Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d35be811-7a73-344e-aadc-fae241bc30ec.roa
File:                     d35be811-7a73-344e-aadc-fae241bc30ec.roa (raw, json)
Hash identifier:          nop8icgKeuE3SUDr9yHiA9BGCpmpRI+iFv506IFTYJ4=
Subject key identifier:   64:68:D4:71:D4:DC:85:95:25:29:BA:9A:A9:DC:F2:42:2F:B5:C8:A9
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285848E8E6DCC10541F65DE792D300
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d35be811-7a73-344e-aadc-fae241bc30ec.roa
Signing time:             Mon 17 Feb 2025 06:19:35 +0000
ROA not before:           Mon 17 Feb 2025 06:19:35 +0000
ROA not after:            Sun 18 May 2025 05:19:35 +0000
asID:                     213676
IP address blocks:        45.74.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Feb 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e8:e6:dc:c1:05:41:f6:5d:e7:92:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Feb 17 06:19:35 2025 GMT
            Not After : May 18 05:19:35 2025 GMT
        Subject: CN=93b68768-f21c-419d-9fa1-0bd38c6a5d2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:95:e9:b5:6a:1a:f5:8f:13:a0:98:f9:d3:ad:
                    31:76:98:f8:2a:01:31:d1:ac:d8:96:1b:d9:83:4f:
                    33:82:00:e1:8e:f4:12:0a:55:59:91:a3:a3:05:a5:
                    a9:0c:83:fa:a1:58:6b:ab:f7:64:3a:c3:6f:7d:fd:
                    4e:33:9a:3d:8e:a3:76:41:e4:b4:a8:6a:cd:ee:06:
                    80:60:e2:d8:67:b6:54:61:49:b0:fb:cf:4d:43:c8:
                    77:3b:29:1f:25:2f:45:4e:8e:3b:b3:67:03:49:05:
                    98:db:f3:4f:24:5b:d3:0b:78:f1:9e:59:9d:f4:02:
                    4e:98:b5:9d:c3:0f:25:79:24:05:28:fb:d4:91:49:
                    61:35:f6:24:06:aa:91:e2:ad:d9:a3:6b:dc:85:04:
                    cf:f9:c6:69:f8:96:a6:eb:31:0a:66:ec:51:eb:e9:
                    ba:f2:b4:33:5d:6f:84:eb:36:75:a8:ad:e0:1b:e0:
                    1f:cc:da:4f:67:47:b3:21:bf:6c:94:3e:46:36:54:
                    d6:e8:c1:5c:3a:14:cf:e4:71:42:3e:64:34:d6:3f:
                    84:c0:af:73:03:64:ff:9a:f5:84:31:ea:a0:9c:2b:
                    f5:9c:3b:a8:ac:1b:01:c1:00:80:1d:f8:c3:9c:da:
                    ed:fe:78:b1:51:91:ff:6e:18:9a:f5:0e:27:9c:f2:
                    5b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:68:D4:71:D4:DC:85:95:25:29:BA:9A:A9:DC:F2:42:2F:B5:C8:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d35be811-7a73-344e-aadc-fae241bc30ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.74.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:2c:21:f4:81:89:6b:58:0c:ae:eb:a2:a5:eb:2c:e8:84:13:
         f0:a8:39:ea:fa:e3:fe:f7:92:92:8a:82:40:f9:97:b4:bb:47:
         b2:23:e6:d4:bd:fa:40:e0:38:3e:72:ee:bf:42:3f:ca:2c:bc:
         1d:28:a0:56:f4:7e:3f:08:8a:46:cf:e9:da:96:3a:23:67:30:
         08:46:76:11:48:22:52:1b:ac:f6:f2:5e:1e:4f:89:18:3e:34:
         e7:f5:2c:04:26:31:a6:ca:b7:aa:12:75:77:8a:0e:1c:22:b3:
         a3:f3:b0:c0:70:0b:d8:db:45:7d:b8:94:b9:14:22:a4:9a:05:
         58:68:bc:45:bc:a0:64:4a:ef:ed:52:fa:9b:25:17:b3:b9:f7:
         12:26:c1:23:58:ea:b9:0a:a2:5f:96:80:27:31:d8:aa:5c:5a:
         c6:19:a1:5c:59:27:0b:58:ef:ca:3b:73:c4:16:56:8f:8c:e1:
         1a:98:70:a1:b1:f9:f8:80:36:9c:85:f2:10:e1:09:32:59:ca:
         b5:17:ba:22:fc:f6:93:e0:10:ce:06:86:da:ee:7b:1b:7f:86:
         43:fb:4c:1d:3a:df:11:a3:9d:2d:e8:36:9f:06:6c:6b:f2:47:
         88:df:5f:ce:68:a1:3f:d8:dd:a8:41:2d:2d:75:31:11:cd:86:
         28:27:a8:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:50:36 2025 by rpki-client