Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a939ee7e-81b2-46cf-9a43-3647ff132a06/26c76f90-c4fc-3643-b8cc-5f94d17f8440.roa
File:                     26c76f90-c4fc-3643-b8cc-5f94d17f8440.roa (raw, json)
Hash identifier:          eApCsBgXepKJDzDQgHJDRk1YAUEyCqqek60qMNMVjnU=
Subject key identifier:   FF:B9:C2:28:47:6E:49:23:F5:9F:25:DE:2B:B3:1A:D7:14:12:27:FB
Certificate issuer:       /CN=a939ee7e-81b2-46cf-9a43-3647ff132a06
Certificate serial:       010D0C9F4328584980C35B9D075266252C841180
Authority key identifier: 42:67:98:4B:71:CA:19:1C:6D:E1:A0:5E:54:0C:B8:AA:FA:8B:28:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a939ee7e-81b2-46cf-9a43-3647ff132a06.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a939ee7e-81b2-46cf-9a43-3647ff132a06/26c76f90-c4fc-3643-b8cc-5f94d17f8440.roa
Signing time:             Sat 12 Apr 2025 15:50:55 +0000
ROA not before:           Sat 12 Apr 2025 15:50:55 +0000
ROA not after:            Fri 11 Jul 2025 15:50:55 +0000
asID:                     210110
IP address blocks:        45.59.128.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a939ee7e-81b2-46cf-9a43-3647ff132a06/a939ee7e-81b2-46cf-9a43-3647ff132a06.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a939ee7e-81b2-46cf-9a43-3647ff132a06/a939ee7e-81b2-46cf-9a43-3647ff132a06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a939ee7e-81b2-46cf-9a43-3647ff132a06.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:c3:5b:9d:07:52:66:25:2c:84:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a939ee7e-81b2-46cf-9a43-3647ff132a06
        Validity
            Not Before: Apr 12 15:50:55 2025 GMT
            Not After : Jul 11 15:50:55 2025 GMT
        Subject: CN=79f96a9e-6738-447c-9a20-590697a58af0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:bd:9d:e6:72:17:69:9f:0c:1d:66:d7:d0:96:
                    52:fb:f0:8e:7a:ad:59:7e:f2:a9:c5:50:df:4d:90:
                    90:18:3c:28:b2:e1:66:be:6a:23:10:e9:4f:e6:4b:
                    f4:2d:3c:7a:04:a1:90:c9:7f:80:1d:cf:3e:28:c0:
                    e1:6b:24:24:a8:4d:ca:82:1a:b4:0f:66:bf:05:51:
                    1e:a9:7c:61:ea:c2:8b:2f:62:77:0f:ec:7c:d3:cd:
                    0e:e0:4b:4b:52:ae:0c:d8:8b:ae:fe:77:cb:5b:ec:
                    ce:cc:6a:7a:f9:af:0d:67:ae:68:72:67:42:a6:c3:
                    f1:0b:18:64:a3:0e:da:74:e7:78:24:c8:ab:b1:52:
                    a7:f9:15:00:6a:b5:46:94:b7:d0:8e:57:42:73:6d:
                    26:61:f8:0f:fd:16:4a:aa:05:7c:bf:80:e2:e8:52:
                    1f:27:cf:1d:0f:b8:00:f3:c2:6c:b2:f7:c9:ad:a6:
                    fc:ca:af:c6:62:6d:e8:d6:53:a4:06:bd:d0:90:3b:
                    6a:23:c4:2c:0b:23:2d:a0:ea:52:fe:df:44:d2:2f:
                    b1:58:c5:01:67:fd:12:b4:00:ce:4f:ab:cf:de:26:
                    22:53:f0:44:64:00:b3:32:ac:e1:e5:e3:89:fc:3e:
                    86:bb:48:3d:e2:98:ad:49:d5:99:05:76:dd:cc:28:
                    c3:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:B9:C2:28:47:6E:49:23:F5:9F:25:DE:2B:B3:1A:D7:14:12:27:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a939ee7e-81b2-46cf-9a43-3647ff132a06/26c76f90-c4fc-3643-b8cc-5f94d17f8440.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a939ee7e-81b2-46cf-9a43-3647ff132a06/a939ee7e-81b2-46cf-9a43-3647ff132a06.crl

            X509v3 Authority Key Identifier:
                keyid:42:67:98:4B:71:CA:19:1C:6D:E1:A0:5E:54:0C:B8:AA:FA:8B:28:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a939ee7e-81b2-46cf-9a43-3647ff132a06.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:0d:62:34:97:51:6b:a0:8e:7d:02:ed:88:73:2a:a5:8b:29:
         b9:c2:c6:53:3e:fe:ab:58:33:9c:fc:a5:8b:80:62:3a:85:3b:
         f8:6d:a1:a2:8d:43:6b:bf:6c:e5:62:f3:43:a9:bc:d4:17:8a:
         fe:47:e5:8e:6e:bb:56:62:0b:c0:2e:15:4d:f8:25:44:39:60:
         c7:81:d3:d5:27:4a:3c:0d:da:67:be:ee:8f:b6:2c:88:45:dc:
         10:d6:fb:75:f7:81:66:be:86:46:06:88:0f:e9:4c:04:10:44:
         48:a0:cf:53:2e:9f:e1:5f:bd:76:2a:d3:26:4b:d3:4b:c2:66:
         50:3e:90:8a:5e:de:b4:9e:d1:71:08:bf:08:47:63:df:27:5c:
         6c:48:b9:39:ca:1f:89:c2:45:a9:10:de:8f:e7:19:fe:23:15:
         c0:57:a3:ce:06:f5:bd:13:22:6c:3b:0f:82:26:02:c8:77:63:
         0a:18:6f:f7:b9:06:49:19:bc:c5:b3:e1:f0:1c:27:b7:ef:28:
         13:7d:d6:d7:43:46:6e:bf:dc:c3:5d:eb:81:a9:2e:1e:f4:66:
         07:70:a7:66:49:01:25:7d:d8:8e:82:95:cf:1b:90:cb:fa:d0:
         b5:0e:f5:ac:b7:79:4b:45:c4:b8:59:88:75:d9:c1:60:17:98:
         61:81:b2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 23:00:31 2025 by rpki-client