Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/09729117-c725-49ca-9a64-f10a055403c3/95727abb-f8cd-392c-9fda-6a003409ad50.roa
File:                     95727abb-f8cd-392c-9fda-6a003409ad50.roa (raw, json)
Hash identifier:          HQ1gFGjBJLS3KcloZvhFbyFg0a/HYDBDftPcOIqWIYE=
Subject key identifier:   A2:54:9B:34:4E:A9:5C:B5:33:4B:35:B3:9B:A7:CB:47:F2:93:35:67
Certificate issuer:       /CN=09729117-c725-49ca-9a64-f10a055403c3
Certificate serial:       010D0C9F43285849E4EFC083AED22019D188DA80
Authority key identifier: 22:1B:19:CA:BD:F7:88:3C:50:D8:13:F3:B2:F8:AF:7A:A9:8A:7C:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/09729117-c725-49ca-9a64-f10a055403c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/09729117-c725-49ca-9a64-f10a055403c3/95727abb-f8cd-392c-9fda-6a003409ad50.roa
Signing time:             Sun 18 May 2025 13:01:00 +0000
ROA not before:           Sun 18 May 2025 13:01:00 +0000
ROA not after:            Sat 16 Aug 2025 13:01:00 +0000
asID:                     60354
IP address blocks:        45.41.234.0/24 maxlen: 32
                          2602:80b:b000::/44 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/09729117-c725-49ca-9a64-f10a055403c3/09729117-c725-49ca-9a64-f10a055403c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/09729117-c725-49ca-9a64-f10a055403c3/09729117-c725-49ca-9a64-f10a055403c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/09729117-c725-49ca-9a64-f10a055403c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e4:ef:c0:83:ae:d2:20:19:d1:88:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09729117-c725-49ca-9a64-f10a055403c3
        Validity
            Not Before: May 18 13:01:00 2025 GMT
            Not After : Aug 16 13:01:00 2025 GMT
        Subject: CN=57c2b202-f79d-421f-8076-a9293fcd6f97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b7:79:8d:d5:66:44:4d:f6:e8:8b:80:7b:d1:
                    aa:56:8d:b8:d3:08:8a:6b:64:76:65:64:00:be:1d:
                    6c:5e:0a:c5:e9:be:0e:71:d4:1b:73:24:23:a2:8d:
                    be:48:0b:ca:22:77:17:64:97:0d:44:60:60:57:45:
                    aa:96:d6:c7:8b:83:a7:d9:ca:20:d2:4e:12:ad:6f:
                    0a:35:5f:dc:6e:18:52:17:58:98:26:56:51:e5:f7:
                    0a:00:d2:5c:90:05:48:55:a9:53:e0:5e:51:5a:45:
                    6d:cc:4a:02:99:b7:eb:a0:a6:9e:b3:75:7f:36:fe:
                    80:3b:4b:d5:67:8b:a4:d8:23:18:23:68:9f:32:7b:
                    06:6e:54:90:5b:38:49:36:71:14:e3:b4:1d:45:1c:
                    fc:8d:f9:4f:b1:82:ce:0d:3d:29:c2:a7:50:81:cb:
                    4f:13:b1:4f:bc:35:4e:d9:e0:bd:62:04:fa:cd:69:
                    89:e8:66:1a:13:cb:ac:4c:84:d3:f2:61:cf:b3:b9:
                    0c:de:37:9b:44:6c:dd:6e:38:9e:94:98:69:9e:b8:
                    f9:ed:f9:68:a4:58:18:bb:7e:a7:b1:ea:1f:19:96:
                    df:61:58:8f:5a:d7:11:6e:43:c7:4a:2f:63:e8:6b:
                    c3:54:94:0d:8d:fe:23:39:46:77:2e:0d:80:25:b4:
                    c4:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:54:9B:34:4E:A9:5C:B5:33:4B:35:B3:9B:A7:CB:47:F2:93:35:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/09729117-c725-49ca-9a64-f10a055403c3/95727abb-f8cd-392c-9fda-6a003409ad50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/09729117-c725-49ca-9a64-f10a055403c3/09729117-c725-49ca-9a64-f10a055403c3.crl

            X509v3 Authority Key Identifier:
                keyid:22:1B:19:CA:BD:F7:88:3C:50:D8:13:F3:B2:F8:AF:7A:A9:8A:7C:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/09729117-c725-49ca-9a64-f10a055403c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.41.234.0/24
                IPv6:
                  2602:80b:b000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:02:b9:ec:25:d8:52:d6:b5:57:fa:2e:f2:39:9e:d4:25:c1:
         69:10:76:ea:38:b2:20:5d:1f:cf:87:cf:4b:f1:b2:c7:61:ea:
         64:77:19:5a:8c:0d:76:42:4b:34:3f:52:16:ff:90:ea:e8:4a:
         00:8d:50:0e:85:85:7a:99:b6:26:f9:7c:2c:31:e6:85:84:5a:
         49:92:ab:48:91:1a:6a:0c:d1:ea:80:44:b8:86:08:4e:1c:60:
         81:8b:99:ba:6f:8a:fc:7f:a9:f8:df:93:51:e3:da:b7:3d:a9:
         05:ba:3a:22:b6:22:ef:85:ff:8f:9b:c7:76:e0:3f:7a:94:2a:
         1d:ae:48:42:67:5d:0b:ed:87:f6:5d:7a:fa:9e:70:68:8e:a2:
         09:b5:0b:43:c2:b5:ad:2b:fc:18:61:c8:c8:4c:86:e8:83:80:
         ca:70:e3:f9:4d:08:a4:54:64:4d:95:dc:b7:39:0a:3c:2d:2a:
         fe:ec:fe:2c:70:9f:f2:d7:28:57:d3:10:30:ac:ba:9b:1b:30:
         ce:61:45:f0:db:41:05:94:2f:bd:1a:f2:cf:7d:4c:b2:1b:32:
         5f:60:36:ab:dd:60:7e:5f:c3:dd:96:d4:71:56:5a:90:1a:a6:
         b3:ed:f6:43:50:90:71:e3:62:f1:74:57:f5:d5:0d:46:77:c7:
         0b:72:a6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:54:21 2025 by rpki-client