Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/35c42a25-42c3-46fe-9914-5b8394eae9b1/1542f51d-2157-31f8-91cd-a013c591d66f.roa
File:                     1542f51d-2157-31f8-91cd-a013c591d66f.roa (raw, json)
Hash identifier:          i23xtEUvDyMC6SYl+Ng91nXl0zCgoX696DjKYhSV0eg=
Subject key identifier:   6F:11:AE:68:FB:A2:53:3F:B8:3A:DD:00:4E:DA:77:0E:DA:9B:B6:08
Certificate issuer:       /CN=35c42a25-42c3-46fe-9914-5b8394eae9b1
Certificate serial:       010D0C9F4328584A5FC5EB52145AD22A30985600
Authority key identifier: 03:BA:AD:1D:6A:A5:E8:52:56:17:AE:8D:E4:EB:87:44:65:38:E6:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/35c42a25-42c3-46fe-9914-5b8394eae9b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/35c42a25-42c3-46fe-9914-5b8394eae9b1/1542f51d-2157-31f8-91cd-a013c591d66f.roa
Signing time:             Tue 01 Jul 2025 13:01:04 +0000
ROA not before:           Tue 01 Jul 2025 13:01:04 +0000
ROA not after:            Mon 29 Sep 2025 13:01:04 +0000
asID:                     26658
IP address blocks:        45.42.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/35c42a25-42c3-46fe-9914-5b8394eae9b1/35c42a25-42c3-46fe-9914-5b8394eae9b1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/35c42a25-42c3-46fe-9914-5b8394eae9b1/35c42a25-42c3-46fe-9914-5b8394eae9b1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/35c42a25-42c3-46fe-9914-5b8394eae9b1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:c5:eb:52:14:5a:d2:2a:30:98:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35c42a25-42c3-46fe-9914-5b8394eae9b1
        Validity
            Not Before: Jul  1 13:01:04 2025 GMT
            Not After : Sep 29 13:01:04 2025 GMT
        Subject: CN=8bd3fd2b-ed40-40c5-bcdc-2d3206298905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:00:81:9f:0a:09:7d:d0:91:21:54:72:8b:6f:
                    c4:77:07:f5:c1:a1:8e:a5:d2:2f:86:77:69:08:62:
                    41:10:ae:c3:b1:30:2a:cd:6e:ba:b4:7c:65:45:ac:
                    3a:9d:a7:9d:48:55:16:5a:99:35:e8:a3:b5:4e:e8:
                    df:50:fb:71:50:5f:2e:92:08:34:af:95:ef:cd:8f:
                    4e:f7:94:5d:b8:d3:b1:25:f0:d8:83:6e:c6:76:ee:
                    65:1f:47:c0:2b:c7:0f:11:17:2a:42:c5:22:16:67:
                    9a:32:94:6e:7e:e1:dc:83:17:4b:dc:20:c1:fe:51:
                    eb:03:18:d5:78:6e:4a:ba:f7:b6:1b:a2:bf:d6:a0:
                    d3:f4:a0:0d:db:05:e5:fb:56:79:d0:f3:93:55:4b:
                    f3:a1:aa:06:14:3e:05:ce:e6:c9:35:0e:79:55:c8:
                    23:11:83:f8:cf:3c:3b:04:c4:57:8f:9f:f8:e9:54:
                    99:cb:c9:ce:5b:a2:bd:79:0f:2a:1f:41:86:15:30:
                    33:c5:7c:62:b9:ba:99:04:54:a9:9e:61:8f:25:0a:
                    e0:82:ab:5f:5c:28:8d:34:58:01:96:d2:94:dd:be:
                    6c:38:b3:5f:29:8a:dd:5e:bc:ac:e4:a3:a0:0b:8f:
                    61:27:7d:47:15:6e:13:ee:4f:7a:a0:0d:45:23:3e:
                    a0:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:11:AE:68:FB:A2:53:3F:B8:3A:DD:00:4E:DA:77:0E:DA:9B:B6:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/35c42a25-42c3-46fe-9914-5b8394eae9b1/1542f51d-2157-31f8-91cd-a013c591d66f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/35c42a25-42c3-46fe-9914-5b8394eae9b1/35c42a25-42c3-46fe-9914-5b8394eae9b1.crl

            X509v3 Authority Key Identifier:
                keyid:03:BA:AD:1D:6A:A5:E8:52:56:17:AE:8D:E4:EB:87:44:65:38:E6:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/35c42a25-42c3-46fe-9914-5b8394eae9b1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:d5:27:b1:8f:4d:4c:34:54:05:ae:c4:22:f8:de:70:37:a1:
         91:27:73:31:d2:17:cf:26:15:fb:e7:de:4a:09:d0:b7:a8:e0:
         51:17:00:4e:b5:ec:b2:c3:53:f5:95:29:6f:0f:4d:66:26:e9:
         85:7c:29:9a:ab:71:15:c8:df:9f:91:42:fa:5b:87:37:d0:00:
         06:85:49:c1:d2:c2:3c:62:28:df:3a:16:d3:ec:d6:7a:c0:c4:
         2d:96:b7:12:ac:b0:88:5f:b8:a0:cb:4e:a8:37:cd:2e:09:d6:
         aa:e0:eb:2b:9d:59:fe:eb:78:ba:2e:cb:99:a0:7b:85:62:90:
         27:1c:23:1b:a3:ee:56:f7:b8:00:d0:32:9f:52:4a:64:90:f4:
         69:d3:6b:65:8c:ec:f2:af:f5:ed:c3:3a:41:b6:c6:7f:99:ad:
         00:32:98:9f:f9:69:50:4d:f3:54:f6:2f:bc:92:59:63:4e:a5:
         db:4d:45:63:87:c8:3f:12:14:06:ce:97:10:e6:b4:e6:24:c1:
         c4:08:a1:b3:44:c7:91:d9:7f:03:b5:29:74:4d:24:ac:5b:5f:
         07:ee:3a:e2:c1:74:dd:92:94:29:cd:24:69:1f:87:54:2d:af:
         6a:e6:79:73:8b:ae:97:76:10:ea:9e:6f:b7:34:53:92:fc:cd:
         f6:d9:d4:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 11:14:37 2025 by rpki-client