Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/9869b5b5-ebf9-3155-b17d-e637bdb75e61.roa
File:                     9869b5b5-ebf9-3155-b17d-e637bdb75e61.roa (raw, json)
Hash identifier:          okFBMdjMFo6C1biSG0oLKQ7SxUfMOE9xfmFh4LFM850=
Subject key identifier:   F5:6E:6B:0D:4C:4D:C3:85:08:8F:46:1B:9E:79:BC:FC:D7:FA:35:65
Certificate issuer:       /CN=451e8d9f-d9ea-45cf-8fb9-2811e86b81b2
Certificate serial:       010D0C9F43285848547030AD5542AA203946BFE0
Authority key identifier: F2:B3:28:9C:11:A4:6A:18:99:01:CF:9B:8D:24:3E:97:D0:04:17:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/9869b5b5-ebf9-3155-b17d-e637bdb75e61.roa
Signing time:             Thu 26 Dec 2024 02:00:40 +0000
ROA not before:           Thu 26 Dec 2024 02:00:40 +0000
ROA not after:            Wed 26 Mar 2025 01:00:40 +0000
asID:                     6206
IP address blocks:        45.126.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:54:70:30:ad:55:42:aa:20:39:46:bf:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=451e8d9f-d9ea-45cf-8fb9-2811e86b81b2
        Validity
            Not Before: Dec 26 02:00:40 2024 GMT
            Not After : Mar 26 01:00:40 2025 GMT
        Subject: CN=807fb0be-942c-4399-b96d-1bbd51c98bca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:88:c8:6b:42:3c:3d:05:d5:14:de:bf:11:d3:
                    7a:f2:61:c2:0a:91:e2:5a:8f:41:81:75:b2:10:76:
                    8e:4e:cc:2e:ac:37:12:56:06:da:27:cd:4a:31:e1:
                    a4:75:53:82:ae:99:5c:c6:31:51:35:00:57:71:45:
                    94:4e:cd:f1:f7:9a:2b:54:80:96:0e:d0:6f:17:f0:
                    d9:8f:40:bf:c2:03:ec:2b:63:24:6e:da:93:de:ab:
                    6e:34:76:cd:c6:94:45:05:81:38:4c:d5:f6:db:58:
                    cd:13:d6:77:36:58:48:5b:dd:44:02:01:c5:08:c1:
                    fd:2b:ad:a6:a1:65:6b:b6:96:24:66:b7:92:a6:fb:
                    3f:b0:95:7d:49:08:69:b3:78:5d:2b:82:8c:8a:1f:
                    c4:23:0c:22:29:36:ce:f1:5a:6f:a5:29:38:8e:50:
                    4d:cc:03:fd:5b:d2:08:45:89:d6:f0:ac:16:54:73:
                    a5:a3:0c:fc:d7:0d:21:44:d2:e8:df:0e:f5:bd:53:
                    d0:14:c4:65:0c:2b:d1:47:6b:b5:69:aa:bb:3c:a9:
                    31:f6:2c:f6:08:16:5e:23:f4:07:69:07:0a:7a:29:
                    f7:4f:a7:57:13:13:fc:e5:d3:58:80:52:38:c1:0e:
                    7e:9a:c7:61:03:dc:9a:f2:53:44:72:b9:ad:0c:62:
                    08:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:6E:6B:0D:4C:4D:C3:85:08:8F:46:1B:9E:79:BC:FC:D7:FA:35:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/9869b5b5-ebf9-3155-b17d-e637bdb75e61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.crl

            X509v3 Authority Key Identifier:
                keyid:F2:B3:28:9C:11:A4:6A:18:99:01:CF:9B:8D:24:3E:97:D0:04:17:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.126.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:6b:a5:7b:e4:21:ba:6a:3e:d4:0c:46:20:00:d5:b5:b2:bf:
         5a:c6:66:2b:e9:5c:08:fa:d7:5a:9a:a0:24:d3:ce:aa:4b:4e:
         50:70:45:f0:fe:ff:6d:e0:13:9c:b3:86:5c:42:d0:25:03:bd:
         4a:c0:e0:38:ca:2c:dd:af:5f:3e:4a:da:62:cd:4b:3b:e7:e7:
         00:2d:12:a5:ab:64:38:66:19:b8:25:79:91:9f:68:8b:8f:a2:
         b9:8d:92:15:12:4e:06:58:60:e2:d2:98:2f:f2:87:32:60:39:
         eb:59:2c:93:41:df:5b:25:83:f8:a2:5c:f1:ea:78:84:d4:08:
         d8:50:4f:3c:38:f0:cf:13:f1:92:38:e8:ce:f0:57:15:ff:bd:
         e2:e5:1b:76:bf:2f:50:86:ed:c0:08:d9:d9:3d:11:37:29:fe:
         0b:19:37:07:d1:fa:7c:03:c8:10:51:17:82:14:2e:8c:1b:31:
         b8:8d:1e:96:f1:42:6a:37:b3:c9:14:75:d7:cf:1d:c9:df:36:
         7c:a9:ef:f6:d5:7e:34:36:c5:e2:8e:28:6c:7d:51:5d:13:86:
         48:c6:a0:6d:f9:bb:85:b0:ab:9b:4d:14:45:db:72:b9:58:78:
         e8:1b:37:67:a9:d8:2b:77:cf:95:c3:1c:8f:a0:2d:aa:dd:cd:
         4a:63:2e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:08:36 2025 by rpki-client