Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/70aeabb9-78e4-3a83-a5ee-5ea7b3049a54.roa
File:                     70aeabb9-78e4-3a83-a5ee-5ea7b3049a54.roa (raw, json)
Hash identifier:          pOXp/AOzzZtyQDt4Bs6GrJMOHNbpVc394ssmD3bzE9g=
Subject key identifier:   0A:9F:56:B1:95:A2:6D:D1:19:D1:22:0F:4E:27:DE:82:10:59:5B:D6
Certificate issuer:       /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Certificate serial:       010D0C9F4328584A14655E846AB08FD583D74C60
Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/70aeabb9-78e4-3a83-a5ee-5ea7b3049a54.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     198949
IP address blocks:        45.42.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:5e:84:6a:b0:8f:d5:83:d7:4c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=15a12f1c-6de0-42f2-8cae-11701c6bc064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:1f:a8:09:84:0d:55:16:66:a9:fc:f9:a7:bc:
                    55:c7:ba:c6:d5:e6:8f:54:7b:b7:8e:28:35:05:ac:
                    3f:b9:a9:39:9b:54:87:da:7a:21:ee:44:9a:22:39:
                    e1:c8:a2:d3:5f:ea:88:9e:c3:e0:20:d5:43:bf:ba:
                    1e:3a:8c:8d:3b:68:5f:f9:6c:0a:e0:89:a9:18:5e:
                    6e:b6:cf:90:ed:18:fa:2c:06:13:b2:3a:37:87:73:
                    65:d6:1c:16:cd:d7:21:64:b7:b1:5b:60:45:1c:e0:
                    48:63:73:3d:be:2e:7a:cb:09:8f:da:e1:8d:d6:8c:
                    18:28:08:d6:72:62:13:a2:8a:56:a6:78:cc:65:f7:
                    66:26:54:c6:35:c4:33:19:82:c0:69:79:39:50:9e:
                    f0:57:ed:ec:e8:3e:ef:71:5a:69:76:b7:3e:38:45:
                    d1:59:26:4d:da:62:3e:03:71:ed:de:0c:ec:f8:57:
                    6a:23:b9:dc:ef:e5:14:e5:fd:38:82:80:11:a4:2c:
                    12:b0:cc:f4:8d:75:f1:93:f7:8c:93:3b:0c:68:dc:
                    2b:3c:9d:c1:6a:fb:ef:81:aa:1c:73:60:35:fa:f1:
                    7e:f0:49:30:0a:01:03:c1:0b:08:47:5a:0e:01:13:
                    cc:7d:a1:fb:c4:a1:36:96:5b:21:0d:7c:4c:52:c5:
                    27:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:9F:56:B1:95:A2:6D:D1:19:D1:22:0F:4E:27:DE:82:10:59:5B:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/70aeabb9-78e4-3a83-a5ee-5ea7b3049a54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:53:7a:f7:25:3f:91:60:b5:50:cc:3f:01:43:15:96:0b:13:
         5a:d7:11:38:5c:fb:c1:6c:82:7e:05:bf:80:74:a4:00:e2:95:
         72:6b:29:d9:47:f5:a2:63:cd:55:38:4d:6d:94:e5:e3:9a:86:
         5e:c3:a8:a0:74:d2:42:e3:5b:02:f9:e9:4e:93:74:7e:a6:be:
         62:25:c0:b0:ab:c7:0f:26:44:5e:30:4d:c7:75:d3:63:d7:fb:
         c2:e6:2d:05:9d:e0:fa:e1:a5:e9:52:6c:99:c1:0d:1f:4a:7a:
         e1:c6:18:f5:4f:44:38:70:4c:41:6a:7c:39:07:bc:60:f7:ab:
         06:f5:52:ca:bc:9c:a6:5f:8b:34:4d:e4:8f:2b:4b:42:78:8a:
         8e:53:8e:d4:1c:4a:f5:81:b2:ac:ed:87:d5:8a:8e:e2:cd:07:
         38:47:8a:ac:13:f6:5d:ff:2f:c0:a6:f0:17:f4:e4:47:92:1f:
         94:84:c4:97:cb:4c:d2:af:0d:23:2e:2b:05:7f:e2:ae:50:3d:
         76:b7:4b:64:94:e7:47:b5:d0:09:70:51:98:10:31:3e:49:17:
         1e:ba:4a:42:70:e9:34:36:e4:1a:c9:27:60:19:c3:06:c0:fa:
         aa:11:b7:9c:37:a2:c4:8e:91:23:f3:3e:64:23:37:f8:de:6c:
         02:c1:07:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:47:57 2025 by rpki-client