Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/72b81760-a068-377d-ab55-30bc347b6be9.roa
File:                     72b81760-a068-377d-ab55-30bc347b6be9.roa (raw, json)
Hash identifier:          7TxGsOAs0a5uiy789ZUYk4NxsVbxSNmc1hIgM5SjrxY=
Subject key identifier:   69:42:89:AB:EB:D6:13:0D:06:EE:07:81:FD:6C:3B:AA:B9:36:ED:1C
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285848C508FE686633882591A4E300
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/72b81760-a068-377d-ab55-30bc347b6be9.roa
Signing time:             Tue 04 Feb 2025 09:59:15 +0000
ROA not before:           Tue 04 Feb 2025 09:59:15 +0000
ROA not after:            Mon 05 May 2025 08:59:15 +0000
asID:                     62425
IP address blocks:        45.74.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Feb 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:08:fe:68:66:33:88:25:91:a4:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Feb  4 09:59:15 2025 GMT
            Not After : May  5 08:59:15 2025 GMT
        Subject: CN=0b49c959-6b5b-4c75-b178-ce9b9def7e73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:11:9a:bf:38:73:9e:40:7d:7c:6b:f0:2d:85:
                    c3:8d:f9:ea:b1:d2:6b:cf:e6:8a:ee:c7:0d:00:f3:
                    79:02:81:dc:31:7d:c9:ea:dc:84:2e:04:f1:9b:43:
                    8f:55:31:c1:44:0e:8e:33:84:30:8c:e2:bb:d5:4f:
                    b9:f5:29:91:f2:e2:41:e3:e1:20:ac:03:22:16:41:
                    f8:0e:4b:e1:47:f0:c1:3b:9f:5e:4a:54:3b:7f:19:
                    1a:f7:a3:fb:18:fb:f8:c5:d6:ea:47:a9:11:af:e7:
                    69:c4:da:ae:38:27:5d:35:8f:79:47:d4:19:d0:fc:
                    01:99:11:3c:3a:dd:1b:75:fb:71:42:ad:84:4b:53:
                    06:31:68:d7:c8:2f:df:28:07:08:29:1d:99:c9:2d:
                    ba:46:86:4f:3d:4d:f4:5a:d5:32:da:3c:a5:be:34:
                    e8:e9:12:25:9a:c5:64:0f:cc:2a:d6:3e:9b:8a:dd:
                    73:bc:73:88:95:45:31:af:e2:84:cf:ba:66:57:16:
                    70:76:fe:0e:08:67:26:8d:6e:64:91:a4:4d:82:dc:
                    f5:05:98:cd:e9:e0:fc:2e:e3:d0:8c:69:d1:d8:d0:
                    69:12:00:eb:32:b7:e4:d3:d1:6c:8a:2b:ec:9b:74:
                    b0:e5:bd:73:80:c6:bc:f4:be:4e:d3:99:5c:ad:b7:
                    09:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:42:89:AB:EB:D6:13:0D:06:EE:07:81:FD:6C:3B:AA:B9:36:ED:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/72b81760-a068-377d-ab55-30bc347b6be9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.74.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:00:49:b5:78:90:ba:8b:7b:fc:65:2f:30:0a:36:62:51:ce:
         b0:53:70:24:00:1c:18:b3:1e:05:a9:4c:60:02:63:11:d5:ce:
         2f:00:83:18:3d:94:25:81:76:da:aa:2b:38:85:63:a2:18:0e:
         68:5d:89:95:7c:63:c3:b3:3b:49:e0:74:9b:6a:f7:c8:96:10:
         03:73:d4:59:be:32:a5:82:75:75:50:04:2a:a5:f9:f9:2e:25:
         6d:84:0f:c3:59:3c:7b:44:c9:cf:0e:f4:99:bf:e3:1a:9f:cc:
         2b:6b:34:83:66:a9:9a:f7:86:9c:00:ef:f6:f8:4e:c4:4e:66:
         2a:af:66:4a:c6:46:d9:76:26:54:39:fe:dd:f0:e6:7c:f1:ad:
         a5:fa:96:75:7a:9d:9b:0d:78:df:c4:20:8a:b7:2a:6c:a4:16:
         26:72:6f:6d:eb:60:24:98:1a:45:3d:23:fd:ec:76:df:82:2a:
         d6:f7:c8:eb:c8:ea:06:95:5a:d0:ac:44:df:1a:52:2d:59:ae:
         ff:bb:70:bf:61:0e:ee:83:1a:79:c8:53:08:70:48:67:f7:5d:
         c2:c2:a5:75:cb:b9:a0:79:a2:fd:65:c7:f3:9e:c6:fb:ee:db:
         7b:ca:16:e8:17:00:89:20:ca:e8:6e:5a:9e:6f:29:88:20:09:
         d3:93:8d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:43:19 2025 by rpki-client