Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/eb6a308e-64bb-4558-9b03-6b4c190d86fe/f9333db1-77ef-31de-a8a6-4627d8e7a47f.roa
File:                     f9333db1-77ef-31de-a8a6-4627d8e7a47f.roa (raw, json)
Hash identifier:          w0HgnQmWvxEIfFx6FtLRxTJ4y1BfwcMNPHYxu9yaLc0=
Subject key identifier:   46:44:AC:75:82:EB:7C:F6:CD:26:84:28:2D:83:43:01:9D:AC:C6:0C
Certificate issuer:       /CN=eb6a308e-64bb-4558-9b03-6b4c190d86fe
Certificate serial:       010D0C9F43285849E91FA3EA263FCF24F42904C0
Authority key identifier: 82:D6:3E:6A:B5:BA:0C:E7:18:E2:5B:46:CC:81:C0:7D:9B:21:AB:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/eb6a308e-64bb-4558-9b03-6b4c190d86fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/eb6a308e-64bb-4558-9b03-6b4c190d86fe/f9333db1-77ef-31de-a8a6-4627d8e7a47f.roa
Signing time:             Tue 20 May 2025 01:00:49 +0000
ROA not before:           Tue 20 May 2025 01:00:49 +0000
ROA not after:            Mon 18 Aug 2025 01:00:49 +0000
asID:                     63473
IP address blocks:        45.45.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/eb6a308e-64bb-4558-9b03-6b4c190d86fe/eb6a308e-64bb-4558-9b03-6b4c190d86fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/eb6a308e-64bb-4558-9b03-6b4c190d86fe/eb6a308e-64bb-4558-9b03-6b4c190d86fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/eb6a308e-64bb-4558-9b03-6b4c190d86fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 10 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e9:1f:a3:ea:26:3f:cf:24:f4:29:04:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb6a308e-64bb-4558-9b03-6b4c190d86fe
        Validity
            Not Before: May 20 01:00:49 2025 GMT
            Not After : Aug 18 01:00:49 2025 GMT
        Subject: CN=3419914b-c116-44aa-a24e-4c5ea9d62f0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f3:74:69:00:83:82:66:a0:4f:5e:a2:0a:3e:
                    54:00:8a:ec:4e:36:ed:d2:e1:d6:cf:33:2e:04:7c:
                    84:9d:49:ac:30:65:c3:7b:6a:eb:08:1d:a8:fc:9e:
                    53:53:c0:fa:82:39:67:a3:b1:11:63:e4:d6:bc:29:
                    9a:c3:df:10:8c:96:64:20:14:41:64:6b:3f:f8:a4:
                    fb:e5:1c:f4:81:67:15:e8:d2:7b:07:82:78:5d:22:
                    cb:3c:77:32:c2:92:6c:79:97:6f:0b:c3:0f:ba:a5:
                    c4:d2:c6:65:4f:e6:cb:60:25:65:e2:d2:1d:69:5a:
                    53:50:10:1b:94:22:63:99:27:e1:6f:c0:1d:b6:38:
                    23:fc:33:fe:ed:fc:56:76:3a:02:6a:6a:00:dc:dc:
                    a6:81:cd:a9:74:f1:77:2f:ba:ac:04:7f:bf:b8:03:
                    c8:4d:b1:9a:70:7d:8d:b5:27:f6:1f:38:0f:d9:63:
                    62:31:56:0c:18:f0:5c:66:9d:ee:ab:5c:6f:42:b2:
                    8b:34:3e:f5:d8:cc:46:cd:43:e2:11:1c:eb:eb:9e:
                    d7:73:54:32:ca:dd:d4:ef:e0:0c:2e:79:fd:b1:f2:
                    d2:8a:4f:37:34:b1:85:82:8d:6a:9d:34:5d:3b:08:
                    04:45:01:e9:d8:32:2b:6d:b8:d3:fc:38:a2:de:f8:
                    fa:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:44:AC:75:82:EB:7C:F6:CD:26:84:28:2D:83:43:01:9D:AC:C6:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/eb6a308e-64bb-4558-9b03-6b4c190d86fe/f9333db1-77ef-31de-a8a6-4627d8e7a47f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/eb6a308e-64bb-4558-9b03-6b4c190d86fe/eb6a308e-64bb-4558-9b03-6b4c190d86fe.crl

            X509v3 Authority Key Identifier:
                keyid:82:D6:3E:6A:B5:BA:0C:E7:18:E2:5B:46:CC:81:C0:7D:9B:21:AB:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/eb6a308e-64bb-4558-9b03-6b4c190d86fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:90:27:64:42:bb:34:55:de:38:a7:cb:34:35:d8:5b:fe:a2:
         05:cf:b5:84:70:65:7f:14:8a:f3:89:cf:68:57:52:88:24:f0:
         af:50:0b:39:73:50:77:9e:a1:5e:09:49:6a:e9:1b:80:f6:33:
         0e:e1:f2:13:b3:da:a9:ed:cf:5f:dc:ef:a4:8a:54:e7:66:b0:
         ea:02:9b:99:81:b0:e8:9f:0e:5f:68:c1:67:38:73:23:07:22:
         c1:3d:8b:f6:f5:e0:0d:cb:27:33:1b:94:1d:c9:c5:f9:9c:8e:
         c2:4f:a0:30:e0:21:7a:25:e2:b0:6d:44:8a:68:8b:dd:5e:cd:
         39:20:51:fa:18:2d:6a:ae:1f:20:80:54:5c:48:07:a5:14:a8:
         82:d6:17:00:bb:d5:e4:2d:17:08:d3:ba:d4:b4:d0:67:64:74:
         33:b4:01:58:05:91:da:9e:97:e5:2e:db:fc:b1:9c:48:7c:85:
         6c:82:a0:25:c8:01:a4:a2:9f:4f:d9:67:1e:51:e6:b2:59:02:
         94:e0:3a:91:8c:70:81:f4:92:54:e6:b1:d8:36:ae:e2:34:61:
         3e:2c:68:02:9d:3c:bd:a1:17:76:16:22:09:82:cf:82:1e:92:
         fb:6c:01:5e:bb:8e:cc:d4:0a:4c:fe:cd:bc:5d:e6:ba:9f:dd:
         40:e3:18:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:22:29 2025 by rpki-client