Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/add92383-8350-31bd-b8d0-a6f8bc21162f.roa
File:                     add92383-8350-31bd-b8d0-a6f8bc21162f.roa (raw, json)
Hash identifier:          DJxNf9V/HjN9rDnqURrxNm7Lx2hqpyD2/va2lxvQR/Q=
Subject key identifier:   11:54:E0:E7:1C:D3:1D:B1:DE:77:D0:B1:E1:58:2C:99:D9:4F:6D:BF
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F432858492F7920612CA9FBF9FF589E80
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/add92383-8350-31bd-b8d0-a6f8bc21162f.roa
Signing time:             Fri 14 Mar 2025 13:00:51 +0000
ROA not before:           Fri 14 Mar 2025 13:00:51 +0000
ROA not after:            Thu 12 Jun 2025 13:00:51 +0000
asID:                     9009
IP address blocks:        45.74.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2f:79:20:61:2c:a9:fb:f9:ff:58:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Mar 14 13:00:51 2025 GMT
            Not After : Jun 12 13:00:51 2025 GMT
        Subject: CN=71dc3d6e-3c4a-4f01-91b9-178540d766fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c3:c3:3d:a3:e3:2b:fd:fa:43:80:33:3a:32:
                    cf:76:64:5d:d5:23:8b:19:4c:d6:a4:ef:c2:8d:93:
                    bf:d0:73:bc:9f:c3:1f:66:3f:47:82:20:e1:22:1a:
                    e3:5d:78:cc:97:48:5f:c8:ee:68:0c:38:a6:b1:1a:
                    25:c3:02:60:a2:90:6e:18:49:77:84:de:dd:33:fe:
                    98:41:e3:4e:db:c8:25:26:9c:05:97:94:fa:ff:e6:
                    60:b6:d1:2a:bf:e2:0c:c5:56:cc:19:43:57:cb:e4:
                    6c:e2:38:d6:03:91:89:7d:c0:86:9a:b5:56:0c:5a:
                    34:74:30:1e:c5:26:41:af:48:ca:78:78:1f:2b:80:
                    e2:6e:7b:01:56:76:a2:4c:48:12:52:0d:86:de:40:
                    a1:76:08:5e:c7:a9:2c:4d:9e:0f:90:73:a6:61:c1:
                    07:b5:91:d6:95:17:6c:4f:4e:e9:37:37:97:3c:7e:
                    4f:25:2e:3d:10:9e:af:6a:94:e2:d7:a1:4e:cd:63:
                    44:d9:c2:6f:50:17:50:3a:79:04:02:15:4d:9e:30:
                    e8:12:00:32:9d:6d:15:d5:84:7d:72:55:9a:c8:3c:
                    80:d0:e4:a9:b7:ba:94:78:e9:f1:60:00:38:ee:0d:
                    d8:33:bf:5e:6b:20:e1:19:69:5f:c9:36:9e:3e:e5:
                    3c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:54:E0:E7:1C:D3:1D:B1:DE:77:D0:B1:E1:58:2C:99:D9:4F:6D:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/add92383-8350-31bd-b8d0-a6f8bc21162f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.74.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:be:d1:8b:f2:35:e7:88:d8:98:f2:22:14:aa:d0:44:95:0f:
         9a:da:70:2c:d7:ae:02:c7:95:24:44:34:43:ca:9c:3c:c4:c7:
         e9:f3:2b:4b:b8:1e:0e:37:d9:78:23:f6:95:01:2a:07:63:00:
         3b:b0:66:0e:68:56:56:67:04:8e:98:1b:fe:a6:1a:13:18:9c:
         21:a1:ae:07:63:ac:0f:5e:7f:33:b2:3a:f8:50:c7:18:58:d0:
         d5:18:50:5f:b4:da:2c:19:a6:c1:f6:43:5b:c6:ed:ce:b9:44:
         0d:80:c9:5a:e6:5e:8c:dc:8c:e6:52:79:d1:c3:c2:8e:cf:2a:
         4f:a7:34:eb:27:00:f6:a5:a5:10:5c:7b:de:42:7c:37:22:41:
         3b:81:28:a8:37:47:95:a9:e1:5f:4b:e0:de:2e:53:87:1c:0a:
         d6:c7:29:6e:09:53:4a:9a:23:c6:7e:5d:9f:b6:e2:75:dc:70:
         05:7f:3a:d3:69:71:2e:97:d5:82:75:bc:6d:73:58:9d:9d:2c:
         82:d2:7c:77:e7:98:3e:37:ad:15:bb:b7:e3:e9:76:bc:7c:a3:
         69:d4:22:7c:4f:a1:87:72:ef:2d:e6:93:df:4b:49:c7:5d:6c:
         3e:1e:06:7a:1c:90:b5:c9:87:35:ba:59:5a:0d:0b:9e:a0:49:
         4e:c7:82:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:30:46 2025 by rpki-client