Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e56f33c4-5195-43f8-a0d4-992f28b374ee/6b4d9059-791c-390d-8418-5e702cbce5fc.roa
File:                     6b4d9059-791c-390d-8418-5e702cbce5fc.roa (raw, json)
Hash identifier:          t1m1sjqJRIT78itE5OscdoThTVZB3O+54WlSNYagYm0=
Subject key identifier:   DC:00:D6:5A:7E:76:D5:5E:CD:E9:C7:97:E0:26:CD:E8:4E:C3:04:CE
Certificate issuer:       /CN=e56f33c4-5195-43f8-a0d4-992f28b374ee
Certificate serial:       010D0C9F4328584902EC07C137E5B6E71482CC00
Authority key identifier: 20:60:C8:B3:53:2F:F2:8E:E9:F4:83:19:56:82:2D:04:BA:3C:0B:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e56f33c4-5195-43f8-a0d4-992f28b374ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e56f33c4-5195-43f8-a0d4-992f28b374ee/6b4d9059-791c-390d-8418-5e702cbce5fc.roa
Signing time:             Wed 26 Feb 2025 14:00:51 +0000
ROA not before:           Wed 26 Feb 2025 14:00:51 +0000
ROA not after:            Tue 27 May 2025 13:00:51 +0000
asID:                     399273
IP address blocks:        45.42.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e56f33c4-5195-43f8-a0d4-992f28b374ee/e56f33c4-5195-43f8-a0d4-992f28b374ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e56f33c4-5195-43f8-a0d4-992f28b374ee/e56f33c4-5195-43f8-a0d4-992f28b374ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e56f33c4-5195-43f8-a0d4-992f28b374ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:ec:07:c1:37:e5:b6:e7:14:82:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e56f33c4-5195-43f8-a0d4-992f28b374ee
        Validity
            Not Before: Feb 26 14:00:51 2025 GMT
            Not After : May 27 13:00:51 2025 GMT
        Subject: CN=e26be591-eb89-4e3c-9e57-6c5912b5b16d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:6b:4a:8d:5f:01:31:ce:3e:57:20:c2:93:c4:
                    27:5e:59:30:c8:56:4c:61:92:71:9e:54:9a:8f:6e:
                    e9:30:03:eb:cc:20:2c:d4:7c:f0:35:d8:16:95:c0:
                    9a:0d:b7:35:3f:17:02:e5:bc:db:4f:ae:5a:5a:05:
                    46:98:b2:b3:bd:2d:8e:01:89:d5:42:e8:e9:a7:f8:
                    0c:be:73:33:12:ef:d6:04:26:39:4f:f8:6a:7c:e0:
                    78:6c:12:63:7e:59:96:aa:fa:b0:ea:32:47:a3:8f:
                    16:0f:57:4e:03:71:9d:f5:5e:8c:2a:ba:55:87:32:
                    79:9b:f4:cb:a4:17:d6:6e:cd:df:61:82:0a:92:01:
                    2f:f1:b8:e7:ad:a8:80:b4:9d:4c:84:57:d8:40:f3:
                    8b:fe:2a:31:bc:6b:3e:da:6d:28:46:28:fa:a7:45:
                    d8:95:4b:2a:c0:e2:02:79:e8:c4:84:62:00:71:52:
                    39:d3:da:18:16:c9:9a:f2:81:a2:4b:96:65:92:f4:
                    ea:48:55:d5:cd:7a:23:39:b4:15:03:aa:30:e5:5e:
                    db:3f:5f:70:aa:3e:28:10:3e:a6:2c:12:1e:8c:78:
                    cb:62:aa:08:38:ea:ff:a7:c2:4d:94:81:3f:77:aa:
                    0d:36:30:7e:fb:31:a8:2b:aa:48:85:9b:0f:1f:3a:
                    f6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:00:D6:5A:7E:76:D5:5E:CD:E9:C7:97:E0:26:CD:E8:4E:C3:04:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e56f33c4-5195-43f8-a0d4-992f28b374ee/6b4d9059-791c-390d-8418-5e702cbce5fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e56f33c4-5195-43f8-a0d4-992f28b374ee/e56f33c4-5195-43f8-a0d4-992f28b374ee.crl

            X509v3 Authority Key Identifier:
                keyid:20:60:C8:B3:53:2F:F2:8E:E9:F4:83:19:56:82:2D:04:BA:3C:0B:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e56f33c4-5195-43f8-a0d4-992f28b374ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:56:56:bb:06:d7:f3:f2:58:ca:43:98:b5:0d:81:fc:b3:29:
         a4:87:8b:55:78:66:64:e8:08:d8:6a:33:18:a5:94:ed:0d:5b:
         7c:94:b3:59:60:d9:09:dd:5e:1f:47:5a:04:54:4f:9e:b9:bf:
         b8:ea:b0:fe:a0:03:22:3b:8d:e2:e2:f7:9d:46:c1:b9:e8:03:
         ce:8b:c1:b9:a3:8f:ae:d9:be:ee:bc:2d:e7:a0:d3:44:cf:ee:
         ea:b0:84:3d:55:56:f5:6b:33:88:8e:e4:e1:d4:1c:78:75:da:
         1f:65:3e:0b:a5:f3:c2:d2:13:d9:2c:8c:85:2e:b7:2b:a8:fa:
         98:21:6d:8d:32:2e:4f:98:3e:fd:d7:57:5c:28:ef:76:bf:27:
         ff:ae:06:66:f1:4c:ee:8f:07:7b:81:fb:1a:63:ee:72:d5:dd:
         51:6f:b8:cc:f6:de:44:8d:08:ce:42:1c:03:b7:ab:0a:a0:52:
         7b:75:21:0a:4a:0e:6e:31:9a:ae:73:2b:09:83:40:3e:50:c8:
         e5:1b:a1:44:0f:ba:04:82:f5:e6:2c:37:78:10:2e:a0:a7:22:
         e7:ac:52:d5:95:50:d9:58:79:42:c4:06:95:72:90:d5:45:cf:
         c6:86:76:07:79:6b:3f:83:09:40:ca:83:b0:ae:bb:e1:39:93:
         51:43:0b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 20:49:30 2025 by rpki-client