Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/1c87c1c9-331a-3524-9f44-1bc4e33059d8.roa
File:                     1c87c1c9-331a-3524-9f44-1bc4e33059d8.roa (raw, json)
Hash identifier:          77oAbjLqQAgFDmGJo/Jd4425ldgsLDJdnVARChboCxY=
Subject key identifier:   34:BB:58:7F:A4:CE:A9:12:84:9E:13:A3:0C:DA:B2:E0:06:15:CA:10
Certificate issuer:       /CN=af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3
Certificate serial:       010D0C9F43285848E16BEA646621CE49C4C3C100
Authority key identifier: B2:BB:D7:45:02:8D:36:D6:C2:33:7F:4D:48:8C:43:47:21:60:07:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/1c87c1c9-331a-3524-9f44-1bc4e33059d8.roa
Signing time:             Fri 14 Feb 2025 14:00:52 +0000
ROA not before:           Fri 14 Feb 2025 14:00:52 +0000
ROA not after:            Thu 15 May 2025 13:00:52 +0000
asID:                     1011
IP address blocks:        45.45.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e1:6b:ea:64:66:21:ce:49:c4:c3:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3
        Validity
            Not Before: Feb 14 14:00:52 2025 GMT
            Not After : May 15 13:00:52 2025 GMT
        Subject: CN=3d82c507-5198-4e33-bd51-f7d04d380793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e0:c7:cf:9b:96:e3:39:0d:42:52:53:1b:52:
                    a3:c6:4d:72:7f:16:96:b7:32:da:34:ed:7b:45:c0:
                    39:1d:44:40:c4:e2:43:9b:d0:9b:91:31:ba:1a:59:
                    e9:d5:bb:79:3b:a7:34:67:a4:d4:57:ec:e6:af:6c:
                    db:b6:6b:14:d6:56:60:14:f0:56:63:ed:84:18:c6:
                    14:9c:d2:03:c4:8c:2c:78:5a:53:4d:70:cd:ce:9d:
                    b7:8f:e8:91:e5:b8:11:ce:31:56:f2:d9:9a:05:f2:
                    4e:69:31:a1:d9:34:de:c1:d3:ca:32:3f:b5:7a:75:
                    18:ee:ab:37:25:f3:20:95:c4:a5:2c:3d:0a:68:ad:
                    6e:03:50:38:c8:3f:43:67:17:63:63:b5:cd:54:2c:
                    b4:03:eb:51:21:be:9a:9a:30:03:fd:0e:f7:2d:24:
                    b8:14:b3:79:1f:2f:5a:d9:dc:a2:b0:7a:24:d1:b1:
                    de:a2:88:2e:06:d7:a9:e7:83:78:f0:d8:91:ea:3e:
                    e7:38:fe:9f:a3:1c:3b:d8:c8:2a:77:56:6f:24:33:
                    91:2a:d4:06:d5:f6:cd:3b:4d:18:5b:7c:75:e7:72:
                    ca:54:57:b1:ff:3a:83:04:db:6c:54:a7:fa:36:b4:
                    f1:20:e8:0f:e7:20:82:47:0f:f8:5e:7e:2d:a6:5b:
                    5f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:BB:58:7F:A4:CE:A9:12:84:9E:13:A3:0C:DA:B2:E0:06:15:CA:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/1c87c1c9-331a-3524-9f44-1bc4e33059d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.crl

            X509v3 Authority Key Identifier:
                keyid:B2:BB:D7:45:02:8D:36:D6:C2:33:7F:4D:48:8C:43:47:21:60:07:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:e5:7d:d7:68:bc:a1:e9:ae:2f:22:ef:d0:e7:c4:28:80:42:
         e0:7b:6b:f3:6d:b8:28:8d:18:67:05:ce:10:e6:c3:97:34:64:
         3c:79:f8:64:dd:ba:1b:a9:dc:a7:6f:c4:79:90:71:94:71:98:
         07:ac:53:24:cc:01:93:8e:88:89:fc:54:fd:6f:42:69:d4:68:
         b1:60:a7:80:fd:db:17:90:a6:8a:3b:74:d4:c3:bf:dd:d7:9c:
         85:e0:c4:ba:eb:c7:19:95:63:3e:42:0f:e6:eb:1b:62:10:87:
         6d:68:d1:e3:d7:f1:d5:be:7a:0c:8d:2f:a4:1a:ae:a0:b2:49:
         53:72:0e:f9:a4:a5:70:73:1a:0d:a4:11:b2:9c:20:ee:5c:9a:
         a7:08:2c:23:93:69:f9:b6:80:9f:c8:57:08:14:d3:98:51:d3:
         d6:85:44:2b:9f:e9:5e:13:28:7d:e1:a2:68:2b:63:b7:a3:a7:
         10:54:3b:95:2a:9a:50:df:54:9e:f5:f6:3f:b5:56:c7:38:ae:
         5d:00:31:23:ca:62:1b:cf:94:9f:99:43:31:4f:c0:cc:37:32:
         71:45:99:0d:17:41:63:8c:6d:21:fa:87:b5:50:c7:82:04:d0:
         f8:18:37:e8:31:c3:ca:4c:60:0f:43:7b:b2:1b:5e:36:85:06:
         9a:90:40:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:36:12 2025 by rpki-client