Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6/3e223fd6-e6be-376b-be27-58334385989f.roa
File:                     3e223fd6-e6be-376b-be27-58334385989f.roa (raw, json)
Hash identifier:          urFwvOmWIdr+wvLce07YnMpdiYtUC8Lx3nLa68K8M/c=
Subject key identifier:   5C:FB:DC:74:60:2A:12:CF:E7:86:E7:A7:CD:99:B4:91:1B:B5:EA:5B
Certificate issuer:       /CN=8598a5e1-9eb9-4087-b2c1-d25a58f900c6
Certificate serial:       010D0C9F4328584A1895457DF532E867A6454800
Authority key identifier: CA:54:1F:4E:17:01:2C:AA:E6:3A:05:8A:6E:A2:32:56:8E:9C:15:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6/3e223fd6-e6be-376b-be27-58334385989f.roa
Signing time:             Fri 06 Jun 2025 01:00:50 +0000
ROA not before:           Fri 06 Jun 2025 01:00:50 +0000
ROA not after:            Thu 04 Sep 2025 01:00:50 +0000
asID:                     14618
IP address blocks:        45.45.214.0/24 maxlen: 24
                          136.175.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6/8598a5e1-9eb9-4087-b2c1-d25a58f900c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6/8598a5e1-9eb9-4087-b2c1-d25a58f900c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:18:95:45:7d:f5:32:e8:67:a6:45:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8598a5e1-9eb9-4087-b2c1-d25a58f900c6
        Validity
            Not Before: Jun  6 01:00:50 2025 GMT
            Not After : Sep  4 01:00:50 2025 GMT
        Subject: CN=27bcd199-f02a-4099-9622-59227a6e2dbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6f:c5:0f:0c:55:bf:0e:36:5e:d6:65:94:5c:
                    bd:39:c1:1a:0f:25:6e:63:7c:40:05:b1:20:6f:25:
                    f1:67:0d:01:53:65:aa:91:24:62:ab:33:81:ec:21:
                    fb:af:04:f5:5a:1b:98:c4:54:ef:0a:91:84:47:ef:
                    c1:d0:1f:0d:93:19:0c:de:d0:97:f4:b0:da:45:97:
                    22:f8:ce:2c:78:c8:e5:42:07:0c:82:e6:de:62:c6:
                    bf:4d:ed:16:80:ab:52:db:25:d1:4a:a5:dd:c0:6f:
                    02:23:60:b5:c5:1a:94:78:b4:2e:59:e6:1d:8b:2c:
                    08:73:1b:4b:91:00:ff:c2:ad:aa:7e:07:39:52:8d:
                    0b:09:51:04:b4:8b:f3:d1:bb:c0:c5:f7:5c:a1:01:
                    aa:95:07:80:20:0b:84:88:5a:b8:51:21:be:cf:51:
                    4e:ad:10:a9:84:97:a3:32:e9:11:83:90:1f:87:2c:
                    bc:ca:82:dd:84:5b:de:df:f3:29:2b:51:0b:dc:a7:
                    a4:95:26:94:ef:df:5d:12:2c:5d:cb:9a:4b:17:03:
                    f3:e0:6d:1f:a0:91:08:15:c2:38:9f:29:31:ec:79:
                    b4:48:1f:92:ce:e5:16:f6:71:14:0b:57:c5:89:5e:
                    d1:c2:eb:aa:aa:fd:6f:e7:61:a3:68:bd:14:d3:4f:
                    8f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:FB:DC:74:60:2A:12:CF:E7:86:E7:A7:CD:99:B4:91:1B:B5:EA:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6/3e223fd6-e6be-376b-be27-58334385989f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6/8598a5e1-9eb9-4087-b2c1-d25a58f900c6.crl

            X509v3 Authority Key Identifier:
                keyid:CA:54:1F:4E:17:01:2C:AA:E6:3A:05:8A:6E:A2:32:56:8E:9C:15:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.214.0/24
                  136.175.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:2a:79:81:19:8e:c9:ed:a2:6c:da:4a:0f:e3:e0:88:98:05:
         bf:42:b4:be:37:f5:93:f4:c6:88:59:0b:69:09:61:4e:13:8e:
         75:67:e5:d9:55:cc:7a:34:5b:e9:6c:27:43:b2:8c:37:25:06:
         ca:62:6d:ae:2a:c5:bf:ae:58:6d:7c:a7:ef:a6:ce:b9:44:0b:
         e4:bb:3f:c2:24:4c:1f:e5:ec:3b:a7:68:3e:f5:a3:44:6b:ef:
         3b:dd:42:65:66:6d:e7:60:9c:29:6e:5f:08:7c:13:0c:98:c8:
         98:60:14:68:84:f1:89:d3:01:ca:b4:39:26:58:fe:01:6e:60:
         45:37:07:60:09:ae:10:5b:58:e8:53:ae:b3:31:57:4c:d5:14:
         b5:c0:68:16:57:44:1a:40:e0:ac:aa:83:70:44:0b:78:bb:0e:
         c4:a0:93:19:e0:a5:8c:1f:2a:13:d5:6a:eb:9c:a2:29:c5:0d:
         c0:8f:e2:de:dc:ff:b9:c6:67:6a:4d:b4:b6:6a:64:a1:86:a0:
         0c:5b:44:af:6c:d3:a5:f0:25:eb:8c:94:5d:52:cc:10:c9:7a:
         1f:85:43:b2:da:05:82:e6:f9:1d:82:5a:c5:5b:08:fe:b2:03:
         5a:8b:1c:dc:e4:8d:05:15:a7:a0:ac:75:67:bc:73:aa:73:6e:
         ce:68:f9:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 09:42:06 2025 by rpki-client