Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/bbef93dd-8e76-38f0-9543-b554a222aa98.roa
File:                     bbef93dd-8e76-38f0-9543-b554a222aa98.roa (raw, json)
Hash identifier:          1ELKK5ZUl9OiozIG2MJcPcF7hPRbYOH5NtJ1SACMzoY=
Subject key identifier:   99:F9:A6:B7:AF:DA:5A:45:4B:F1:D4:33:C5:AF:40:91:15:D9:21:E9
Certificate issuer:       /CN=51772dd7-991f-47b2-b40b-d92a8497234e
Certificate serial:       010D0C9F43285849A354813DC11A1B355F688C00
Authority key identifier: D7:BC:A9:71:3D:2E:8C:BE:A8:BC:77:2E:30:C3:3D:60:09:04:02:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/bbef93dd-8e76-38f0-9543-b554a222aa98.roa
Signing time:             Fri 25 Apr 2025 01:00:47 +0000
ROA not before:           Fri 25 Apr 2025 01:00:47 +0000
ROA not after:            Thu 24 Jul 2025 01:00:47 +0000
asID:                     14618
IP address blocks:        45.10.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a3:54:81:3d:c1:1a:1b:35:5f:68:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51772dd7-991f-47b2-b40b-d92a8497234e
        Validity
            Not Before: Apr 25 01:00:47 2025 GMT
            Not After : Jul 24 01:00:47 2025 GMT
        Subject: CN=80dfa3fa-3fb6-4b63-b299-1cdee276a23f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:86:59:b4:02:44:57:00:8b:c4:42:33:2e:94:
                    9e:b6:cf:34:34:33:7a:a6:da:e7:f8:a1:95:39:76:
                    3b:7d:f6:65:76:1d:25:14:a3:10:60:8b:fc:0d:46:
                    80:66:5a:35:3c:52:0e:4f:70:14:7e:6a:de:58:7f:
                    91:b8:0d:3c:d3:7c:fb:e6:ec:83:44:31:8b:d2:1d:
                    c9:e9:8a:4f:ec:7b:f7:83:fe:8b:26:0b:47:9d:7a:
                    56:6e:d7:f6:5a:1d:37:7a:44:b5:d3:56:fc:57:db:
                    6b:07:18:f1:a4:d7:80:a9:f5:2f:88:35:6f:49:9f:
                    31:2e:d8:bf:20:11:f3:55:2a:8f:5b:44:6a:6d:1a:
                    da:fa:00:68:e7:24:3d:17:fa:95:93:38:95:25:8f:
                    de:92:4c:4c:e9:c7:ea:a4:bd:57:71:4c:5d:ef:34:
                    2a:5f:28:a4:b3:25:94:b6:e8:d5:c0:20:a0:68:f0:
                    bc:e6:25:09:d4:94:e6:07:f5:3c:17:67:0f:1a:22:
                    d7:22:e2:77:16:66:36:cc:c2:86:3a:cc:46:08:3f:
                    c5:05:9b:43:1b:b8:fe:cd:91:63:00:58:df:51:9c:
                    d7:35:ef:e7:0f:6b:d2:92:99:87:a8:6d:ed:20:fd:
                    e2:bd:85:d4:13:39:ca:12:b4:2c:b7:3e:57:e4:14:
                    ca:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:F9:A6:B7:AF:DA:5A:45:4B:F1:D4:33:C5:AF:40:91:15:D9:21:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/bbef93dd-8e76-38f0-9543-b554a222aa98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.crl

            X509v3 Authority Key Identifier:
