Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe/b1029df9-cad0-32d5-b53f-d2e308d6fff3.roa
File:                     b1029df9-cad0-32d5-b53f-d2e308d6fff3.roa (raw, json)
Hash identifier:          /Uus5/zXQc+lPU1RFk7Ffz6aZXOwzip+Yqx1m8ncmsk=
Subject key identifier:   85:C1:C2:D1:F8:57:08:78:B5:4D:EB:CE:DD:27:83:75:14:38:FA:0F
Certificate issuer:       /CN=ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe
Certificate serial:       010D0C9F43285848308B56CA6A337FD99B31ACA0
Authority key identifier: 22:61:4F:70:F7:39:6B:85:5D:27:5B:1F:0F:AD:AB:01:7B:55:A7:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe/b1029df9-cad0-32d5-b53f-d2e308d6fff3.roa
Signing time:             Fri 13 Dec 2024 05:26:26 +0000
ROA not before:           Fri 13 Dec 2024 05:26:26 +0000
ROA not after:            Thu 13 Mar 2025 04:26:26 +0000
asID:                     16509
IP address blocks:        45.45.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:30:8b:56:ca:6a:33:7f:d9:9b:31:ac:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe
        Validity
            Not Before: Dec 13 05:26:26 2024 GMT
            Not After : Mar 13 04:26:26 2025 GMT
        Subject: CN=b04e6ca9-4e74-4b78-9716-534884520e39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ed:3d:77:2d:be:61:d4:ea:8a:06:cb:d4:85:
                    c6:07:c1:e9:a5:2c:2c:b3:93:df:4d:8c:7c:7b:0e:
                    86:b0:0f:81:c4:8b:99:dd:60:3d:cb:cb:e7:dc:21:
                    c3:0e:08:78:5a:77:94:3c:80:4a:ba:46:4c:20:ec:
                    0c:ba:72:d9:2b:d3:81:4c:24:87:9e:de:b2:3a:4d:
                    60:89:25:d7:83:6f:f7:65:35:6e:4a:04:df:ac:31:
                    16:e9:fd:be:7f:b5:a4:74:35:12:f4:05:19:fa:95:
                    b7:6f:b8:3b:ff:2a:f5:c6:b2:9a:9a:3c:74:85:05:
                    3e:47:74:28:24:f6:4e:12:11:b8:43:4a:fb:3f:cd:
                    bc:9d:54:58:9a:8c:e8:bb:d5:82:be:f9:43:f5:b4:
                    9f:f8:67:7f:9f:99:fb:af:4d:6e:a7:c5:55:93:bf:
                    a1:88:ce:72:c6:ef:a1:82:c1:4a:76:c3:f0:bd:d1:
                    8e:39:42:10:70:3c:02:47:05:26:3e:d0:f4:ff:ee:
                    e5:85:d0:bb:11:bf:39:60:2b:a9:56:0e:d2:67:2f:
                    5b:ba:0f:06:51:a6:11:2d:00:c0:6e:a2:e9:c4:ff:
                    dd:cf:e5:0a:65:bb:8d:ad:e3:94:8f:c7:e3:f4:33:
                    01:7d:6f:81:4f:31:04:d3:41:c1:c5:fa:08:7e:91:
                    e8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:C1:C2:D1:F8:57:08:78:B5:4D:EB:CE:DD:27:83:75:14:38:FA:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe/b1029df9-cad0-32d5-b53f-d2e308d6fff3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe.crl

            X509v3 Authority Key Identifier:
                keyid:22:61:4F:70:F7:39:6B:85:5D:27:5B:1F:0F:AD:AB:01:7B:55:A7:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:b5:f0:80:4d:87:4e:2f:17:49:7e:4c:fe:3a:a9:69:c1:5f:
         91:68:9f:e7:8c:02:18:fe:96:d1:59:67:9b:2a:56:da:df:89:
         f0:55:88:52:cb:7f:ef:98:cc:c7:b3:39:1f:05:c9:58:44:12:
         02:23:ea:d4:f8:77:06:63:3e:2a:da:52:dc:a8:59:49:19:6e:
         2f:74:91:32:04:f6:f0:8c:af:c9:72:33:c2:4b:4e:5c:87:ca:
         f2:00:a1:af:10:5e:07:81:93:29:c9:86:34:70:ec:2a:59:96:
         a9:37:2b:db:0f:fe:05:b6:14:b2:89:40:72:29:ad:3e:03:b4:
         12:10:89:ea:05:ac:2b:8c:65:70:24:73:66:b9:2b:63:20:a9:
         5f:49:08:b8:1e:48:e7:87:ea:2f:df:42:ca:91:a7:71:b4:6b:
         dc:e1:40:bb:72:2c:42:b5:7c:89:e2:78:57:42:04:b0:0f:7e:
         f0:40:d4:9b:8b:8a:84:be:fb:76:a6:48:f2:22:14:6c:f8:00:
         16:2b:61:46:bd:4a:fa:75:c0:47:e6:be:22:ce:37:c8:86:24:
         f6:0a:69:09:77:67:15:a8:e6:0d:43:1a:62:8e:c0:d6:c7:a2:
         68:63:ae:d8:00:e4:e8:65:89:a9:f1:e4:7f:00:cb:6f:c2:6e:
         d4:f8:12:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:35:42 2025 by rpki-client