Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924/ea184ab6-c704-3dff-a295-de6e4cf4492b.roa
File:                     ea184ab6-c704-3dff-a295-de6e4cf4492b.roa (raw, json)
Hash identifier:          GvzWWOPpI9Srdg80STR6MFL5zsrjY4WhI6LFGjKrdpY=
Subject key identifier:   1C:3E:B7:84:9E:38:8C:65:D1:56:12:B4:D3:7C:EC:10:B8:7D:27:D2
Certificate issuer:       /CN=fba57140-a369-4a3a-8edc-69732d179924
Certificate serial:       010D0C9F4328584902EC19F51FA973CE7C92A100
Authority key identifier: 0D:62:F8:D3:71:60:6D:A8:44:A4:7C:AB:CE:08:71:66:07:93:95:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924/ea184ab6-c704-3dff-a295-de6e4cf4492b.roa
Signing time:             Wed 26 Feb 2025 14:00:51 +0000
ROA not before:           Wed 26 Feb 2025 14:00:51 +0000
ROA not after:            Tue 27 May 2025 13:00:51 +0000
asID:                     14127
IP address blocks:        134.199.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924/fba57140-a369-4a3a-8edc-69732d179924.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924/fba57140-a369-4a3a-8edc-69732d179924.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:ec:19:f5:1f:a9:73:ce:7c:92:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fba57140-a369-4a3a-8edc-69732d179924
        Validity
            Not Before: Feb 26 14:00:51 2025 GMT
            Not After : May 27 13:00:51 2025 GMT
        Subject: CN=d892bf98-a514-4077-8814-6fedb10adb03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fa:65:c0:f9:fd:7d:60:ff:ae:d1:cd:61:bb:
                    67:8e:a3:b2:a6:a5:44:1d:f2:f4:f8:a9:85:44:21:
                    98:8c:60:cf:2a:f6:31:e4:5e:ef:b1:15:8a:e6:45:
                    fe:61:80:c8:f8:18:3e:19:b4:21:14:34:9f:32:a8:
                    85:6a:26:f8:63:29:d4:7c:26:d6:17:35:1e:4a:0b:
                    fb:87:25:a6:07:ff:7e:8b:c7:18:13:f1:f4:fc:3c:
                    ac:72:53:09:01:ca:57:8d:df:81:26:a0:a8:67:18:
                    05:78:86:45:eb:ad:41:ba:9e:cb:3c:db:73:48:70:
                    8a:02:0d:f0:e4:34:f7:28:24:32:db:d3:62:3c:cb:
                    f7:16:0d:b0:5a:13:b5:d1:49:8d:be:13:66:c4:e2:
                    a9:a7:f5:50:fb:88:6b:bf:ff:e0:f4:14:a5:fd:18:
                    2a:f6:d0:2a:65:7e:f5:11:1b:ea:9a:60:c9:51:65:
                    f1:e5:6e:10:3f:d1:e3:c3:1c:cd:17:91:ba:a6:a4:
                    ce:ff:35:fc:c6:d3:84:7a:ed:13:79:ea:5a:9a:ec:
                    00:ca:d3:56:ca:a1:9c:dc:77:4f:17:7d:34:69:c3:
                    ee:48:f4:a6:5d:a4:9b:64:78:05:f2:35:1b:55:80:
                    b7:bd:f6:e6:0f:50:09:af:ef:01:33:21:76:8f:d4:
                    3b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:3E:B7:84:9E:38:8C:65:D1:56:12:B4:D3:7C:EC:10:B8:7D:27:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924/ea184ab6-c704-3dff-a295-de6e4cf4492b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924/fba57140-a369-4a3a-8edc-69732d179924.crl

            X509v3 Authority Key Identifier:
                keyid:0D:62:F8:D3:71:60:6D:A8:44:A4:7C:AB:CE:08:71:66:07:93:95:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.199.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:77:d6:d4:6a:e4:b1:07:b8:47:6d:2e:4d:01:7c:b0:6f:0d:
         4e:f0:56:ba:92:c8:55:8f:d0:d2:64:cf:45:75:ff:ca:fa:ee:
         00:95:57:81:e3:91:87:d6:9e:10:55:4c:21:48:d8:8b:9f:f8:
         0f:63:ec:34:4c:e9:6f:3a:f9:c5:54:2b:af:f0:6d:4e:1a:10:
         59:0a:e6:2e:45:33:8b:f8:fa:80:74:45:c9:26:d7:52:78:0b:
         3d:90:89:ec:d5:b3:61:36:24:c2:56:8f:36:61:30:6e:f9:ab:
         5d:94:7f:b4:e4:e3:65:7f:af:2f:46:9c:94:4c:84:44:45:90:
         18:81:ca:a3:18:15:a7:2f:d4:2a:7c:84:97:4c:fc:e7:35:37:
         2a:6c:9e:8e:e5:4c:57:3c:61:46:07:d8:fb:40:21:b6:98:61:
         da:81:b7:49:d9:c6:82:2d:b5:6b:62:8b:fe:e0:7a:51:4a:f1:
         fc:f3:42:27:5e:0d:e7:74:28:f9:d1:2e:8a:94:b8:be:c4:89:
         1a:86:f5:e9:1a:d7:3c:9b:f6:4b:2a:34:d2:23:22:41:2c:d0:
         d3:dd:e2:33:f5:1e:30:0b:eb:58:21:09:7a:4f:90:32:36:0e:
         46:95:15:e2:b1:24:55:d3:71:c8:0e:d6:d6:d6:4f:c8:53:12:
         14:eb:78:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:42:50 2025 by rpki-client