Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/ee1a4e04-68da-38e4-9471-1d40d048b137.roa
File:                     ee1a4e04-68da-38e4-9471-1d40d048b137.roa (raw, json)
Hash identifier:          ULbS/f0NayUy+vPF2/PlI+oVa0l7TbGg7MB0rvTD1Fs=
Subject key identifier:   BD:61:A4:9E:B5:23:A4:B7:0A:EF:44:60:09:9F:2F:19:5B:17:FD:68
Certificate issuer:       /CN=b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6
Certificate serial:       010D0C9F4328584A03A54479E9809B337B9EC240
Authority key identifier: 4F:84:29:20:F1:6A:65:B2:5E:48:CA:51:3F:B5:25:8B:50:8A:F5:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/ee1a4e04-68da-38e4-9471-1d40d048b137.roa
Signing time:             Thu 29 May 2025 13:01:03 +0000
ROA not before:           Thu 29 May 2025 13:01:03 +0000
ROA not after:            Wed 27 Aug 2025 13:01:03 +0000
asID:                     174
IP address blocks:        45.45.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:a5:44:79:e9:80:9b:33:7b:9e:c2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6
        Validity
            Not Before: May 29 13:01:03 2025 GMT
            Not After : Aug 27 13:01:03 2025 GMT
        Subject: CN=b0febcdd-51cc-4c35-9a79-bee4585e486c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1f:98:1a:c7:c6:5f:86:e2:24:35:f6:f1:7a:
                    25:86:05:55:d0:eb:4c:ce:9c:f9:4c:7e:dc:b2:0a:
                    8d:51:42:3d:91:04:5b:ac:89:bd:b0:ee:d2:d1:35:
                    1f:2f:9f:3d:12:f5:7f:fc:b2:6b:ef:11:2b:17:73:
                    5c:80:5f:af:bb:d5:59:ea:65:ad:9b:d8:3c:f3:9b:
                    ca:38:2a:b8:22:70:0a:05:15:d1:00:25:4b:78:e5:
                    38:6f:d9:20:0f:97:fd:51:de:3f:fc:f5:8f:56:69:
                    76:0d:f1:f4:5a:e7:9c:c0:d6:31:64:bd:4d:f0:32:
                    c5:ed:01:01:5e:e4:82:02:d2:80:b4:c0:43:46:29:
                    0e:46:2a:df:e7:b9:b4:7e:3c:78:5d:57:01:0c:f6:
                    49:5b:79:cd:93:cb:ea:ba:60:1c:be:ef:f8:fd:a1:
                    39:81:4d:f4:7b:15:9d:e0:43:3d:1c:0b:2c:af:9c:
                    d2:42:a8:f4:c3:0a:ee:b2:0a:42:87:8c:14:8b:b3:
                    86:fc:02:e6:01:f1:fa:48:64:62:6a:8f:58:13:36:
                    84:7d:bc:87:22:3b:35:d7:64:ae:6b:d3:bc:b1:00:
                    d5:6f:26:e5:a5:f8:61:ad:33:67:b3:08:ba:83:d0:
                    7e:31:2b:bc:16:db:2f:ce:27:d0:1f:08:8f:d7:a4:
                    a8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:61:A4:9E:B5:23:A4:B7:0A:EF:44:60:09:9F:2F:19:5B:17:FD:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/ee1a4e04-68da-38e4-9471-1d40d048b137.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.crl

            X509v3 Authority Key Identifier:
                keyid:4F:84:29:20:F1:6A:65:B2:5E:48:CA:51:3F:B5:25:8B:50:8A:F5:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:bf:77:f1:09:e2:d2:c9:3c:7f:93:f4:91:4c:8c:6d:77:90:
         6d:a8:2e:f7:40:86:ff:51:99:44:1e:c9:f8:d7:93:dd:79:91:
         d3:14:a0:3e:18:f1:bb:ad:bf:71:ab:80:de:c7:ed:2d:d7:23:
         94:da:e7:a6:82:8c:27:42:15:7b:11:1a:fa:33:2b:f8:7c:91:
         1c:fb:91:ef:56:e3:00:2a:99:56:8e:93:e7:a6:1a:a0:37:e7:
         7d:19:6c:17:49:14:24:38:1c:4a:ee:e8:13:bc:89:6c:63:32:
         b8:6c:7f:39:b7:4b:ea:05:b4:53:44:c3:db:71:0b:11:d4:dd:
         6d:f2:f5:71:b1:f7:31:6a:13:a6:75:07:a0:b9:5f:6f:e2:ef:
         98:89:09:68:f9:16:04:83:2f:ff:2f:9d:95:25:ec:94:eb:43:
         94:27:7c:1b:00:2c:74:28:80:a4:ae:f5:ea:11:4e:5a:2a:38:
         c7:66:14:36:4b:22:6a:a8:df:13:17:98:3a:55:6b:1e:95:f3:
         4a:45:10:4c:09:b6:1e:5b:eb:fe:ec:db:0a:38:aa:70:fc:7b:
         1d:ad:e4:0e:fe:63:e9:0b:61:3e:56:c4:ff:a8:29:1d:da:0b:
         28:5d:9f:65:73:0c:5b:38:fc:ec:1a:59:bf:5e:f1:2b:1f:53:
         4d:7e:37:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:53:28 2025 by rpki-client