Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a7813c7-65af-4c6b-affc-323cd6e8e909/caded774-cb8f-33b9-aac1-9e93fc48739b.roa
File:                     caded774-cb8f-33b9-aac1-9e93fc48739b.roa (raw, json)
Hash identifier:          OFh4r885ZeQJZlK2xWAwMCKvsI3j/00MQTg4B1K0xfE=
Subject key identifier:   CD:B6:4A:1B:34:70:07:81:83:AD:27:95:7C:27:71:2F:81:D5:89:BE
Certificate issuer:       /CN=2a7813c7-65af-4c6b-affc-323cd6e8e909
Certificate serial:       010D0C9F4328584964843EE9FF0CBBD9EAC4B9E0
Authority key identifier: 50:CB:EC:29:C1:E1:EE:E4:2C:53:5D:8A:99:90:53:8E:5B:0A:A9:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a7813c7-65af-4c6b-affc-323cd6e8e909.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a7813c7-65af-4c6b-affc-323cd6e8e909/caded774-cb8f-33b9-aac1-9e93fc48739b.roa
Signing time:             Wed 02 Apr 2025 13:01:01 +0000
ROA not before:           Wed 02 Apr 2025 13:01:01 +0000
ROA not after:            Tue 01 Jul 2025 13:01:01 +0000
asID:                     4172
IP address blocks:        45.41.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a7813c7-65af-4c6b-affc-323cd6e8e909/2a7813c7-65af-4c6b-affc-323cd6e8e909.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a7813c7-65af-4c6b-affc-323cd6e8e909/2a7813c7-65af-4c6b-affc-323cd6e8e909.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a7813c7-65af-4c6b-affc-323cd6e8e909.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:64:84:3e:e9:ff:0c:bb:d9:ea:c4:b9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a7813c7-65af-4c6b-affc-323cd6e8e909
        Validity
            Not Before: Apr  2 13:01:01 2025 GMT
            Not After : Jul  1 13:01:01 2025 GMT
        Subject: CN=4cd16de8-d974-492a-9116-d75f4ee92860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:bf:4d:a4:e9:4f:82:11:53:1a:41:99:46:db:
                    bd:d8:06:81:1d:f0:2d:ba:b1:19:66:da:3c:71:33:
                    91:b3:cf:dc:c4:2b:08:6f:70:83:7e:23:7c:8b:26:
                    01:19:93:80:c7:6e:25:30:e9:3c:32:76:9f:e2:7c:
                    89:b4:20:f2:b8:d2:f4:ac:af:62:40:d7:f8:bf:2b:
                    e8:bc:45:1e:05:c2:71:69:2d:68:fc:b4:cd:80:31:
                    a3:65:18:92:2e:60:56:18:37:a9:c3:50:51:c8:ad:
                    f4:9e:07:b8:9c:79:9b:86:32:11:e8:1c:41:bf:6d:
                    7e:78:53:96:e2:a6:d3:28:41:ac:29:79:25:d0:2f:
                    1c:05:7c:66:11:16:9f:6f:0d:73:e6:6c:2e:b6:00:
                    b3:d9:10:8d:d2:62:70:a2:35:7d:81:f9:41:b6:f6:
                    41:67:83:81:e0:46:38:f9:56:77:8d:11:6a:58:32:
                    25:71:b0:16:3f:89:eb:dd:a2:f6:16:88:e1:1c:51:
                    8a:fb:ec:0e:d1:53:43:17:5b:a6:10:23:0c:f5:37:
                    a1:3e:4f:d7:3e:41:d0:80:9a:ea:ec:df:28:13:03:
                    56:3d:b1:ad:ef:21:5c:00:4b:f6:31:61:38:51:c0:
                    76:32:6c:a9:c3:43:cd:ff:e2:44:26:cb:df:a6:ed:
                    71:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:B6:4A:1B:34:70:07:81:83:AD:27:95:7C:27:71:2F:81:D5:89:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a7813c7-65af-4c6b-affc-323cd6e8e909/caded774-cb8f-33b9-aac1-9e93fc48739b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a7813c7-65af-4c6b-affc-323cd6e8e909/2a7813c7-65af-4c6b-affc-323cd6e8e909.crl

            X509v3 Authority Key Identifier:
                keyid:50:CB:EC:29:C1:E1:EE:E4:2C:53:5D:8A:99:90:53:8E:5B:0A:A9:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a7813c7-65af-4c6b-affc-323cd6e8e909.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.41.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:4d:88:08:e3:04:9a:e1:58:56:9f:98:9d:4b:15:0f:76:eb:
         fa:8e:21:0a:98:19:31:64:c6:a3:a1:40:06:2b:b7:62:80:fe:
         2c:c2:56:00:f6:a2:5a:8c:21:5a:28:59:87:7c:b3:fd:c4:e6:
         14:93:c7:8a:16:27:66:f1:91:6e:ac:69:6e:34:06:72:99:de:
         a4:48:99:90:94:54:68:65:79:fb:55:13:de:f0:0a:53:9f:cc:
         9f:ae:13:af:a1:f4:e2:5b:c0:71:ed:1e:7d:0a:94:02:60:c2:
         4e:9d:5f:f3:36:8f:c3:da:8e:50:1f:f4:02:2f:01:03:e9:ed:
         e0:12:f0:7e:94:32:5c:4b:35:31:c3:46:23:e7:0e:8c:d4:e7:
         01:d9:72:e8:0e:48:b9:bd:8e:2f:07:36:dd:1e:02:bc:10:ba:
         e1:94:3a:48:90:e5:72:82:a0:37:a2:f8:58:07:21:35:e7:75:
         80:21:b3:1a:f4:5c:3e:50:08:e3:ad:01:8e:65:3a:43:68:5e:
         f8:1f:09:5a:b9:a8:49:e4:d8:18:e6:a8:b9:de:bf:b7:c7:85:
         36:59:b4:eb:8c:19:f4:e8:2f:19:ab:37:9d:17:c4:18:d2:13:
         9c:4b:7d:81:1e:eb:f4:95:39:7d:f1:c6:03:c1:6c:02:a5:8b:
         dc:ac:83:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:37:12 2025 by rpki-client