Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/eb6a308e-64bb-4558-9b03-6b4c190d86fe/f9333db1-77ef-31de-a8a6-4627d8e7a47f.roa
File:                     f9333db1-77ef-31de-a8a6-4627d8e7a47f.roa (raw, json)
Hash identifier:          I72NHmnNHQOvRSIySlSjNco+PgQ4bjobDkIj5OKcufc=
Subject key identifier:   3D:B6:D7:93:7A:98:62:75:8E:05:05:D1:B5:12:F0:E1:D3:03:2D:B1
Certificate issuer:       /CN=eb6a308e-64bb-4558-9b03-6b4c190d86fe
Certificate serial:       010D0C9F432858482A8FDF8E536BB98F60F34800
Authority key identifier: 82:D6:3E:6A:B5:BA:0C:E7:18:E2:5B:46:CC:81:C0:7D:9B:21:AB:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/eb6a308e-64bb-4558-9b03-6b4c190d86fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/eb6a308e-64bb-4558-9b03-6b4c190d86fe/f9333db1-77ef-31de-a8a6-4627d8e7a47f.roa
Signing time:             Wed 11 Dec 2024 02:00:38 +0000
ROA not before:           Wed 11 Dec 2024 02:00:38 +0000
ROA not after:            Tue 11 Mar 2025 01:00:38 +0000
asID:                     63473
IP address blocks:        45.45.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/eb6a308e-64bb-4558-9b03-6b4c190d86fe/eb6a308e-64bb-4558-9b03-6b4c190d86fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/eb6a308e-64bb-4558-9b03-6b4c190d86fe/eb6a308e-64bb-4558-9b03-6b4c190d86fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/eb6a308e-64bb-4558-9b03-6b4c190d86fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2a:8f:df:8e:53:6b:b9:8f:60:f3:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb6a308e-64bb-4558-9b03-6b4c190d86fe
        Validity
            Not Before: Dec 11 02:00:38 2024 GMT
            Not After : Mar 11 01:00:38 2025 GMT
        Subject: CN=84ab019a-eee9-4423-ac7f-20bd3c3f7b79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ab:55:ff:fd:30:bd:02:5b:c8:35:78:bb:12:
                    77:9d:4f:5c:81:8a:10:32:09:46:34:ea:6a:33:58:
                    22:f8:bd:fb:2c:e7:a1:e8:c9:6f:89:aa:6b:d6:73:
                    c7:7d:60:f6:16:cb:24:1b:56:98:77:d8:b0:d7:dd:
                    83:0e:95:d4:5b:77:b1:11:66:3d:b7:1f:d2:20:17:
                    f4:93:1d:26:e1:6f:42:ee:6f:41:3c:57:3c:f5:ad:
                    e9:d3:f8:64:fa:36:85:a4:f0:3e:bb:6a:5e:71:39:
                    20:98:67:61:7d:f7:95:19:8b:6c:87:44:b8:10:a2:
                    d3:29:b0:ed:7b:3b:a3:9d:30:23:ae:bb:e5:7c:61:
                    fd:f7:16:70:04:78:cd:3e:da:fc:3f:84:6f:3b:1d:
                    eb:5c:f2:4d:4a:2b:59:dc:d3:02:48:96:3c:82:79:
                    74:5c:ba:32:76:01:94:1a:ac:a9:bd:20:b9:3c:13:
                    07:25:eb:93:fd:20:a7:69:b8:11:43:e1:25:72:03:
                    fa:f3:53:10:2b:de:20:48:b2:d1:e6:8a:4f:08:3a:
                    15:0f:83:ac:c6:e3:cb:c8:c3:89:7f:b4:17:f0:a9:
                    7b:2c:9d:7d:3d:21:fc:7f:9b:f3:a2:b4:37:05:46:
                    5d:70:d2:04:38:5c:e6:7a:ba:cd:9a:b5:70:5f:a3:
                    c3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B6:D7:93:7A:98:62:75:8E:05:05:D1:B5:12:F0:E1:D3:03:2D:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/eb6a308e-64bb-4558-9b03-6b4c190d86fe/f9333db1-77ef-31de-a8a6-4627d8e7a47f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/eb6a308e-64bb-4558-9b03-6b4c190d86fe/eb6a308e-64bb-4558-9b03-6b4c190d86fe.crl

            X509v3 Authority Key Identifier:
                keyid:82:D6:3E:6A:B5:BA:0C:E7:18:E2:5B:46:CC:81:C0:7D:9B:21:AB:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/eb6a308e-64bb-4558-9b03-6b4c190d86fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:d9:aa:46:f4:a2:56:1b:8a:59:c1:fb:88:d2:55:6c:56:e0:
         7a:ce:1f:a9:87:5d:98:3b:f9:7c:df:9e:14:c6:f1:28:80:b6:
         ed:9a:ff:11:47:7a:d0:0f:be:6b:29:d1:c4:06:99:0a:c1:e9:
         97:45:87:8f:6e:8b:9a:75:da:ce:ff:4d:7a:fe:6e:a6:5f:2d:
         13:c2:7c:2c:95:fe:e7:6e:84:11:08:20:3b:28:ad:2b:b3:83:
         ac:83:71:2d:61:b0:3d:65:12:e4:1b:7b:f1:be:45:16:3f:78:
         70:cf:49:e3:36:3c:37:5f:2e:19:03:c5:ed:36:93:95:0d:15:
         9d:ae:52:4e:4c:44:9d:92:73:42:8f:21:ee:22:1a:36:ac:26:
         16:05:f1:83:69:0e:19:ca:20:c8:54:80:64:de:d2:3e:3a:c2:
         e8:08:bf:42:04:36:e1:8a:08:42:a9:60:dc:47:0f:a3:84:16:
         b5:9c:3c:de:08:41:ec:62:65:05:ad:0d:5a:46:b3:aa:c3:d6:
         79:8e:31:e2:da:04:5e:4b:d3:cd:c3:72:e9:ff:fe:07:34:d2:
         bf:92:f5:50:96:8b:3b:dd:5d:15:41:4e:2c:d1:7f:0c:db:d6:
         36:42:b8:fc:99:17:c8:68:33:7c:fd:fa:58:14:19:db:d9:4c:
         fe:a6:15:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:28:37 2025 by rpki-client