Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5/ce47c968-0a16-3170-948d-a2cfae3eb8b3.roa
File:                     ce47c968-0a16-3170-948d-a2cfae3eb8b3.roa (raw, json)
Hash identifier:          Iq7bjo+fr1I3XO3wFuOmbges/XxQ4cdvjEN6tK1sZUQ=
Subject key identifier:   E0:F9:7D:6C:EF:93:15:93:D9:CB:D9:D2:5A:20:1B:EF:55:54:0C:BA
Certificate issuer:       /CN=497813be-498e-4129-a627-225f97d0e2b5
Certificate serial:       010D0C9F43285849FE0FEBA6BBDC28568ABA2380
Authority key identifier: B8:37:7B:4E:4F:03:FE:09:AC:C1:B9:40:8B:3F:9E:F0:4C:A2:FF:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5/ce47c968-0a16-3170-948d-a2cfae3eb8b3.roa
Signing time:             Tue 27 May 2025 13:01:05 +0000
ROA not before:           Tue 27 May 2025 13:01:05 +0000
ROA not after:            Mon 25 Aug 2025 13:01:05 +0000
asID:                     399606
IP address blocks:        45.45.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5/497813be-498e-4129-a627-225f97d0e2b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5/497813be-498e-4129-a627-225f97d0e2b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fe:0f:eb:a6:bb:dc:28:56:8a:ba:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=497813be-498e-4129-a627-225f97d0e2b5
        Validity
            Not Before: May 27 13:01:05 2025 GMT
            Not After : Aug 25 13:01:05 2025 GMT
        Subject: CN=9bf30475-0b49-4688-8ad5-8cbed9859f29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:06:0e:de:d2:70:ca:ce:69:2f:a4:c3:56:cd:
                    2f:9b:a3:6b:d4:56:66:55:dd:97:75:cb:08:22:fa:
                    5c:b1:a2:aa:2a:50:8b:ee:65:d0:76:ea:b0:f2:ca:
                    55:18:fe:e6:26:8a:64:7f:bc:af:ba:66:4d:22:a7:
                    24:b3:48:92:bd:f8:30:f7:9e:78:a2:9f:9f:d0:93:
                    74:67:36:86:fc:e8:f5:1b:f2:1a:ea:d2:85:95:2c:
                    4a:64:e6:80:49:9b:ca:a3:c2:6f:3a:01:08:bf:3b:
                    d3:ab:e4:03:fb:0a:cc:8c:2b:c4:79:32:bc:00:c5:
                    20:0a:f9:3e:1a:45:0d:c5:5f:9c:28:61:e3:9b:8a:
                    f3:f2:15:3c:ee:87:5c:2d:83:a3:6c:a9:ef:70:6d:
                    7d:06:42:7b:e4:ba:6d:1e:ce:55:7e:88:e2:af:3e:
                    85:d5:c1:0d:6b:7a:ee:e8:cf:bc:f7:f1:20:83:90:
                    d0:59:8d:48:02:b2:9d:f1:f5:ae:17:5e:22:e8:8d:
                    7b:e8:62:9f:43:89:6b:ee:4b:08:83:4b:75:f6:0d:
                    3f:70:02:e2:91:82:97:6b:13:2d:52:f6:5b:71:bb:
                    49:3f:ca:1a:35:a5:23:30:af:e3:63:02:7d:60:d3:
                    9b:09:52:04:0f:3d:9f:5d:8f:df:e6:e4:80:14:f8:
                    6e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:F9:7D:6C:EF:93:15:93:D9:CB:D9:D2:5A:20:1B:EF:55:54:0C:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5/ce47c968-0a16-3170-948d-a2cfae3eb8b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5/497813be-498e-4129-a627-225f97d0e2b5.crl

            X509v3 Authority Key Identifier:
                keyid:B8:37:7B:4E:4F:03:FE:09:AC:C1:B9:40:8B:3F:9E:F0:4C:A2:FF:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:a2:f2:42:1d:8a:dc:68:0c:df:e1:8d:7c:f4:88:b9:bb:ac:
         ed:a3:1b:8a:b6:e5:e5:53:8c:97:6b:eb:6c:9d:79:13:d4:b3:
         10:80:6d:97:e2:37:b3:49:4a:fd:f3:2c:f4:a7:98:a5:87:9d:
         bd:db:80:45:d4:45:ab:47:69:52:22:43:d0:15:09:c1:27:eb:
         08:92:0e:0c:9f:33:3f:df:be:65:28:d0:80:0b:a0:eb:28:71:
         06:fe:03:71:0e:96:88:45:f6:26:a8:10:7b:be:88:2b:c1:b7:
         b0:98:5e:95:e4:0e:e3:af:b7:dd:ac:fd:cd:90:d9:fa:ca:c4:
         ae:a0:07:bc:83:d4:bb:22:4c:1f:66:e8:a1:a9:1f:52:52:92:
         70:8c:36:bc:76:c1:52:57:5e:64:46:6e:81:3e:1e:4f:91:d8:
         5c:39:83:50:94:93:01:be:36:0c:76:a8:66:04:67:06:88:8d:
         71:31:f0:7c:1a:5f:bd:fb:72:e4:f7:70:d2:1d:eb:1d:3e:10:
         b5:9c:c0:e7:20:e5:89:41:48:17:57:fa:4b:c4:dc:3d:a6:68:
         f0:b1:4f:6a:d2:23:cb:43:a4:d3:46:ea:b0:76:93:a4:47:4e:
         1d:ea:95:c6:d0:0d:9b:fe:bf:4b:cf:48:dd:ee:61:08:ce:cd:
         20:8e:f0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 03:38:36 2025 by rpki-client