Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555/69842ffd-2d16-3713-ab84-05f83cce6ded.roa
File:                     69842ffd-2d16-3713-ab84-05f83cce6ded.roa (raw, json)
Hash identifier:          Ty0BPjkwEN+Qu+3E7bxomtLz/wBkUlu9UZRllDdCnsk=
Subject key identifier:   D2:66:DB:60:7B:B3:BA:C2:30:B8:2B:B6:44:5E:91:78:30:88:D5:8D
Certificate issuer:       /CN=e0d54f0d-8151-4500-80b5-008165b77555
Certificate serial:       010D0C9F432858489345A793D81FF881E5921280
Authority key identifier: 6B:B9:BD:D7:6B:68:7E:9E:5C:BA:4D:67:75:AD:68:AC:53:97:10:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555/69842ffd-2d16-3713-ab84-05f83cce6ded.roa
Signing time:             Fri 17 Jan 2025 14:11:04 +0000
ROA not before:           Fri 17 Jan 2025 14:11:04 +0000
ROA not after:            Thu 17 Apr 2025 13:11:04 +0000
asID:                     3356
IP address blocks:        173.241.45.0/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555/e0d54f0d-8151-4500-80b5-008165b77555.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555/e0d54f0d-8151-4500-80b5-008165b77555.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Feb 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:93:45:a7:93:d8:1f:f8:81:e5:92:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0d54f0d-8151-4500-80b5-008165b77555
        Validity
            Not Before: Jan 17 14:11:04 2025 GMT
            Not After : Apr 17 13:11:04 2025 GMT
        Subject: CN=2453a482-b298-45cd-a496-7951888c3588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a7:a6:69:60:2e:b7:7f:57:b2:b6:05:3c:09:
                    a2:ff:7e:b9:1c:13:97:f7:82:fb:bd:be:da:95:af:
                    42:bd:5b:94:23:9d:ac:c8:16:79:59:17:38:0e:df:
                    50:d6:9a:e4:f0:4e:12:4c:b3:94:1c:b7:a9:34:6c:
                    00:44:59:c7:fa:a1:c1:fa:3f:d2:79:d7:23:04:5d:
                    03:ca:84:9a:19:ee:38:b7:c0:a7:c6:c2:18:0d:86:
                    52:59:ab:11:4f:92:74:02:e3:70:f9:1d:ad:b0:25:
                    a7:f1:22:89:33:f6:22:e0:7b:4c:8d:9b:03:6e:cf:
                    33:e7:02:0a:6b:80:98:0f:17:3b:e0:cc:eb:50:b1:
                    8e:f4:ac:9b:ca:c7:9a:c7:23:22:ac:eb:a7:f5:ec:
                    83:9d:e3:7c:d8:27:19:27:54:80:85:2c:74:3f:3b:
                    a6:40:02:65:95:19:50:ca:03:ce:e1:ff:5c:a1:58:
                    00:28:78:85:32:ec:f7:58:0a:71:a1:9b:25:cf:4d:
                    43:5d:5e:a3:48:50:a9:13:a1:1b:4d:89:64:35:88:
                    12:9a:e8:f8:b6:03:32:e2:77:fb:1a:94:08:9a:c3:
                    e0:60:2c:4b:7f:64:d8:51:2b:67:61:d3:0c:3e:c2:
                    65:63:d5:30:da:6c:65:78:65:bb:47:53:7a:72:1c:
                    a1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:66:DB:60:7B:B3:BA:C2:30:B8:2B:B6:44:5E:91:78:30:88:D5:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555/69842ffd-2d16-3713-ab84-05f83cce6ded.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555/e0d54f0d-8151-4500-80b5-008165b77555.crl

            X509v3 Authority Key Identifier:
                keyid:6B:B9:BD:D7:6B:68:7E:9E:5C:BA:4D:67:75:AD:68:AC:53:97:10:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.241.45.0/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:18:cd:24:87:fa:19:3c:bd:e0:a6:a5:85:73:c4:af:94:39:
         ad:c2:46:09:6b:25:75:89:07:3a:1a:c1:7d:65:af:62:5f:85:
         e9:26:5e:b6:20:98:5f:e0:2b:17:d0:c9:6d:84:89:4f:97:2c:
         17:ec:c2:51:37:4c:89:33:c0:b0:46:8a:f5:90:c2:b5:89:6e:
         bc:98:27:c3:71:14:3d:8e:15:c7:59:b6:c2:d4:5b:24:94:72:
         90:d5:68:34:d1:f9:54:4f:57:d3:5b:bb:b9:cc:de:b6:03:b3:
         26:39:49:60:1e:0e:b0:38:34:de:df:ec:3d:43:63:08:02:39:
         22:25:c3:e9:c7:de:19:e0:3b:84:d4:95:83:3e:ac:80:d4:8d:
         e9:37:df:df:8d:af:84:95:46:86:0f:ad:cb:7a:90:0c:4e:d5:
         84:cb:09:e2:43:12:ed:1e:75:8a:9b:b3:a4:4a:e6:46:fb:cb:
         f2:33:45:66:98:e3:3c:a7:86:b9:78:02:16:50:fe:c2:c1:57:
         8d:1a:bc:b5:61:41:a5:ff:7e:4b:3a:35:82:f7:fb:0c:b6:3a:
         7d:87:ae:89:5d:c5:21:a8:c6:9f:51:56:dd:45:87:28:d5:74:
         3c:f3:d6:6c:2b:43:97:b0:8d:27:54:42:cc:e7:66:17:3c:fe:
         d8:cd:45:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 18:58:33 2025 by rpki-client