Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/5c493b6a-9660-39cf-a701-21e5b484d067.roa
File:                     5c493b6a-9660-39cf-a701-21e5b484d067.roa (raw, json)
Hash identifier:          9odnvwQM0pN5kQ2YslTOoiVMdpS7PJ/BrKsq9fqJtao=
Subject key identifier:   CC:45:12:8F:AF:12:30:C4:0B:67:0D:BA:8D:C6:95:7F:84:F8:CA:81
Certificate issuer:       /CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544
Certificate serial:       010D0C9F4328584A2C2017016EB073AE6E482780
Authority key identifier: 1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/5c493b6a-9660-39cf-a701-21e5b484d067.roa
Signing time:             Fri 13 Jun 2025 01:00:51 +0000
ROA not before:           Fri 13 Jun 2025 01:00:51 +0000
ROA not after:            Thu 11 Sep 2025 01:00:51 +0000
asID:                     23470
IP address blocks:        45.58.112.0/24 maxlen: 24
                          45.58.113.0/24 maxlen: 24
                          45.58.114.0/24 maxlen: 24
                          45.58.115.0/24 maxlen: 24
                          45.58.116.0/24 maxlen: 24
                          45.58.117.0/24 maxlen: 24
                          45.58.118.0/24 maxlen: 24
                          45.58.119.0/24 maxlen: 24
                          45.58.120.0/24 maxlen: 24
                          45.58.121.0/24 maxlen: 24
                          45.58.122.0/24 maxlen: 24
                          45.58.123.0/24 maxlen: 24
                          45.58.124.0/24 maxlen: 24
                          45.58.125.0/24 maxlen: 24
                          45.58.126.0/24 maxlen: 24
                          45.58.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2c:20:17:01:6e:b0:73:ae:6e:48:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544
        Validity
            Not Before: Jun 13 01:00:51 2025 GMT
            Not After : Sep 11 01:00:51 2025 GMT
        Subject: CN=7d8166cd-5205-4574-97cb-82f767831040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:79:23:cd:0b:39:ce:8d:10:a3:ea:e1:d4:16:
                    2c:8b:5c:1f:26:79:6d:ac:5f:ff:6c:f8:ab:02:be:
                    28:27:74:0a:73:be:73:0e:3d:31:c9:19:4e:85:1a:
                    f7:9b:cd:0f:69:97:0e:48:4c:2c:c3:13:d8:a7:bc:
                    cb:1d:34:d8:dc:89:e9:fb:65:0d:1c:0c:5c:5f:a1:
                    3f:67:bd:d9:7f:a8:4e:9e:e7:b2:ef:30:28:9e:fa:
                    2a:4b:ea:a0:b0:c2:34:ff:98:02:95:b4:8a:e0:1f:
                    c8:85:1f:a4:fe:86:da:d7:5c:eb:66:48:46:c4:77:
                    c5:66:d1:7c:7a:07:28:df:82:d9:68:98:0f:81:76:
                    9f:48:d3:6f:7f:83:3a:48:cc:fe:b9:70:f7:e4:ab:
                    c1:9f:62:23:d0:da:8b:c7:ae:66:0a:64:7c:71:21:
                    ac:23:20:cb:61:c4:4d:f0:d3:2a:82:ad:d0:2a:cd:
                    51:dc:a8:2f:ee:e1:bc:2e:10:9a:11:bc:52:65:2f:
                    4d:56:d5:5c:98:03:54:2c:de:c0:4a:46:77:8b:92:
                    9d:9d:54:48:9b:53:d3:89:b7:fb:b8:aa:4e:9a:b3:
                    e5:ff:50:ac:b2:c0:02:f3:b3:1a:e3:3b:9c:cd:4b:
                    50:2d:c9:2a:da:d2:77:01:92:7b:d9:aa:7e:aa:2e:
                    ba:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:45:12:8F:AF:12:30:C4:0B:67:0D:BA:8D:C6:95:7F:84:F8:CA:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/5c493b6a-9660-39cf-a701-21e5b484d067.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl

            X509v3 Authority Key Identifier:
                keyid:1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.58.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:cb:bb:83:70:4a:6f:de:b4:56:d4:c8:a3:8a:0d:a7:ec:75:
         6e:ff:9b:cd:17:18:2b:60:62:dd:89:3c:6b:23:29:11:3d:18:
         68:25:ed:2e:6b:4b:ed:97:9f:ca:cd:ce:a6:78:4a:5b:45:70:
         0f:fa:58:88:87:4d:6b:44:cf:c2:57:e2:0b:82:1a:32:ef:5d:
         52:aa:f5:57:d7:f4:80:09:f4:79:d9:25:a2:d8:8e:ae:d3:10:
         08:c4:17:bc:49:12:20:08:b2:54:08:b2:72:31:5e:8e:7f:3a:
         90:e9:3a:32:65:56:6f:ce:ba:d9:ef:e1:63:26:13:b5:d2:a4:
         47:71:71:29:44:fe:3d:d9:5e:8a:73:30:99:02:0d:f3:c3:82:
         0c:56:45:50:73:2e:9b:84:6e:0e:67:82:27:58:b3:cb:5d:42:
         08:3e:42:44:47:cc:e7:79:b2:19:74:a1:be:8d:d7:0a:a5:09:
         ab:9d:c9:56:cc:af:4d:8b:9b:79:2e:a4:9b:cb:57:d2:cb:13:
         cb:bc:4a:fe:ed:bc:a4:1e:35:f8:56:74:fa:b1:f3:1a:f6:43:
         48:a8:63:d7:ad:19:8e:30:c2:d4:0d:bb:5f:be:60:18:9c:46:
         a2:3d:e8:f9:1e:93:51:55:9f:6c:0c:b3:52:00:56:a8:b8:52:
         35:35:b2:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 01:24:43 2025 by rpki-client