Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe/b1029df9-cad0-32d5-b53f-d2e308d6fff3.roa
File:                     b1029df9-cad0-32d5-b53f-d2e308d6fff3.roa (raw, json)
Hash identifier:          AVJ76WLykaohLSLTNq+xTrf2TNpW4cb/NWTDpCU3mAM=
Subject key identifier:   C2:03:CB:6E:A7:DD:D7:57:E3:63:73:2E:61:CE:09:C4:AE:D6:4C:F9
Certificate issuer:       /CN=ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe
Certificate serial:       010D0C9F4328584910E17CA2DCC794D68D735700
Authority key identifier: 22:61:4F:70:F7:39:6B:85:5D:27:5B:1F:0F:AD:AB:01:7B:55:A7:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe/b1029df9-cad0-32d5-b53f-d2e308d6fff3.roa
Signing time:             Mon 03 Mar 2025 14:00:53 +0000
ROA not before:           Mon 03 Mar 2025 14:00:53 +0000
ROA not after:            Sun 01 Jun 2025 13:00:53 +0000
asID:                     16509
IP address blocks:        45.45.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:10:e1:7c:a2:dc:c7:94:d6:8d:73:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe
        Validity
            Not Before: Mar  3 14:00:53 2025 GMT
            Not After : Jun  1 13:00:53 2025 GMT
        Subject: CN=9cf4fc66-3280-4f8f-9c24-72fab1cd7ccf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:71:62:92:b8:ea:5a:92:af:ed:0f:08:9c:26:
                    5a:a8:c3:2d:5f:4f:96:0f:0c:76:58:53:89:28:8c:
                    9e:3f:8f:71:3d:2b:6d:1e:11:14:a0:c4:ab:e3:8d:
                    22:51:5b:dd:24:2c:82:dc:ed:44:31:04:ee:9f:93:
                    02:8c:79:a9:6b:18:77:96:77:08:41:dd:d0:b6:c5:
                    e3:35:07:88:50:20:8b:e3:1a:36:8b:bc:29:cb:7c:
                    75:ae:c1:d9:ef:b0:f4:a0:d2:6b:90:cb:ca:67:5d:
                    c8:fc:e9:f3:70:75:b2:e5:f4:c9:9d:d1:9a:93:dd:
                    06:cc:9d:73:61:8b:f7:12:a8:88:aa:10:af:73:48:
                    f4:ec:77:c4:5a:4f:3c:3f:c5:5f:b5:70:f3:67:42:
                    f0:7d:9d:79:e3:6a:5e:93:e8:c1:62:89:ef:45:b6:
                    5b:01:ab:3d:2e:42:b4:73:1b:f6:12:a3:a2:5d:82:
                    9c:51:37:43:30:aa:62:33:5e:d9:7a:13:67:50:ac:
                    46:48:33:31:18:23:4e:c7:ce:3c:a9:ff:4e:b3:00:
                    ac:5c:13:e5:fc:ff:ec:22:1c:ec:bd:ef:0f:e5:2a:
                    07:66:38:c3:24:00:df:4f:95:2c:ef:b0:05:1d:3f:
                    48:45:fc:38:20:78:2a:96:9d:c3:b3:f4:4a:00:c9:
                    03:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:03:CB:6E:A7:DD:D7:57:E3:63:73:2E:61:CE:09:C4:AE:D6:4C:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe/b1029df9-cad0-32d5-b53f-d2e308d6fff3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe.crl

            X509v3 Authority Key Identifier:
