Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/e57ca40f-e8d2-3131-9b16-89233df0e99d.roa
File:                     e57ca40f-e8d2-3131-9b16-89233df0e99d.roa (raw, json)
Hash identifier:          eoDjPS4VZ9adUytI+XuoZV/koZn5tz1jTB1d2jIFJ/0=
Subject key identifier:   AD:47:09:A6:2B:68:23:1E:79:B2:7D:B9:AA:5D:B7:01:04:A5:AB:0F
Certificate issuer:       /CN=c554a280-22a1-477c-97bf-f23a7f33a0c0
Certificate serial:       010D0C9F432858491D7178AD5681390107D11180
Authority key identifier: BC:0E:50:C6:09:1A:EE:F3:D5:CA:17:87:86:B6:A9:50:1D:DC:59:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/e57ca40f-e8d2-3131-9b16-89233df0e99d.roa
Signing time:             Sat 08 Mar 2025 02:00:39 +0000
ROA not before:           Sat 08 Mar 2025 02:00:39 +0000
ROA not after:            Fri 06 Jun 2025 01:00:39 +0000
asID:                     33185
IP address blocks:        45.45.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/c554a280-22a1-477c-97bf-f23a7f33a0c0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/c554a280-22a1-477c-97bf-f23a7f33a0c0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1d:71:78:ad:56:81:39:01:07:d1:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c554a280-22a1-477c-97bf-f23a7f33a0c0
        Validity
            Not Before: Mar  8 02:00:39 2025 GMT
            Not After : Jun  6 01:00:39 2025 GMT
        Subject: CN=0f86b7da-d6db-4997-8b5a-22805e8d391b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:1d:04:80:cd:45:93:0d:f9:d9:87:52:d5:9c:
                    bb:9e:b3:99:d2:7d:db:18:e4:18:ec:fc:0d:2a:e3:
                    2a:cf:9e:bc:1f:4a:56:59:6f:8c:ba:14:e4:61:96:
                    3e:12:3a:40:45:ee:59:85:6d:c7:19:73:66:f2:7f:
                    4e:ec:42:47:44:98:05:8e:bc:19:4c:1c:ba:2a:3b:
                    5f:0d:f8:5f:9c:6f:7e:2c:b3:40:fd:c6:e6:78:fc:
                    75:70:e6:77:36:4f:ab:6d:b6:9d:22:e7:bd:5e:42:
                    db:28:d3:b0:1b:2a:c7:ce:5a:42:b9:3b:1a:92:89:
                    bd:85:b9:61:01:54:f5:1d:a0:67:a2:7e:04:9b:7b:
                    b3:e6:f7:f2:c7:ec:2e:40:a0:a0:17:81:d8:48:18:
                    57:a5:85:f9:d8:d7:3a:4b:df:55:14:b2:80:23:83:
                    66:2f:4c:87:a9:f7:15:89:ec:35:c7:68:df:61:42:
                    a2:04:c6:da:58:df:cf:71:a7:82:8b:66:54:7b:57:
                    64:ea:ff:b2:6f:39:cb:f1:43:0a:17:c9:8f:3f:cc:
                    95:33:b7:1c:6e:f9:8e:94:3f:5d:07:0d:70:3a:67:
                    a1:c3:10:17:73:76:b3:a6:11:55:4e:88:e2:7f:d7:
                    2d:a5:21:6c:62:84:35:1f:cf:1c:f1:1c:3f:a7:26:
                    5a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:47:09:A6:2B:68:23:1E:79:B2:7D:B9:AA:5D:B7:01:04:A5:AB:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/e57ca40f-e8d2-3131-9b16-89233df0e99d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/c554a280-22a1-477c-97bf-f23a7f33a0c0.crl

            X509v3 Authority Key Identifier:
                keyid:BC:0E:50:C6:09:1A:EE:F3:D5:CA:17:87:86:B6:A9:50:1D:DC:59:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:ab:e4:0e:d4:69:2d:ae:c1:87:96:8d:5a:94:9a:6c:6d:6f:
         7a:7a:d7:9d:33:9c:b6:25:c7:88:6e:39:e9:99:5a:62:73:9b:
         d5:c6:b1:be:f5:c9:38:4e:e6:f0:22:d2:4b:02:0c:07:8f:ac:
         ce:1c:d1:ba:9a:f7:49:68:a8:30:a7:ce:d8:a3:00:36:c5:16:
         e0:b0:b6:49:2d:af:a9:0c:1a:b2:e8:4f:ff:04:2e:a3:fc:3a:
         5e:7e:02:cd:a6:d7:84:c1:eb:43:1a:80:b2:df:d6:07:8f:06:
         ad:f7:8c:9c:32:be:53:00:7d:2d:a1:2c:6e:ea:ea:7f:6b:fe:
         d8:c6:88:64:6a:ac:b2:e2:a7:a7:1c:e6:a1:4a:16:21:17:1d:
         bd:2d:98:0e:f5:97:5d:4d:55:fe:7f:ec:07:bc:f0:64:4b:39:
         a5:92:c1:3c:62:a1:0d:c2:d0:35:ed:07:7b:e8:1e:c0:da:5e:
         79:c6:94:ec:c6:43:b9:d7:ab:6d:e8:70:ba:75:49:24:58:9a:
         97:e3:b5:b7:c0:06:3d:c0:ee:59:1c:07:79:74:a0:25:e0:dd:
         84:09:41:99:1a:74:70:99:50:4d:78:d2:01:7b:7d:f9:ea:cc:
         f5:46:ff:c6:37:82:31:d6:50:65:13:82:03:2c:77:15:97:08:
         66:a5:04:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:48:13 2025 by rpki-client