Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c6cf724f-f412-40a8-bfd9-a52cf7dc1112/132df407-2954-342d-a407-7ef48c2f0048.roa
File:                     132df407-2954-342d-a407-7ef48c2f0048.roa (raw, json)
Hash identifier:          4Jc3yHUBJtrLUnWZvc7wHVLC/xGcKmR3O8+UJHb4xQA=
Subject key identifier:   F7:CA:CE:A3:DF:6E:9E:D7:C8:3C:11:12:E7:24:58:FF:57:CB:F9:89
Certificate issuer:       /CN=c6cf724f-f412-40a8-bfd9-a52cf7dc1112
Certificate serial:       010D0C9F43285849CBCFA09462A61ED1F539FA00
Authority key identifier: EA:6A:D0:DB:46:D3:97:B6:E6:D5:7B:38:2A:FC:C4:AC:96:A9:B5:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c6cf724f-f412-40a8-bfd9-a52cf7dc1112.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c6cf724f-f412-40a8-bfd9-a52cf7dc1112/132df407-2954-342d-a407-7ef48c2f0048.roa
Signing time:             Fri 09 May 2025 13:01:00 +0000
ROA not before:           Fri 09 May 2025 13:01:00 +0000
ROA not after:            Thu 07 Aug 2025 13:01:00 +0000
asID:                     7029
IP address blocks:        45.45.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c6cf724f-f412-40a8-bfd9-a52cf7dc1112/c6cf724f-f412-40a8-bfd9-a52cf7dc1112.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c6cf724f-f412-40a8-bfd9-a52cf7dc1112/c6cf724f-f412-40a8-bfd9-a52cf7dc1112.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c6cf724f-f412-40a8-bfd9-a52cf7dc1112.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cf:a0:94:62:a6:1e:d1:f5:39:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6cf724f-f412-40a8-bfd9-a52cf7dc1112
        Validity
            Not Before: May  9 13:01:00 2025 GMT
            Not After : Aug  7 13:01:00 2025 GMT
        Subject: CN=ba789c5a-4ddc-433c-896a-9712ead7e337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:78:b3:fe:20:6e:3b:2e:92:11:9b:bc:fc:fd:
                    47:72:d7:73:25:79:e1:44:e9:b8:b4:34:a2:47:3b:
                    34:1b:d5:40:d3:d1:f6:01:fe:bf:c3:4e:69:d8:91:
                    b2:f3:17:c5:e2:44:66:75:f5:46:21:62:c1:68:fa:
                    73:11:b8:ba:c8:5c:b0:71:0a:a8:4a:c5:78:dd:7d:
                    0f:a1:92:70:92:39:94:44:7b:8b:eb:cf:ce:ac:1c:
                    a4:d6:f1:d9:52:ef:df:63:4b:46:78:a3:95:a5:69:
                    d9:3d:c2:dc:38:4c:e4:1b:c4:35:31:81:a9:b8:0a:
                    cf:72:5c:f8:9a:f3:79:fa:68:49:53:1f:1c:22:52:
                    3f:4a:f0:34:10:c9:fc:46:a3:e6:8a:f9:ec:e0:75:
                    d3:bd:51:c7:2b:32:91:04:e2:45:bb:6b:f2:a0:ae:
                    61:a1:cd:67:dd:3c:08:bf:54:43:2d:f7:d1:8a:f1:
                    ac:ac:c2:96:83:d0:ba:d8:db:34:87:9f:48:6c:80:
                    14:76:c8:83:1e:a2:03:f0:22:bf:37:7e:63:6d:19:
                    b2:60:17:de:17:25:74:0b:1c:c6:af:c3:76:c0:8c:
                    2c:03:9c:1f:7f:2b:9f:85:09:e0:02:52:be:74:7e:
                    a3:e7:f4:70:08:43:10:96:bf:66:a6:d0:9d:2b:b6:
                    b5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:CA:CE:A3:DF:6E:9E:D7:C8:3C:11:12:E7:24:58:FF:57:CB:F9:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c6cf724f-f412-40a8-bfd9-a52cf7dc1112/132df407-2954-342d-a407-7ef48c2f0048.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c6cf724f-f412-40a8-bfd9-a52cf7dc1112/c6cf724f-f412-40a8-bfd9-a52cf7dc1112.crl

            X509v3 Authority Key Identifier:
                keyid:EA:6A:D0:DB:46:D3:97:B6:E6:D5:7B:38:2A:FC:C4:AC:96:A9:B5:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c6cf724f-f412-40a8-bfd9-a52cf7dc1112.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:67:e4:23:b2:46:7d:8f:18:b8:30:79:fc:43:3b:1c:c1:61:
         a5:49:62:1f:b5:89:47:be:bc:2a:93:b1:89:61:77:b3:29:3b:
         62:cb:44:51:4f:14:a4:a5:e2:70:76:93:ec:b3:ca:52:42:a6:
         0c:fc:e6:09:3e:fd:62:08:c5:85:f3:73:ef:c3:c3:2b:b9:50:
         3e:f8:88:49:e7:e5:b1:df:d9:52:73:6f:08:d1:38:1b:4d:cd:
         92:d0:93:c3:5c:0b:f8:28:47:87:9c:bf:df:d0:cc:38:8e:5d:
         c0:ce:d3:dc:3a:bb:b4:24:91:65:33:e4:af:40:fa:73:f1:73:
         4f:ab:2f:bf:ba:8f:51:87:36:be:2c:88:1a:d6:5e:2f:8e:e5:
         64:40:30:d4:62:dd:50:4a:7f:a3:42:f4:6f:ae:fb:01:30:9c:
         19:3b:79:df:54:9f:fe:e5:d9:fb:05:bd:37:3f:46:c7:e4:e6:
         4b:ba:86:b6:cc:e6:76:68:9c:95:35:8b:9f:e7:d9:63:3f:8d:
         7d:ef:6d:f3:2b:24:6a:3a:56:c8:48:4c:81:5d:c5:61:ee:7d:
         0d:07:4d:4c:89:0c:bc:6b:6e:8e:0a:f3:a9:9c:96:57:15:64:
         03:23:fa:42:ce:c5:0e:2b:2d:f1:76:db:06:de:b4:20:46:39:
         e8:90:98:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:57:58 2025 by rpki-client