Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/9c1736ce-e552-30bc-bff1-af7bc1afb9f2.roa
File:                     9c1736ce-e552-30bc-bff1-af7bc1afb9f2.roa (raw, json)
Hash identifier:          p/2p8654gLx8FY+w+3HGtj6LbbCY5KhQz+4dvaJ00Qw=
Subject key identifier:   89:E0:F2:77:F9:9D:7D:EA:8C:D3:77:6F:62:FE:29:54:C6:74:9C:53
Certificate issuer:       /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial:       010D0C9F432858498FC9B5AEA04154A7A5369840
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/9c1736ce-e552-30bc-bff1-af7bc1afb9f2.roa
Signing time:             Fri 18 Apr 2025 01:00:47 +0000
ROA not before:           Fri 18 Apr 2025 01:00:47 +0000
ROA not after:            Thu 17 Jul 2025 01:00:47 +0000
asID:                     5769
IP address blocks:        45.44.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8f:c9:b5:ae:a0:41:54:a7:a5:36:98:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
        Validity
            Not Before: Apr 18 01:00:47 2025 GMT
            Not After : Jul 17 01:00:47 2025 GMT
        Subject: CN=5487fed0-cf34-4e45-93a3-68f5f3dc5f2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:6a:1e:4d:eb:8c:ff:38:74:27:cd:d6:1a:f9:
                    1b:82:ab:06:82:bd:9c:03:d6:4b:18:0d:32:ad:c2:
                    01:7e:a6:c8:c1:6d:a4:13:30:96:8a:e9:b6:1d:73:
                    b8:2b:e2:59:4c:32:33:a4:77:d2:77:3a:a3:e5:ba:
                    67:d3:7c:b9:19:f3:72:51:cd:16:94:3a:d3:6c:a2:
                    70:30:cc:45:a5:a3:d7:00:2a:63:13:9a:bb:cb:d4:
                    b6:b3:09:40:77:b4:b0:cc:55:10:9e:61:e1:1a:6e:
                    16:af:90:4f:80:63:03:6e:a7:7c:ea:5f:cc:21:68:
                    bb:b0:48:4c:f0:86:4c:49:13:fb:cb:56:4f:41:b1:
                    67:20:c6:2a:a3:d1:ac:ed:f4:00:7d:0a:99:46:ce:
                    8d:43:70:2a:69:a8:17:e2:67:af:df:dc:ff:8e:ff:
                    70:56:08:60:bb:09:ad:3a:27:32:47:27:a7:73:9e:
                    31:1c:06:f4:9e:e3:f9:ed:b7:ce:9f:9a:26:a3:07:
                    fe:02:ab:63:ca:63:ea:b7:f8:f1:f7:52:0f:b5:18:
                    e1:dc:02:63:6c:ab:84:69:bd:07:2b:f0:3b:55:55:
                    78:21:25:6a:ec:55:66:35:57:92:91:39:e6:86:40:
                    6e:5b:fd:ff:d4:4c:d9:d9:53:02:58:9c:6c:f6:3d:
                    61:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:E0:F2:77:F9:9D:7D:EA:8C:D3:77:6F:62:FE:29:54:C6:74:9C:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/9c1736ce-e552-30bc-bff1-af7bc1afb9f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl

            X509v3 Authority Key Identifier:
                keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.44.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:41:f9:f6:a0:ef:38:1d:80:b2:d4:1a:d3:d2:d6:fb:7e:d8:
         c0:a6:43:71:0c:83:14:c1:69:36:36:70:2e:b7:78:16:1a:71:
         2d:ce:93:c4:12:dd:0f:7b:d4:82:4b:cc:b1:8e:75:53:23:1a:
         49:0a:47:f8:8d:f9:5b:58:23:2c:c8:69:07:84:68:a1:e8:27:
         1b:b8:fa:97:1a:ce:30:bb:65:c9:56:e0:e7:68:5e:92:d7:98:
         b8:a9:e1:11:fe:65:c0:2a:69:ef:86:ec:61:ef:b7:22:d2:f8:
         77:a2:49:54:66:57:e0:5a:f3:ea:3d:bc:82:f8:71:56:f0:0f:
         8c:37:c7:34:88:7b:f4:d1:2e:02:12:cb:12:0a:14:bb:6f:f2:
         8e:af:dc:c8:fe:34:3e:75:9d:b4:b8:9f:4e:90:85:f2:c0:f2:
         38:a5:d9:4c:d3:41:64:b6:6c:f2:db:15:04:c6:a8:61:0f:4a:
         88:1d:c9:c2:8e:b4:e9:d7:d2:1b:e3:a6:b0:36:20:d1:a7:27:
         5f:30:f0:6a:1f:1e:45:30:9f:d2:5b:41:ad:15:d5:7d:8a:cb:
         92:92:20:81:c2:8b:a8:c9:6d:54:02:c7:65:f7:16:f9:24:1c:
         b5:4f:24:ae:7f:f4:04:d3:ee:89:77:b6:13:39:c4:df:aa:58:
         7f:14:af:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:09:58 2025 by rpki-client