Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/c78747c8-b26e-3828-8db3-8b21a46baf67.roa
File:                     c78747c8-b26e-3828-8db3-8b21a46baf67.roa (raw, json)
Hash identifier:          9BLGDNmbjGVfXms5XS6hmbHepCVkiAoOmmrWw6z7j9g=
Subject key identifier:   CE:F9:5E:4C:0D:43:51:06:33:74:3D:31:50:AC:37:E3:44:37:17:36
Certificate issuer:       /CN=48f8534f-57cd-45ba-bfa4-ce60842463a4
Certificate serial:       010D0C9F432858493C0924A3878CE02079FC0D20
Authority key identifier: E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/c78747c8-b26e-3828-8db3-8b21a46baf67.roa
Signing time:             Wed 19 Mar 2025 01:00:40 +0000
ROA not before:           Wed 19 Mar 2025 01:00:40 +0000
ROA not after:            Tue 17 Jun 2025 01:00:40 +0000
asID:                     212477
IP address blocks:        45.59.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3c:09:24:a3:87:8c:e0:20:79:fc:0d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48f8534f-57cd-45ba-bfa4-ce60842463a4
        Validity
            Not Before: Mar 19 01:00:40 2025 GMT
            Not After : Jun 17 01:00:40 2025 GMT
        Subject: CN=e810ccc7-d10f-4008-a318-b805bdc6ecfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4f:92:e8:88:a2:23:b6:f0:25:85:4e:05:ec:
                    09:56:07:f0:00:5b:b4:85:ff:6b:d6:7b:a0:42:6f:
                    c4:f4:f6:60:dd:66:4d:09:f5:32:67:e7:e0:c8:14:
                    e9:53:a3:bb:af:22:c2:eb:2f:a1:9e:3f:83:14:c3:
                    d2:32:91:90:78:a6:eb:77:9f:48:9a:bc:83:22:99:
                    2c:1a:21:23:e0:12:38:a3:91:6c:a4:2e:46:1f:ea:
                    3c:79:fd:55:c8:d2:8c:73:4a:5e:3d:45:7c:f3:a8:
                    4c:ec:b1:f8:4a:b8:e4:54:92:06:1f:fb:2c:fe:9d:
                    42:24:06:55:6d:31:39:3e:45:e7:55:11:a1:3a:6c:
                    7f:b1:3c:ef:3f:92:16:db:04:b1:47:82:e1:20:b9:
                    67:44:d8:2c:b7:ea:a3:e2:52:b9:8e:ac:3d:b8:7f:
                    dc:0c:91:37:95:2e:45:d1:3a:46:2b:95:dc:f3:d1:
                    88:db:66:c4:9f:e8:82:7d:b7:3b:dc:b1:7d:ea:ff:
                    b3:bf:ab:b9:21:20:01:27:ec:bb:bf:e9:5e:31:e4:
                    c8:92:04:07:65:bc:b5:02:36:3e:3b:3a:74:26:6d:
                    30:b5:24:97:cf:c7:af:d8:3a:cc:65:88:a2:2d:b7:
                    60:f8:bf:dd:27:17:ec:c8:2e:36:a0:d9:b1:1e:0a:
                    54:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:F9:5E:4C:0D:43:51:06:33:74:3D:31:50:AC:37:E3:44:37:17:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/c78747c8-b26e-3828-8db3-8b21a46baf67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.crl

            X509v3 Authority Key Identifier:
                keyid:E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:3c:3e:e4:08:0f:23:a0:fc:37:87:82:ca:25:6d:2b:89:91:
         c5:86:98:07:8e:db:d5:1e:2e:07:6e:a4:c6:bc:97:84:91:54:
         8e:46:83:9f:45:eb:c6:e4:89:e2:cb:74:57:95:f2:67:02:cc:
         0b:9a:93:7e:53:fc:9f:11:ff:24:85:e5:d4:8e:6d:1a:32:ca:
         80:8d:29:50:b8:9f:89:e8:37:bf:c9:e7:dc:d9:e2:4c:d2:b3:
         a3:ca:99:22:3f:dc:b4:5d:64:54:db:4b:5e:82:1c:d5:80:91:
         c5:04:32:59:bc:1f:ff:ff:3b:a0:f9:db:aa:5e:07:46:b4:e3:
         f0:9f:d4:fc:fb:42:f0:ed:3a:57:9f:dc:47:dc:ca:12:57:f3:
         e0:4f:5e:a3:f8:d7:05:48:0b:ca:fc:c8:aa:00:63:ad:d8:f1:
         18:47:82:37:17:2e:4a:e5:0d:dd:6d:d9:66:78:08:2d:6d:14:
         b3:fc:f8:f3:90:67:fc:17:35:4e:6c:a5:62:3f:41:75:9e:df:
         fd:bf:07:92:21:f6:19:e0:02:a6:62:f5:65:f7:dc:cf:89:ba:
         78:ea:cf:fc:e3:fb:5d:5f:62:00:8c:f5:60:1e:eb:c7:68:1f:
         00:df:eb:6c:8e:e5:4f:7c:8e:57:23:cb:05:7c:84:3a:44:05:
         88:ed:15:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:28:52 2025 by rpki-client