Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2c3122e2-3aa1-371f-a046-467ae3f60b0f.roa
File:                     2c3122e2-3aa1-371f-a046-467ae3f60b0f.roa (raw, json)
Hash identifier:          17FxmfdbK7Yu0IuxXTnvL+aAfiDz3TQ4HCiPLU03gmw=
Subject key identifier:   E7:30:A1:6E:30:C0:17:BF:19:81:4B:3E:AB:34:2F:E5:FF:9A:3D:B4
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285849F87A8D8D304904BE82962FC0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2c3122e2-3aa1-371f-a046-467ae3f60b0f.roa
Signing time:             Sun 25 May 2025 13:01:02 +0000
ROA not before:           Sun 25 May 2025 13:01:02 +0000
ROA not after:            Sat 23 Aug 2025 13:01:02 +0000
asID:                     9009
IP address blocks:        45.74.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f8:7a:8d:8d:30:49:04:be:82:96:2f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: May 25 13:01:02 2025 GMT
            Not After : Aug 23 13:01:02 2025 GMT
        Subject: CN=13cbc072-912e-452e-8eaa-0eb3781c85b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:2c:b3:4b:cc:27:7c:76:3e:69:05:db:af:d7:
                    97:38:36:6c:3a:54:a7:e5:3f:10:3d:19:a8:71:e4:
                    ca:ad:aa:96:7e:9e:ef:65:d8:f5:b1:98:ff:1b:03:
                    b9:c2:cb:78:df:09:68:9f:fc:53:99:55:ab:5e:6f:
                    f6:81:2d:28:c5:18:d5:79:a7:b3:82:38:50:6e:d3:
                    b8:a3:bc:5b:6f:34:41:b6:52:3a:fa:6f:79:63:be:
                    9a:d5:5a:eb:c2:56:53:ff:e9:6a:5f:14:7d:ae:85:
                    e1:3e:ea:c7:36:f9:48:7a:98:14:d2:b4:6d:c6:01:
                    0e:61:c0:b9:f2:c8:6b:27:a1:c4:c8:3a:31:ac:64:
                    77:09:9a:98:ca:0d:46:66:46:c2:ee:f0:a1:08:0e:
                    fa:00:5f:15:c1:16:d4:18:00:7f:f6:74:93:15:60:
                    aa:23:19:ee:ab:05:1e:df:f4:f7:1f:d2:ca:22:b2:
                    39:f3:b0:8b:3e:0e:ab:71:91:8c:c1:df:67:5f:6c:
                    17:64:92:54:b0:d7:15:be:ee:20:aa:14:70:ac:21:
                    c4:bb:9f:33:f5:4e:61:bc:0c:38:a1:d9:3b:87:8f:
                    dd:e5:50:b5:09:47:e4:6a:42:b9:a3:89:39:ac:6b:
                    ee:bd:07:c6:6e:c5:6a:9e:46:ad:6a:5f:8e:cb:7f:
                    3e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:30:A1:6E:30:C0:17:BF:19:81:4B:3E:AB:34:2F:E5:FF:9A:3D:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2c3122e2-3aa1-371f-a046-467ae3f60b0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.74.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:67:3b:4a:8b:8d:8a:d5:84:6b:ab:f9:83:ce:34:b1:97:14:
         fb:de:0b:d4:eb:6e:d3:0f:3c:e5:b6:d6:3e:b4:28:6d:4b:3f:
         09:b8:54:4d:d1:62:13:fc:2e:1e:24:d6:4d:73:9f:28:1f:f3:
         f6:ac:fc:38:31:17:14:c3:98:26:2d:d6:8b:11:50:d3:68:54:
         06:3f:b4:7b:8d:19:70:ef:9a:66:86:cf:5a:49:c1:65:94:f3:
         ce:cd:11:9f:20:1b:04:7b:d2:a6:3c:6f:92:83:19:90:24:cd:
         62:85:89:6d:2a:5e:e7:4e:ad:1c:3e:96:68:07:6a:84:ee:14:
         7f:1b:b1:89:6d:a5:01:10:45:2c:e0:45:a3:f3:16:7f:6a:64:
         c5:7f:b5:24:21:65:c7:eb:2c:d2:c4:c8:65:df:19:79:0b:cc:
         cd:30:ec:47:f0:26:e2:fd:77:ed:37:ca:75:f8:1f:70:88:59:
         93:73:65:30:94:0e:43:34:38:46:0f:6e:dc:4b:94:32:bf:34:
         43:75:e8:b3:07:1e:9a:53:31:5f:d2:0a:27:45:73:1a:1e:ec:
         a7:b4:db:25:22:64:09:b9:07:fd:c0:a9:31:fd:0d:c3:6e:d8:
         4b:ae:6f:47:7a:9f:83:b8:48:ec:f5:bf:a8:05:61:f0:5d:19:
         7d:46:43:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 10:14:34 2025 by rpki-client