 2025 02:00:32 +0000
asID:                     1011
IP address blocks:        45.45.250.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d6:6b:9a:5f:78:6b:6f:f3:52:d2:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3
        Validity
            Not Before: Aug 13 01:00:32 2025 GMT
            Not After : Nov 11 02:00:32 2025 GMT
        Subject: CN=2b6a23a5-c044-417b-ae32-d24bb118a116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:48:87:3b:ec:41:39:6f:28:20:72:40:44:c8:
                    f0:d2:25:65:15:4d:22:fa:a7:21:43:fc:32:f6:ea:
                    2b:13:2a:bc:7b:26:21:dd:e1:94:77:b3:e3:4c:db:
                    5b:b6:2a:91:4c:5c:b3:63:aa:f0:58:a0:76:e0:1d:
                    16:d4:c6:7c:d2:c3:3a:ce:10:26:55:0c:be:7b:86:
                    ce:52:ad:05:44:71:64:56:1b:19:d2:6b:f5:90:a6:
                    6e:64:c5:45:0c:6b:9b:fa:e1:5d:4a:a5:9a:51:9c:
                    51:34:90:9f:e1:fb:5c:2c:28:28:c3:bc:c4:f4:a0:
                    4a:ba:ef:55:c7:3c:7f:3e:2e:1f:cb:91:51:1e:f7:
                    67:4c:cf:3c:08:02:84:8d:10:50:13:4a:a2:8b:76:
                    d1:ba:6c:da:f7:01:04:86:ef:6d:ca:ba:b5:5b:94:
                    8f:aa:7e:0b:84:2a:0a:b7:72:43:76:11:23:2d:f2:
                    29:22:67:ba:fe:cf:56:11:b4:5a:e8:55:e8:9d:2e:
                    79:3e:aa:f8:07:07:88:4e:21:45:08:0d:08:8c:73:
                    db:2c:f9:d1:40:49:a3:38:a6:80:d2:38:8a:6c:56:
                    ea:19:82:17:11:fb:cb:a4:fe:c5:0d:b7:bb:84:89:
                    7c:30:40:56:3a:51:88:64:2b:c8:3a:66:86:17:d7:
                    aa:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:79:BC:51:B2:BE:65:FF:79:94:9A:40:B6:F5:F0:B3:E4:AC:A5:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/f9874a22-9a02-398f-86a6-217e95468149.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.crl

            X509v3 Authority Key Identifier:
                keyid:B2:BB:D7:45:02:8D:36:D6:C2:33:7F:4D:48:8C:43:47:21:60:07:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:de:60:a1:19:d3:a0:b5:a0:b4:6a:4e:65:f5:b9:9e:52:39:
         3d:10:72:2d:bf:99:e8:4d:e7:0f:e2:82:77:c7:42:01:27:ec:
         65:5d:0e:51:dd:21:e7:d7:b9:5b:ff:07:76:97:ee:af:83:1a:
         7f:dc:8f:dd:9d:f3:2b:ae:65:af:57:fa:b1:f1:0e:85:43:91:
         60:ca:0e:34:ef:cb:0e:ce:f4:ea:42:d0:55:ff:2b:04:1e:51:
         aa:42:81:f9:16:03:72:01:58:86:6b:cc:ea:12:1f:63:39:7b:
         1f:30:5f:01:51:48:fc:f0:cc:a0:ed:67:1c:75:43:7c:01:12:
         00:47:00:e8:ae:e6:7a:e9:9f:54:69:57:bf:4f:8d:5f:2a:12:
         fb:36:d1:10:e5:17:26:81:be:67:5a:18:59:25:ff:31:30:90:
         3b:3a:ea:52:ab:3e:20:3c:62:8d:8a:c7:78:be:60:9f:16:29:
         bd:d8:f0:e0:7d:0e:a1:88:ae:d9:13:6a:fd:da:c6:77:6b:63:
         a4:e1:6d:46:50:86:b3:81:c3:30:d9:b3:7b:d4:0a:1a:35:f1:
         34:9e:61:9c:33:1c:5d:13:d9:76:55:31:62:2c:e7:7b:e5:cd:
         71:75:8d:01:97:29:b9:41:2f:2e:f3:2c:98:25:47:ea:b0:2a:
         a5:b6:44:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:58:14 2025 by rpki-client