Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/c7deab7e-d3b7-33fb-a2a6-fb8f6f91d319.roa
File:                     c7deab7e-d3b7-33fb-a2a6-fb8f6f91d319.roa (raw, json)
Hash identifier:          +EMeRLl3gG0vW+98/TDl0dH26bgUyqrnPGkh4SOG1PU=
Subject key identifier:   F6:94:DA:71:53:49:3B:99:6D:0E:97:75:A4:65:9D:98:14:85:41:73
Certificate issuer:       /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Certificate serial:       010D0C9F43285849350E80ECD1C6208A4A1F23C0
Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/c7deab7e-d3b7-33fb-a2a6-fb8f6f91d319.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     10747
IP address blocks:        45.42.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:80:ec:d1:c6:20:8a:4a:1f:23:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=56a186ec-3d5c-4f50-8a61-253a1c8a4290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f4:fb:00:9c:e0:28:fb:6b:82:77:31:8a:bc:
                    03:15:4e:48:86:48:4a:5a:07:a9:e9:05:02:9a:f5:
                    3f:d5:e2:28:e1:07:64:cb:09:b2:10:0d:53:49:b0:
                    54:78:d7:8f:53:5f:f9:82:c5:55:11:b5:e6:a4:32:
                    27:84:da:6e:6d:7c:2e:37:b1:36:92:c5:08:a2:46:
                    8b:4f:be:9b:b9:09:6e:d4:32:90:13:77:de:c3:e0:
                    15:2d:d0:aa:49:c3:3a:94:8b:98:45:05:5f:0b:c7:
                    74:40:58:8f:55:1b:6f:cd:55:fe:15:bd:f0:0a:f7:
                    33:94:0c:45:b7:cc:2a:cc:e6:97:b3:ee:2d:1b:77:
                    6b:b8:51:cb:ab:43:c0:28:7b:d3:cd:e2:4c:7f:c9:
                    75:c3:d4:9b:1f:95:7c:89:f5:98:3b:bd:3b:df:85:
                    e0:2a:8f:32:26:b0:c7:ed:e2:45:36:43:b6:3f:4c:
                    88:dd:f5:de:6f:4d:fb:f4:89:4a:db:b0:09:05:c7:
                    12:20:8f:af:5c:76:08:dc:b2:ce:86:eb:cc:b3:7f:
                    46:41:b7:89:96:11:83:c4:8c:bb:c3:72:6a:83:92:
                    f3:b1:b2:7a:93:e6:8d:34:6c:68:ed:bf:5c:9b:85:
                    89:c8:c3:5b:3a:65:42:e7:30:60:e7:89:f3:e9:19:
                    93:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:94:DA:71:53:49:3B:99:6D:0E:97:75:A4:65:9D:98:14:85:41:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/c7deab7e-d3b7-33fb-a2a6-fb8f6f91d319.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:f3:fa:57:f8:cc:e0:14:06:09:11:90:73:cb:0d:59:15:2c:
         7f:4f:19:20:5f:01:4a:5b:88:e1:0a:01:99:fe:07:5b:d9:fa:
         6f:07:fd:02:b6:35:a2:74:04:e4:85:dc:91:27:9c:e8:71:c6:
         0d:6e:b4:18:4c:9b:ed:5b:aa:23:f5:15:b1:2f:ae:86:96:32:
         63:45:a8:40:e1:fa:b6:d8:9c:ab:19:9f:d1:8d:10:62:d3:98:
         db:ad:c2:44:a3:2e:d3:3b:8a:fb:f4:63:ce:21:65:2d:89:16:
         f7:5a:0c:de:6c:73:72:80:a0:3e:58:20:bb:f8:62:72:d0:9c:
         6e:89:d1:4b:c3:10:04:fe:6e:fc:b4:af:98:64:31:25:57:c6:
         fe:a5:08:fa:dc:1c:bb:aa:f9:65:f2:d3:07:cd:9f:7c:9f:d0:
         30:c3:45:a0:d8:ac:42:6a:35:ea:89:79:56:e6:5d:b4:e2:09:
         0a:6f:c7:d3:3d:b6:d3:21:f3:be:3a:2d:61:87:71:7c:ff:91:
         06:7b:3d:d4:e7:b0:e9:9c:e5:ca:fe:76:ca:b8:17:89:54:26:
         52:e9:ec:ad:ea:a5:e9:2f:88:88:58:73:80:d1:1d:23:85:99:
         2d:ae:a1:f3:ed:28:85:a2:ff:19:83:63:4f:92:b8:38:3d:c7:
         18:5e:bd:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:03:37 2025 by rpki-client