Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e5ca1f47-d81d-3129-af6e-f848e999731d.roa
File:                     e5ca1f47-d81d-3129-af6e-f848e999731d.roa (raw, json)
Hash identifier:          Is8OsB8q9sFl3U2TQzhdssGVPxlF929lFVG1T7MuCec=
Subject key identifier:   07:55:48:EB:5F:B8:16:F0:23:DD:E4:75:F1:4B:3D:4C:36:A8:F7:B8
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849FB4530776CF1C83272A6AE72
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e5ca1f47-d81d-3129-af6e-f848e999731d.roa
Signing time:             Mon 26 May 2025 13:01:03 +0000
ROA not before:           Mon 26 May 2025 13:01:03 +0000
ROA not after:            Sun 24 Aug 2025 13:01:03 +0000
asID:                     30036
IP address blocks:        45.59.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fb:45:30:77:6c:f1:c8:32:72:a6:ae:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May 26 13:01:03 2025 GMT
            Not After : Aug 24 13:01:03 2025 GMT
        Subject: CN=25973a97-142d-4d21-94ed-b933c711b42e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:79:bc:16:11:8f:47:81:0a:1d:1e:72:98:60:
                    db:67:2c:fc:1f:7b:af:e3:09:c7:0b:48:21:d2:d3:
                    d3:10:40:53:55:86:bb:1d:92:c3:42:52:b6:25:ed:
                    55:3d:d4:42:f4:3d:f9:bd:0e:b1:d6:eb:8d:69:c4:
                    33:9b:cd:24:46:aa:de:c6:89:e9:15:99:63:c4:57:
                    42:88:c3:58:03:45:86:fb:f2:01:3c:29:10:ca:a1:
                    fc:c4:bc:0a:f9:be:42:e9:a7:2b:37:cf:54:d5:83:
                    53:b4:43:9e:40:79:48:b7:b3:ce:ae:c1:f5:ec:d4:
                    80:7b:62:b7:6a:27:50:d2:fe:15:c3:b6:d7:78:3c:
                    c4:2c:a3:7b:c0:f6:ac:a9:89:0d:d6:f0:d3:9a:bd:
                    7a:af:7d:73:25:19:83:f9:92:e5:be:4b:5f:9b:79:
                    0c:19:33:60:73:45:ce:de:c3:04:f3:45:d9:c3:ec:
                    1f:93:26:b9:56:78:1e:2e:7d:99:80:8f:38:99:2b:
                    72:93:71:be:69:49:10:33:7c:cf:17:d5:d9:be:90:
                    79:c4:18:1d:07:99:d9:5d:cd:b9:e4:54:f1:f9:26:
                    7d:d0:bc:ea:f3:e9:7f:19:54:0a:81:72:09:0e:ae:
                    9b:a4:ca:79:09:45:f4:8c:15:99:83:68:71:bf:cc:
                    a6:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:55:48:EB:5F:B8:16:F0:23:DD:E4:75:F1:4B:3D:4C:36:A8:F7:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e5ca1f47-d81d-3129-af6e-f848e999731d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:2e:bb:a6:30:bf:fd:11:fc:17:39:30:12:cd:cb:78:a9:c4:
         5c:16:06:70:55:4b:ec:68:63:66:66:17:8a:8a:03:cb:6f:cf:
         34:c9:67:d8:13:dc:40:32:62:84:af:de:69:78:4f:1b:65:6f:
         1f:d2:af:db:ef:84:35:bd:16:51:f7:af:d6:33:0f:f8:4b:44:
         2e:ec:25:ce:f1:c1:cf:9b:1b:83:3f:32:9b:02:b9:e7:4b:af:
         22:fa:51:cd:da:29:22:dc:71:3a:a9:d1:c4:72:29:c5:83:56:
         46:ee:f2:7b:3e:12:70:ea:89:2a:7e:40:0c:93:c3:02:dd:dc:
         97:1b:71:df:c4:49:c0:7e:4d:c7:98:62:83:03:34:ab:4c:05:
         6c:f2:f2:5c:0a:33:8e:30:fb:93:a0:82:a5:c1:40:8c:01:83:
         a0:f3:c4:9d:68:5f:48:48:82:e8:90:77:b9:1c:78:79:a0:ac:
         eb:9b:ad:dc:79:96:06:c9:17:75:7b:18:b0:bc:de:a1:ad:dc:
         3f:3a:47:0b:1c:59:87:a9:d1:2a:a8:65:ff:d5:90:8a:26:bd:
         96:a4:df:09:3b:04:2e:64:ac:03:6c:5a:de:98:cb:1b:78:42:
         9a:8b:4d:2c:fe:40:f8:69:92:10:ab:c2:ff:c6:4e:1f:0c:8e:
         4e:15:8c:c9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn7RTB3bPHIMnKmrnIwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDUyNjEzMDEwM1oXDTI1MDgyNDEzMDEwM1owLzEtMCsGA1UEAxMk
MjU5NzNhOTctMTQyZC00ZDIxLTk0ZWQtYjkzM2M3MTFiNDJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHm8FhGPR4EKHR5ymGDbZyz8H3uv4wnHC0gh
0tPTEEBTVYa7HZLDQlK2Je1VPdRC9D35vQ6x1uuNacQzm80kRqrexonpFZljxFdC
iMNYA0WG+/IBPCkQyqH8xLwK+b5C6acrN89U1YNTtEOeQHlIt7POrsH17NSAe2K3
aidQ0v4Vw7bXeDzELKN7wPasqYkN1vDTmr16r31zJRmD+ZLlvktfm3kMGTNgc0XO
3sME80XZw+wfkya5VngeLn2ZgI84mStyk3G+aUkQM3zPF9XZvpB5xBgdB5nZXc25
5FTx+SZ90Lzq8+l/GVQKgXIJDq6bpMp5CUX0jBWZg2hxv8ymgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAdVSOtfuBbwI93kdfFLPUw2qPe4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZTVjYTFmNDctZDgxZC0z
MTI5LWFmNmUtZjg0OGU5OTk3MzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALTsBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEUuu6Ywv/0R/Bc5MBLNy3ipxFwWBnBVS+xoY2ZmF4qKA8tvzzTJZ9gT
3EAyYoSv3ml4Txtlbx/Sr9vvhDW9FlH3r9YzD/hLRC7sJc7xwc+bG4M/MpsCuedL
ryL6Uc3aKSLccTqp0cRyKcWDVkbu8ns+EnDqiSp+QAyTwwLd3Jcbcd/EScB+TceY
YoMDNKtMBWzy8lwKM44w+5OggqXBQIwBg6DzxJ1oX0hIguiQd7kceHmgrOubrdx5
lgbJF3V7GLC83qGt3D86RwscWYep0SqoZf/VkIomvZak3wk7BC5krANsWt6Yyxt4
QpqLTSz+QPhpkhCrwv/GTh8Mjk4VjMk=
-----END CERTIFICATE-----
Generated at Mon Jun 16 21:09:55 2025 by rpki-client