Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/e1245ecc-016c-3d87-a13c-64934969ef40.roa
File:                     e1245ecc-016c-3d87-a13c-64934969ef40.roa (raw, json)
Hash identifier:          EFMlHcUFPQNiUGwc9MZ9X5+t+V3/RsMvzq9adNjw7b4=
Subject key identifier:   B8:D6:B5:C0:9F:AC:A1:7E:85:61:69:D3:65:8F:26:80:76:5C:F7:76
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F43285849203C1899956FD0F6B3370DD0
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/e1245ecc-016c-3d87-a13c-64934969ef40.roa
Signing time:             Sun 09 Mar 2025 02:00:39 +0000
ROA not before:           Sun 09 Mar 2025 02:00:39 +0000
ROA not after:            Sat 07 Jun 2025 01:00:39 +0000
asID:                     212238
IP address blocks:        45.33.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:20:3c:18:99:95:6f:d0:f6:b3:37:0d:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Mar  9 02:00:39 2025 GMT
            Not After : Jun  7 01:00:39 2025 GMT
        Subject: CN=d9927557-1ce1-48df-8dfb-602ce788a867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:74:9a:af:1f:ca:90:ae:58:cf:b0:5e:92:7d:
                    08:76:11:46:b1:35:71:14:d3:1c:df:a3:69:92:a1:
                    36:b7:d6:ab:91:ec:a1:e2:a1:8d:67:ec:44:a8:47:
                    0a:0f:9a:4e:f6:cb:43:44:7f:e6:cf:84:b6:73:8c:
                    b8:e8:68:f8:8e:45:85:a9:8d:7f:65:81:c8:7d:00:
                    44:08:bb:7e:ee:52:a3:7a:cf:97:db:ad:0b:4d:87:
                    a5:b5:f7:e7:57:1b:cd:5a:5d:11:2c:19:33:ed:0f:
                    e3:80:b9:75:f8:ef:2f:78:39:38:19:f3:58:7d:21:
                    8b:82:46:ab:8e:1f:f2:db:d6:f4:49:6e:57:d6:7f:
                    c7:3f:8c:19:8e:bf:83:d7:02:66:74:02:c5:db:ea:
                    4c:b6:ad:92:0d:65:d1:db:c7:f3:e2:c4:a3:b7:22:
                    e7:79:02:fd:e1:40:95:9f:30:07:76:db:4e:b2:f3:
                    a0:63:dd:7c:01:6f:57:10:4e:06:a2:e0:f3:3c:b6:
                    60:ed:ca:4c:2c:8b:10:31:70:d8:4e:1e:d3:0a:20:
                    ca:d3:86:fb:ff:9f:82:15:c9:e1:bc:3f:2d:1c:47:
                    dc:46:3a:77:1d:42:3c:3b:5b:19:63:1f:4b:38:0b:
                    9f:0d:e8:dd:52:6f:bb:ae:3c:cc:96:ba:ba:8e:56:
                    28:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:D6:B5:C0:9F:AC:A1:7E:85:61:69:D3:65:8F:26:80:76:5C:F7:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/e1245ecc-016c-3d87-a13c-64934969ef40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.33.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:72:d9:9e:ad:98:8f:08:4f:e0:c3:3c:75:6e:3d:6c:8e:71:
         ee:8a:a0:96:d9:c5:7e:9c:56:a7:77:56:cc:ad:96:46:ce:70:
         e0:cc:08:5c:eb:80:90:05:dc:7d:27:80:54:da:d4:92:46:3e:
         56:74:0a:5e:36:04:26:ad:e9:2e:5e:29:7c:b0:10:62:7e:2d:
         51:12:9b:2f:9d:e9:a7:3a:93:67:ea:3c:cf:df:3e:02:8d:87:
         3e:96:1c:df:24:cc:bb:31:5f:6b:84:74:f6:64:5e:ce:08:97:
         a6:b1:94:eb:3f:bf:19:4c:b2:bd:b0:44:54:ae:0e:ec:f4:cd:
         cf:06:ae:ca:2e:f6:35:01:b0:f8:d2:ba:bb:7e:5a:bc:e7:b8:
         20:5a:7d:90:e4:b9:1d:0a:8a:2b:4b:fc:6b:a3:ef:1d:bc:d1:
         de:c0:7c:c2:78:db:43:5f:f2:0c:00:fc:9d:9b:62:e0:5b:63:
         6b:94:b8:df:17:03:e2:c6:89:0f:af:eb:4f:76:5d:6e:07:76:
         75:90:5a:27:16:59:49:33:39:c2:ab:a3:25:81:6c:c1:68:2b:
         6a:09:91:b8:6a:a4:ba:38:65:cf:e4:6e:c4:fc:4c:a9:df:b9:
         d7:2c:3a:ee:06:d5:17:5d:35:ae:87:b6:88:32:fe:1f:7a:ee:
         0f:7b:c0:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:00:02 2025 by rpki-client