Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2/0c23d664-e08d-36ae-bc28-bc57a72107fa.roa
File:                     0c23d664-e08d-36ae-bc28-bc57a72107fa.roa (raw, json)
Hash identifier:          ocaV9siGalgqmRd55xjt0dMqVUisBI72in70+ncNrcg=
Subject key identifier:   BA:77:3E:2B:56:56:88:12:CE:0A:B0:76:E4:8D:E4:6D:22:9D:5B:F0
Certificate issuer:       /CN=2dd18d53-59c8-427f-9c2f-1f62eab97cb2
Certificate serial:       010D0C9F43285849244E873D15E42EE832615480
Authority key identifier: 09:BA:D3:03:4B:6A:2C:C1:74:41:89:81:CB:15:5B:65:64:42:FF:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2/0c23d664-e08d-36ae-bc28-bc57a72107fa.roa
Signing time:             Mon 10 Mar 2025 13:00:52 +0000
ROA not before:           Mon 10 Mar 2025 13:00:52 +0000
ROA not after:            Sun 08 Jun 2025 13:00:52 +0000
asID:                     61112
IP address blocks:        45.41.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2/2dd18d53-59c8-427f-9c2f-1f62eab97cb2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2/2dd18d53-59c8-427f-9c2f-1f62eab97cb2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:24:4e:87:3d:15:e4:2e:e8:32:61:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dd18d53-59c8-427f-9c2f-1f62eab97cb2
        Validity
            Not Before: Mar 10 13:00:52 2025 GMT
            Not After : Jun  8 13:00:52 2025 GMT
        Subject: CN=cb781029-f15c-44aa-9616-69a26dca773c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:29:f3:9d:dd:eb:eb:82:9e:42:51:c7:fb:b0:
                    64:fe:fa:8f:e9:ac:59:f4:50:a4:48:53:d3:84:22:
                    c8:f6:61:84:37:22:d3:3c:83:d3:22:73:b5:a0:27:
                    e5:a9:31:8a:96:92:20:0f:96:6f:22:0c:7e:0a:e7:
                    7a:70:10:da:26:e3:37:ed:c9:cf:29:90:e6:d9:55:
                    3b:ac:ba:00:a9:ef:b6:90:b7:a1:da:9e:82:99:f5:
                    f5:d4:21:07:ed:08:3f:69:f5:7d:c2:b7:ce:f1:a2:
                    87:b3:90:8b:04:6b:15:3d:0b:b3:cb:21:04:e9:ac:
                    da:db:ea:2a:40:5d:65:4b:bd:05:fa:91:36:d8:2b:
                    26:e9:45:95:e7:50:10:2a:72:c4:a5:e2:66:dc:80:
                    ee:0a:43:3f:4d:30:d9:17:06:f5:87:d2:59:cc:9d:
                    0d:12:8f:6f:27:b4:91:1c:90:9a:8c:0c:bf:a1:7c:
                    e5:37:8d:ec:32:fe:e7:25:9b:ae:98:54:6d:60:03:
                    01:c7:91:c0:71:a5:e9:8a:cb:f6:01:73:64:2e:0e:
                    d0:94:64:df:dd:8c:a8:e9:bc:69:ef:9a:83:60:a5:
                    fb:02:8f:51:67:36:8d:2f:a4:c4:55:7b:ce:a2:66:
                    45:19:0a:57:11:dc:65:41:d5:be:6e:d1:cd:bc:35:
                    a5:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:77:3E:2B:56:56:88:12:CE:0A:B0:76:E4:8D:E4:6D:22:9D:5B:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2/0c23d664-e08d-36ae-bc28-bc57a72107fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2/2dd18d53-59c8-427f-9c2f-1f62eab97cb2.crl

            X509v3 Authority Key Identifier:
                keyid:09:BA:D3:03:4B:6A:2C:C1:74:41:89:81:CB:15:5B:65:64:42:FF:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.41.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:96:5a:f7:37:34:d9:76:41:1f:af:8d:01:bf:d3:34:27:49:
         d2:cf:6d:3a:5b:62:03:08:d0:a5:02:f1:15:fd:bc:69:22:ed:
         bb:b3:5c:a5:88:dd:43:2f:91:63:10:33:df:3e:5e:16:f8:01:
         d0:2d:05:49:1b:f5:9f:ab:34:97:0b:45:79:56:0f:c2:33:3e:
         d9:a7:21:ca:05:25:8a:2c:bd:4e:ae:87:18:5e:78:6a:cb:2e:
         a5:9d:d3:05:1a:75:46:38:2f:75:f7:af:a4:7b:8a:4b:80:b0:
         bd:d6:78:d5:3c:a5:fb:55:8d:f5:e1:4f:5d:b1:a1:6a:65:cd:
         c7:eb:20:f3:d3:06:76:9a:e7:42:40:5b:30:d8:1b:34:99:3c:
         b3:09:4d:36:de:74:ad:62:59:03:a0:65:49:29:29:aa:d2:ca:
         e9:c9:33:f4:cb:79:57:7d:50:f2:51:b7:52:a5:4e:02:72:3e:
         eb:49:4d:6d:73:ed:31:d7:3a:5a:58:5d:86:23:6e:6f:71:53:
         2c:58:cb:c7:3d:37:a6:ea:2a:31:9b:28:26:48:b6:57:d7:25:
         ec:d3:bb:2c:58:8a:ae:61:5d:ab:0c:7e:57:02:6b:72:9f:d7:
         70:96:ea:d6:49:cd:d1:07:ba:70:33:54:5f:02:29:b9:d5:f8:
         6d:3c:53:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:41:06 2025 by rpki-client