Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/691ae22d-7806-395b-817d-c1c3ecca0f3e.roa
File:                     691ae22d-7806-395b-817d-c1c3ecca0f3e.roa (raw, json)
Hash identifier:          kKyOU6aYbmCOr2ZQZH3ghDuEkUtRot59JmU6ljQq5lo=
Subject key identifier:   37:75:83:75:D6:DD:42:35:8F:DC:92:99:1F:00:0C:2B:E5:A8:03:19
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584886B079A2B04D864906559BC0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/691ae22d-7806-395b-817d-c1c3ecca0f3e.roa
Signing time:             Mon 13 Jan 2025 02:00:40 +0000
ROA not before:           Mon 13 Jan 2025 02:00:40 +0000
ROA not after:            Sun 13 Apr 2025 01:00:40 +0000
asID:                     29802
IP address blocks:        45.40.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Feb 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:86:b0:79:a2:b0:4d:86:49:06:55:9b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jan 13 02:00:40 2025 GMT
            Not After : Apr 13 01:00:40 2025 GMT
        Subject: CN=a1321169-746a-4823-9d57-788fdc284d8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:32:04:d5:6f:80:14:20:27:3e:92:5f:a5:dc:
                    bd:54:69:36:56:d8:16:75:bd:11:63:c5:da:31:e2:
                    f7:34:56:72:ab:c2:15:34:1c:33:74:f9:87:99:b0:
                    4c:78:5e:66:a8:7f:3d:7e:7d:01:f7:40:36:d0:55:
                    31:6d:a5:b0:95:f1:4e:56:1a:ca:99:b6:2f:81:50:
                    ca:8c:c3:30:17:0c:8e:64:d5:48:3f:0d:32:8f:a0:
                    72:d3:df:5a:94:5a:63:e7:57:05:06:d1:dd:9a:d3:
                    d1:9f:f5:8d:81:a1:99:93:de:f4:82:62:f8:f0:b5:
                    f4:e9:b7:a6:3a:10:21:2f:b1:e1:5e:24:48:ed:2d:
                    b1:0d:eb:8f:f8:92:c1:06:a2:85:af:18:21:52:53:
                    04:bd:6f:19:ab:4c:23:3b:e5:8d:75:91:1a:52:26:
                    55:d0:f2:06:1b:af:0d:dd:2e:3b:bc:7d:cf:86:e9:
                    4f:ac:92:10:57:b2:b2:29:23:62:38:80:3e:26:0a:
                    54:8e:87:e3:ee:62:64:92:3e:74:c1:27:dd:92:9c:
                    be:7a:c4:b4:70:b4:29:c0:99:25:77:59:8e:f9:6d:
                    43:ae:e3:45:9b:95:71:bb:90:ab:b4:b6:10:a4:ef:
                    f8:ac:8b:4c:e5:52:2f:99:72:62:34:3a:d3:f1:b7:
                    4a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:75:83:75:D6:DD:42:35:8F:DC:92:99:1F:00:0C:2B:E5:A8:03:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/691ae22d-7806-395b-817d-c1c3ecca0f3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.40.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d9:0a:2c:e4:12:07:70:06:c9:36:da:85:42:cc:9c:48:e2:ea:
         b1:2a:bc:4b:92:47:c1:91:5c:a1:ae:14:4f:89:72:04:81:f1:
         27:c3:a0:b8:c0:59:1e:54:68:68:98:d3:b6:d1:65:95:9b:68:
         62:ef:47:87:f5:63:25:00:57:37:13:6e:07:b5:b5:f3:69:5c:
         b6:a6:fb:40:a4:68:75:69:43:f6:14:01:9f:df:c7:58:fd:a6:
         e9:5f:a2:3c:51:f1:8d:1b:5d:4d:74:0a:88:8f:54:03:ed:ac:
         d8:b2:42:18:bc:0d:9a:66:72:f2:e4:f5:0c:0e:0d:ca:96:61:
         1d:4c:23:5b:79:10:b5:83:55:fa:d0:66:bd:b5:39:8f:86:a0:
         79:11:8f:f0:60:58:81:b3:17:ba:d1:68:9f:bd:dc:43:34:16:
         93:3d:c9:56:74:9a:5f:8e:ed:11:9a:98:ba:26:42:10:96:13:
         2b:e1:6a:2b:e1:3d:8b:be:89:fb:ab:c9:87:0b:15:63:61:d7:
         3b:99:31:55:02:20:4b:a4:15:d1:6c:07:5f:5c:8e:88:50:c5:
         19:96:fc:28:89:f1:88:97:2e:ed:48:49:1f:72:35:48:12:09:
         34:6a:e5:fe:fb:68:6e:11:89:b9:94:77:1e:52:26:94:ab:38:
         42:d8:a8:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 15 17:11:03 2025 by rpki-client