Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/5a3a0e4f-4839-3877-86b8-ec3ff681e3f1.roa
File:                     5a3a0e4f-4839-3877-86b8-ec3ff681e3f1.roa (raw, json)
Hash identifier:          SUMPcSHTFGtky4BhIRIiqGRizlEwgUcpGH9drBFw+zM=
Subject key identifier:   1A:15:C9:C9:43:21:28:F8:CE:44:82:C0:21:5F:F4:06:E6:3B:CF:CC
Certificate issuer:       /CN=0c772b4b-15fb-4b38-b505-dfe915dae9cd
Certificate serial:       010D0C9F43285848A830B541A4A208111B772B00
Authority key identifier: F1:45:52:CC:E6:22:4E:29:4E:15:2D:5C:E4:BD:DD:05:3A:08:B5:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/5a3a0e4f-4839-3877-86b8-ec3ff681e3f1.roa
Signing time:             Sat 25 Jan 2025 02:00:39 +0000
ROA not before:           Sat 25 Jan 2025 02:00:39 +0000
ROA not after:            Fri 25 Apr 2025 01:00:39 +0000
asID:                     34553
IP address blocks:        45.59.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/0c772b4b-15fb-4b38-b505-dfe915dae9cd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/0c772b4b-15fb-4b38-b505-dfe915dae9cd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a8:30:b5:41:a4:a2:08:11:1b:77:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c772b4b-15fb-4b38-b505-dfe915dae9cd
        Validity
            Not Before: Jan 25 02:00:39 2025 GMT
            Not After : Apr 25 01:00:39 2025 GMT
        Subject: CN=91c4d2f8-7bac-4fd2-b056-59ba712e1ce1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:fa:40:93:ae:c9:30:60:9f:94:1c:a0:5d:67:
                    9b:9c:ca:89:27:bc:d4:02:00:3b:95:0d:8f:f5:93:
                    52:e0:e0:e7:9e:47:a4:0e:f9:cb:c0:f6:c3:a5:fc:
                    1e:40:7d:7d:b5:1e:01:26:99:b8:9e:7a:d3:bf:7c:
                    60:9e:e4:2d:1f:a8:9c:2a:03:a0:20:ed:39:f1:ec:
                    1d:68:88:0d:4f:d6:fd:17:ef:91:71:51:65:00:05:
                    1d:23:21:4c:88:6b:ca:a0:49:7a:d3:c8:14:c1:43:
                    be:34:ac:f4:db:7f:6c:73:04:a9:4b:f8:47:07:1d:
                    1b:1c:0e:6c:a8:bb:4c:33:84:27:a1:ce:cf:73:0f:
                    b2:08:11:e5:77:fd:75:52:d9:24:7e:2f:30:41:1c:
                    a2:4b:d9:6b:22:8a:6e:b9:86:a5:ad:51:fc:c0:d1:
                    b8:11:2c:12:38:62:e7:d9:f5:8d:4b:24:a7:38:5c:
                    b2:2a:e1:96:c2:fd:67:55:57:5f:f2:73:fa:3c:b4:
                    28:dc:0e:94:ad:25:1c:37:6b:4e:f8:c2:6f:25:16:
                    8e:86:f5:e0:15:6e:f6:81:01:9e:15:18:ac:4b:a1:
                    01:d5:1e:00:ff:17:80:c7:0e:0f:fe:1e:86:b9:15:
                    cc:31:7f:8e:5e:ad:48:d4:20:94:f2:37:f6:25:2f:
                    e0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:15:C9:C9:43:21:28:F8:CE:44:82:C0:21:5F:F4:06:E6:3B:CF:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/5a3a0e4f-4839-3877-86b8-ec3ff681e3f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/0c772b4b-15fb-4b38-b505-dfe915dae9cd.crl

