Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/53009550-1451-3677-ae05-9e5e5e0b9c09.roa
File:                     53009550-1451-3677-ae05-9e5e5e0b9c09.roa (raw, json)
Hash identifier:          1MRSNtGYyfMHWD0D5/yfyEeo2wXC51Skp4FO75FgIKc=
Subject key identifier:   59:E1:6F:6F:3B:27:DC:D8:58:C9:80:7D:43:AE:14:06:CE:FB:AF:2C
Certificate issuer:       /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Certificate serial:       010D0C9F43285848C2B649963711ECE58F1B8C00
Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/53009550-1451-3677-ae05-9e5e5e0b9c09.roa
Signing time:             Mon 03 Feb 2025 14:00:52 +0000
ROA not before:           Mon 03 Feb 2025 14:00:52 +0000
ROA not after:            Sun 04 May 2025 13:00:52 +0000
asID:                     3257
IP address blocks:        45.56.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c2:b6:49:96:37:11:ec:e5:8f:1b:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
        Validity
            Not Before: Feb  3 14:00:52 2025 GMT
            Not After : May  4 13:00:52 2025 GMT
        Subject: CN=2be646fa-de3c-48f6-a9af-e4fa8f2bcf60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ae:f4:7b:e2:c6:7b:0d:1b:1e:f3:05:2a:40:
                    80:b2:8f:c5:0d:1b:87:38:6e:52:ce:7a:f3:3e:f0:
                    a9:38:48:0b:35:85:7f:e7:1f:bb:e7:8f:cf:a1:86:
                    f4:d6:ca:ca:b6:74:54:3d:9a:a4:55:c7:73:ff:8c:
                    07:d7:a7:57:66:fa:09:0b:28:f0:1f:d6:7f:fb:af:
                    ac:36:27:2f:d6:8c:84:43:21:00:cb:a2:6e:84:19:
                    e4:b5:6d:59:40:df:82:dd:58:68:7e:35:f9:31:c6:
                    03:51:34:58:61:71:64:6b:36:f1:5d:5a:c4:90:55:
                    93:90:f8:e4:18:77:af:7c:5f:19:b5:c8:09:bd:b6:
                    e3:95:c7:c8:43:cf:f2:b9:e6:65:4f:69:4e:25:d4:
                    b9:6b:94:54:97:9f:7d:43:90:67:36:f7:ef:b0:04:
                    17:69:d3:5e:ad:04:6d:58:30:a1:97:80:46:3a:fa:
                    32:3c:f5:1d:b9:df:63:22:33:84:57:e6:cf:a1:48:
                    6c:d0:29:72:bc:e6:de:d6:c6:e9:5b:c0:ba:f8:41:
                    45:52:20:8b:ef:25:35:38:b7:db:2f:98:24:ae:85:
                    ac:0d:e8:8b:55:dc:5c:40:94:52:7a:2c:1f:8b:07:
                    e9:52:5b:de:cc:bc:19:5a:de:d3:c1:c1:f4:48:59:
                    b7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:E1:6F:6F:3B:27:DC:D8:58:C9:80:7D:43:AE:14:06:CE:FB:AF:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/53009550-1451-3677-ae05-9e5e5e0b9c09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl

            X509v3 Authority Key Identifier:
                keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.56.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:10:22:5f:69:df:a4:d1:99:0d:a8:97:7c:d1:0e:77:d2:e9:
         3b:8b:54:ea:ae:9f:a9:54:c6:c1:28:c1:ca:84:ac:88:03:3e:
         cd:8a:d1:05:fe:12:23:31:f5:d6:03:29:87:a5:a0:c9:7b:d5:
         f6:6f:82:e7:7d:93:68:de:67:5e:6f:eb:15:36:46:23:fc:be:
         ea:9f:26:42:7d:05:0f:34:9b:e9:d6:df:5a:49:aa:23:23:6e:
         2c:89:92:8b:95:de:cc:1f:ed:de:84:0d:19:3d:a1:f1:43:f6:
         a9:ac:af:52:24:4f:8f:e3:98:6c:55:e3:85:97:e9:4f:79:02:
         d0:e2:90:0a:eb:22:68:62:0f:f8:fd:44:7f:4c:3d:88:b4:e2:
         45:b3:a0:3a:92:cb:7d:38:d0:f4:36:f5:8d:ad:48:82:c3:f5:
         10:bd:b6:4c:74:0f:c8:f3:73:0b:b3:89:26:47:5d:cf:86:13:
         44:aa:a3:33:75:9e:6f:d3:4d:b4:75:3f:28:05:51:19:35:15:
         54:7d:d6:4d:52:e6:f3:81:a1:9c:49:75:57:1a:fc:11:c1:bc:
         ca:b0:57:45:fc:15:6a:88:3b:a7:91:9c:a0:49:01:85:56:16:
         ae:c1:11:ee:06:47:75:c8:56:68:34:9e:cd:0d:ad:7b:fd:01:
         d8:ec:2f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:19:19 2025 by rpki-client