                keyid:22:61:4F:70:F7:39:6B:85:5D:27:5B:1F:0F:AD:AB:01:7B:55:A7:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:95:59:02:d8:c1:cd:62:59:4e:4e:1e:a0:67:5e:db:c4:1e:
         55:3e:5c:29:ac:8e:01:93:0b:67:46:87:f8:83:60:1f:6f:e7:
         27:8b:40:e9:2b:80:12:45:d7:1f:6f:90:a8:8f:ed:08:6f:a9:
         8e:23:1e:23:81:28:9f:e3:ba:9b:a9:12:fa:0d:76:17:67:70:
         1d:50:6d:3e:76:23:7d:1b:b5:b8:b3:13:9c:24:b8:db:6b:34:
         8a:ee:6d:d6:0d:bb:59:ee:a3:b0:97:75:80:84:d5:97:fd:ae:
         ab:4b:a8:47:b4:a0:29:ab:0e:e1:81:9e:f5:28:d4:d1:0f:36:
         d6:22:38:86:25:69:9e:89:aa:2f:d9:69:4e:f8:a7:ae:f6:b6:
         50:2d:22:18:20:7f:fe:84:1c:10:1a:a1:b0:fd:c4:e0:62:fa:
         92:46:eb:50:7f:1d:93:4c:e1:9c:94:2b:98:9d:26:14:8e:da:
         9d:cf:b2:b3:9f:68:23:43:89:51:4a:7e:55:e4:f2:9b:3d:49:
         52:65:48:c3:d2:af:91:03:6c:1b:d5:4f:d7:79:77:e4:6f:c2:
         01:7d:82:90:a2:f3:a7:a3:46:c9:97:7c:94:ad:cd:c2:10:9b:
         91:71:7a:68:53:dd:69:82:6b:77:e4:4a:5a:de:11:0d:7c:44:
         69:eb:d0:08
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkQ4Xyi3MeU1o1zVwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWY2ZDdhOTgtYjAyYS00MDc0LWFmZDItOWVlN2NjYjJi
ZGJlMB4XDTI1MDMwMzE0MDA1M1oXDTI1MDYwMTEzMDA1M1owLzEtMCsGA1UEAxMk
OWNmNGZjNjYtMzI4MC00ZjhmLTljMjQtNzJmYWIxY2Q3Y2NmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnFikrjqWpKv7Q8InCZaqMMtX0+WDwx2WFOJ
KIyeP49xPSttHhEUoMSr440iUVvdJCyC3O1EMQTun5MCjHmpaxh3lncIQd3QtsXj
NQeIUCCL4xo2i7wpy3x1rsHZ77D0oNJrkMvKZ13I/OnzcHWy5fTJndGak90GzJ1z
YYv3EqiIqhCvc0j07HfEWk88P8VftXDzZ0LwfZ1542pek+jBYonvRbZbAas9LkK0
cxv2EqOiXYKcUTdDMKpiM17ZehNnUKxGSDMxGCNOx848qf9OswCsXBPl/P/sIhzs
ve8P5SoHZjjDJADfT5Us77AFHT9IRfw4IHgqlp3Ds/RKAMkDFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMIDy26n3ddX42NzLmHOCcSu1kz5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lZjZk
N2E5OC1iMDJhLTQwNzQtYWZkMi05ZWU3Y2NiMmJkYmUvYjEwMjlkZjktY2FkMC0z
MmQ1LWI1M2YtZDJlMzA4ZDZmZmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZWY2ZDdhOTgtYjAyYS00MDc0LWFm
ZDItOWVlN2NjYjJiZGJlL2VmNmQ3YTk4LWIwMmEtNDA3NC1hZmQyLTllZTdjY2Iy
YmRiZS5jcmwwHwYDVR0jBBgwFoAUImFPcPc5a4VdJ1sfD62rAXtVpygwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lZjZkN2E5OC1iMDJhLTQwNzQtYWZkMi05ZWU3
Y2NiMmJkYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALS3UMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIKVWQLYwc1iWU5OHqBnXtvEHlU+XCmsjgGTC2dGh/iDYB9v5yeLQOkr
gBJF1x9vkKiP7QhvqY4jHiOBKJ/jupupEvoNdhdncB1QbT52I30btbizE5wkuNtr
NIrubdYNu1nuo7CXdYCE1Zf9rqtLqEe0oCmrDuGBnvUo1NEPNtYiOIYlaZ6Jqi/Z
aU74p672tlAtIhggf/6EHBAaobD9xOBi+pJG61B/HZNM4ZyUK5idJhSO2p3PsrOf
aCNDiVFKflXk8ps9SVJlSMPSr5EDbBvVT9d5d+RvwgF9gpCi86ejRsmXfJStzcIQ
m5FxemhT3WmCa3fkSlreEQ18RGnr0Ag=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:03:15 2025 by rpki-client