            X509v3 Authority Key Identifier:
                keyid:F1:45:52:CC:E6:22:4E:29:4E:15:2D:5C:E4:BD:DD:05:3A:08:B5:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:b1:a4:9d:e9:c1:d9:b2:c2:7b:3d:70:81:4a:d0:9c:03:30:
         a0:6e:0d:e5:33:0a:84:00:70:49:3c:5b:ab:99:88:ee:36:ed:
         21:b2:9a:50:13:fd:ce:40:d3:92:7c:01:ff:36:ff:55:04:14:
         8d:09:91:0e:dc:be:fe:2a:4e:3c:ef:90:44:9c:e8:8c:e2:d8:
         2a:7c:f4:15:bb:73:83:85:d8:7c:8b:82:95:bd:50:5e:7e:78:
         fd:82:f0:fa:0c:dc:84:60:5e:94:49:82:07:d9:e3:29:a1:b7:
         8e:db:65:52:92:c6:fe:4e:93:23:7c:14:ca:96:08:98:7c:65:
         fd:c2:e1:4b:e8:6c:50:4b:7c:81:f7:df:55:a6:de:19:f3:01:
         93:52:46:62:c6:4c:24:59:91:f0:d5:80:13:dc:55:c6:a3:80:
         58:66:5c:91:0e:96:05:6c:58:fe:9c:c9:b6:81:ef:a8:ee:af:
         74:3a:a9:39:d9:e3:81:44:dd:38:4f:18:c4:c3:e9:90:c6:cf:
         92:99:72:97:c9:7d:a6:30:56:53:91:f9:12:65:fb:78:9a:1f:
         71:1e:97:d1:94:a1:47:3c:0a:7d:37:f4:9f:b7:30:82:f7:92:
         fd:8a:bb:eb:48:8c:97:d7:b2:0c:e2:d2:09:b8:01:51:5b:a1:
         f4:39:35:ea
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEioMLVBpKIIERt3KwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGM3NzJiNGItMTVmYi00YjM4LWI1MDUtZGZlOTE1ZGFl
OWNkMB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk
OTFjNGQyZjgtN2JhYy00ZmQyLWIwNTYtNTliYTcxMmUxY2UxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vpAk67JMGCflBygXWebnMqJJ7zUAgA7lQ2P
9ZNS4ODnnkekDvnLwPbDpfweQH19tR4BJpm4nnrTv3xgnuQtH6icKgOgIO058ewd
aIgNT9b9F++RcVFlAAUdIyFMiGvKoEl608gUwUO+NKz0239scwSpS/hHBx0bHA5s
qLtMM4Qnoc7Pcw+yCBHld/11Utkkfi8wQRyiS9lrIopuuYalrVH8wNG4ESwSOGLn
2fWNSySnOFyyKuGWwv1nVVdf8nP6PLQo3A6UrSUcN2tO+MJvJRaOhvXgFW72gQGe
FRisS6EB1R4A/xeAxw4P/h6GuRXMMX+OXq1I1CCU8jf2JS/gRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBoVyclDISj4zkSCwCFf9AbmO8/MMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wYzc3
MmI0Yi0xNWZiLTRiMzgtYjUwNS1kZmU5MTVkYWU5Y2QvNWEzYTBlNGYtNDgzOS0z
ODc3LTg2YjgtZWMzZmY2ODFlM2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGM3NzJiNGItMTVmYi00YjM4LWI1
MDUtZGZlOTE1ZGFlOWNkLzBjNzcyYjRiLTE1ZmItNGIzOC1iNTA1LWRmZTkxNWRh
ZTljZC5jcmwwHwYDVR0jBBgwFoAU8UVSzOYiTilOFS1c5L3dBToItXIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wYzc3MmI0Yi0xNWZiLTRiMzgtYjUwNS1kZmU5
MTVkYWU5Y2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALTuNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAL+xpJ3pwdmywns9cIFK0JwDMKBuDeUzCoQAcEk8W6uZiO427SGymlAT
/c5A05J8Af82/1UEFI0JkQ7cvv4qTjzvkESc6Izi2Cp89BW7c4OF2HyLgpW9UF5+
eP2C8PoM3IRgXpRJggfZ4ymht47bZVKSxv5OkyN8FMqWCJh8Zf3C4UvobFBLfIH3
31Wm3hnzAZNSRmLGTCRZkfDVgBPcVcajgFhmXJEOlgVsWP6cybaB76jur3Q6qTnZ
44FE3ThPGMTD6ZDGz5KZcpfJfaYwVlOR+RJl+3iaH3Eel9GUoUc8Cn039J+3MIL3
kv2Ku+tIjJfXsgzi0gm4AVFbofQ5Neo=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:53:24 2025 by rpki-client