Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/01890417-85b0-3fa8-b911-bc45f0339762.roa
File:                     01890417-85b0-3fa8-b911-bc45f0339762.roa (raw, json)
Hash identifier:          RstBeEdch/jZsYXxTz5y2OMJetC9DUXhejiqNPC4ZyI=
Subject key identifier:   37:52:E1:28:6F:B8:84:73:2B:CA:29:BF:EE:39:9B:54:F4:C5:CC:DB
Certificate issuer:       /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
Certificate serial:       010D0C9F43285848159FD97CD51BC3184475FDA0
Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/01890417-85b0-3fa8-b911-bc45f0339762.roa
Signing time:             Tue 03 Dec 2024 14:00:52 +0000
ROA not before:           Tue 03 Dec 2024 14:00:52 +0000
ROA not after:            Mon 03 Mar 2025 14:00:52 +0000
asID:                     16904
IP address blocks:        70.40.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:15:9f:d9:7c:d5:1b:c3:18:44:75:fd:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
        Validity
            Not Before: Dec  3 14:00:52 2024 GMT
            Not After : Mar  3 14:00:52 2025 GMT
        Subject: CN=52e64595-c84c-4d59-9e7f-d045a512c277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:66:9d:40:9c:e0:ba:33:73:e2:09:c8:20:ad:
                    f5:97:f6:69:41:8e:48:44:8d:63:53:15:80:7c:f0:
                    3b:39:f5:43:98:98:f5:ed:20:9d:c3:70:a3:67:69:
                    59:0c:8e:1e:7d:75:fb:7b:12:34:1b:15:2c:2c:cb:
                    c1:00:10:0d:02:bf:ae:b6:25:53:9c:5d:4d:40:15:
                    9d:ea:f9:d9:b3:da:39:3a:4c:84:ce:2b:04:ed:a4:
                    b7:47:19:9d:06:57:bc:0b:14:4d:36:7b:59:df:e0:
                    91:9c:7f:3b:33:5c:9c:aa:2d:05:89:62:79:6c:4a:
                    91:a9:18:8e:fa:97:3b:df:12:05:cb:c7:7d:1a:fb:
                    52:85:cf:3a:33:17:06:b7:0e:a0:98:9f:fb:26:8d:
                    70:05:84:10:fb:2d:c7:82:af:f4:47:ba:30:06:b6:
                    64:b6:d9:6d:a8:4b:10:2a:37:f0:8b:5e:20:c7:5e:
                    99:a5:f6:25:37:b0:ac:c3:0e:6e:05:eb:2d:ee:26:
                    05:a0:61:79:21:d7:e1:bb:71:9b:2b:f2:a4:d8:b7:
                    3d:37:0d:0e:2b:90:35:f1:f9:25:9d:9e:1b:e8:5b:
                    ed:42:77:6e:e2:e1:60:e8:85:4c:dd:20:00:57:a6:
                    ea:81:8a:1a:cb:22:50:ea:51:a1:28:0a:9d:fb:b6:
                    7c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:52:E1:28:6F:B8:84:73:2B:CA:29:BF:EE:39:9B:54:F4:C5:CC:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/01890417-85b0-3fa8-b911-bc45f0339762.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl

            X509v3 Authority Key Identifier:
                keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.40.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:60:5d:ba:32:97:b6:a2:62:59:9a:b2:5e:4a:0b:3c:46:e3:
         7c:8b:5b:34:cf:79:ab:46:51:b8:7d:5a:09:55:82:c6:48:0a:
         86:32:cb:0a:a5:10:ec:94:6e:3b:b6:ed:41:10:4b:41:ef:04:
         52:7a:98:62:20:d1:37:20:35:96:9b:f2:14:ea:7a:ae:a4:d8:
         3e:e1:9d:f5:85:31:cb:90:f7:ed:5e:ec:32:54:07:b1:c8:32:
         82:62:9c:08:f4:bd:4e:72:79:28:e5:79:70:55:a3:a3:0e:32:
         ae:52:06:2f:6b:27:3e:14:bc:0f:73:51:76:a1:be:f6:dd:a2:
         05:64:a7:2f:38:4e:6a:54:d0:7e:98:38:49:4b:fc:43:21:3b:
         96:16:a9:39:48:24:0f:8d:10:05:96:a6:3d:a1:56:67:36:29:
         84:9a:ec:6f:23:80:f1:16:81:cc:11:9b:1a:4e:dc:43:ba:ef:
         0c:e3:65:f6:f7:00:12:c8:2e:17:11:5b:a7:87:0f:42:64:82:
         53:d3:25:68:e6:aa:e7:fc:a7:3f:06:26:b6:8b:de:3d:fa:ce:
         37:9f:74:5e:cc:55:9e:a2:70:92:db:e5:bc:ac:2b:b1:b0:bf:
         4e:e0:98:db:ed:af:4f:d1:cc:dd:b1:84:ee:6e:8b:8e:0f:19:
         23:f4:58:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:37:15 2025 by rpki-client