                keyid:D7:BC:A9:71:3D:2E:8C:BE:A8:BC:77:2E:30:C3:3D:60:09:04:02:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.10.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:ab:b8:47:d9:d8:08:09:97:08:e0:63:8f:7f:5e:89:c5:eb:
         37:8e:32:81:fc:3b:53:53:f2:e2:9e:f1:c6:46:60:a6:6e:88:
         8b:1b:35:ac:d1:02:66:86:b4:14:34:11:88:32:15:6f:89:2d:
         28:a1:33:72:12:55:76:2b:54:3a:8a:b8:bf:ee:ef:60:31:45:
         05:d7:07:9a:d4:70:b5:54:16:75:13:42:52:e3:88:e4:67:df:
         26:e7:f0:96:05:91:02:1b:8c:a9:ec:59:b0:0b:24:88:6f:4a:
         5c:af:6c:b5:9b:b3:e3:db:91:aa:06:3b:34:51:30:d4:1e:29:
         41:e1:81:57:86:47:86:50:06:28:e2:c9:a3:f2:91:77:3e:55:
         32:95:6a:dc:26:05:75:36:03:9e:28:79:62:8d:01:5a:bf:de:
         c7:a2:8e:57:ca:d9:79:4f:2d:08:e2:73:67:a0:44:fc:63:4e:
         07:a1:fc:56:14:66:38:fd:6a:37:c0:5c:bc:40:8f:35:10:35:
         7d:d5:cd:76:35:81:e2:7b:33:28:8a:03:f0:77:60:a8:9e:65:
         8e:63:3b:92:d0:66:9e:a3:68:fa:9b:66:a5:12:1c:08:45:e7:
         fd:5b:3c:c2:ac:db:df:73:cf:ff:10:14:ff:b4:76:d0:09:df:
         db:6e:77:bf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmjVIE9wRobNV9ojAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE3NzJkZDctOTkxZi00N2IyLWI0MGItZDkyYTg0OTcy
MzRlMB4XDTI1MDQyNTAxMDA0N1oXDTI1MDcyNDAxMDA0N1owLzEtMCsGA1UEAxMk
ODBkZmEzZmEtM2ZiNi00YjYzLWIyOTktMWNkZWUyNzZhMjNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoZZtAJEVwCLxEIzLpSets80NDN6ptrn+KGV
OXY7ffZldh0lFKMQYIv8DUaAZlo1PFIOT3AUfmreWH+RuA0803z75uyDRDGL0h3J
6YpP7Hv3g/6LJgtHnXpWbtf2Wh03ekS101b8V9trBxjxpNeAqfUviDVvSZ8xLti/
IBHzVSqPW0RqbRra+gBo5yQ9F/qVkziVJY/ekkxM6cfqpL1XcUxd7zQqXyiksyWU
tujVwCCgaPC85iUJ1JTmB/U8F2cPGiLXIuJ3FmY2zMKGOsxGCD/FBZtDG7j+zZFj
AFjfUZzXNe/nD2vSkpmHqG3tIP3ivYXUEznKErQstz5X5BTKYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJn5prev2lpFS/HUM8WvQJEV2SHpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MTc3
MmRkNy05OTFmLTQ3YjItYjQwYi1kOTJhODQ5NzIzNGUvYmJlZjkzZGQtOGU3Ni0z
OGYwLTk1NDMtYjU1NGEyMjJhYTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTE3NzJkZDctOTkxZi00N2IyLWI0
MGItZDkyYTg0OTcyMzRlLzUxNzcyZGQ3LTk5MWYtNDdiMi1iNDBiLWQ5MmE4NDk3
MjM0ZS5jcmwwHwYDVR0jBBgwFoAU17ypcT0ujL6ovHcuMMM9YAkEAo4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81MTc3MmRkNy05OTFmLTQ3YjItYjQwYi1kOTJh
ODQ5NzIzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQo5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABaruEfZ2AgJlwjgY49/XonF6zeOMoH8O1NT8uKe8cZGYKZuiIsbNazR
AmaGtBQ0EYgyFW+JLSihM3ISVXYrVDqKuL/u72AxRQXXB5rUcLVUFnUTQlLjiORn
3ybn8JYFkQIbjKnsWbALJIhvSlyvbLWbs+PbkaoGOzRRMNQeKUHhgVeGR4ZQBiji
yaPykXc+VTKVatwmBXU2A54oeWKNAVq/3seijlfK2XlPLQjic2egRPxjTgeh/FYU
Zjj9ajfAXLxAjzUQNX3VzXY1geJ7MyiKA/B3YKieZY5jO5LQZp6jaPqbZqUSHAhF
5/1bPMKs299zz/8QFP+0dtAJ39tud78=
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:33:46 2025 by rpki-client