Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c95ce3d-c60a-4a89-8fef-bc6c44d54f54/108f695e-beb6-3f8c-917a-4c9a702aff9d.roa
File:                     108f695e-beb6-3f8c-917a-4c9a702aff9d.roa (raw, json)
Hash identifier:          VJvI8FnCY+onVl2eDhzW/9XIHtLokwKaR1SwvOGBVLQ=
Subject key identifier:   24:6F:BA:D4:50:6F:4F:8F:3E:6B:F2:EF:0B:00:E5:F7:67:98:A0:D3
Certificate issuer:       /CN=5c95ce3d-c60a-4a89-8fef-bc6c44d54f54
Certificate serial:       010D0C9F432858498B99D26C7A81D5BA7A25C300
Authority key identifier: B2:93:8C:DF:4E:61:AC:DE:34:BC:B0:1F:BB:7C:32:EE:04:26:A1:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c95ce3d-c60a-4a89-8fef-bc6c44d54f54.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c95ce3d-c60a-4a89-8fef-bc6c44d54f54/108f695e-beb6-3f8c-917a-4c9a702aff9d.roa
Signing time:             Wed 16 Apr 2025 13:01:01 +0000
ROA not before:           Wed 16 Apr 2025 13:01:01 +0000
ROA not after:            Tue 15 Jul 2025 13:01:01 +0000
asID:                     16509
IP address blocks:        45.45.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c95ce3d-c60a-4a89-8fef-bc6c44d54f54/5c95ce3d-c60a-4a89-8fef-bc6c44d54f54.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c95ce3d-c60a-4a89-8fef-bc6c44d54f54/5c95ce3d-c60a-4a89-8fef-bc6c44d54f54.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c95ce3d-c60a-4a89-8fef-bc6c44d54f54.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8b:99:d2:6c:7a:81:d5:ba:7a:25:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c95ce3d-c60a-4a89-8fef-bc6c44d54f54
        Validity
            Not Before: Apr 16 13:01:01 2025 GMT
            Not After : Jul 15 13:01:01 2025 GMT
        Subject: CN=1aa46c88-48ac-4f55-94af-ad64f52c051e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:89:f6:31:84:15:57:5b:f4:ea:19:3f:52:e4:
                    b5:ac:1e:1a:b8:58:a1:69:52:ef:72:f2:ba:83:e7:
                    d7:f1:be:f3:28:cb:10:bb:79:71:98:34:44:47:8a:
                    58:6d:48:b4:49:d1:fb:0b:e5:70:a0:e5:6b:2f:cd:
                    46:53:e4:9c:0f:ab:85:7d:11:7a:01:b4:eb:b5:e4:
                    e7:65:8d:68:ff:30:5a:62:fa:76:fb:71:7e:11:e3:
                    64:b3:9e:f4:d8:10:ee:a5:0b:5f:14:00:19:2f:2c:
                    82:a2:17:9c:60:8a:70:59:93:0c:db:79:17:5e:76:
                    91:c4:08:e1:79:8b:cb:44:48:3c:07:ac:ab:c9:d1:
                    81:2a:75:6d:0d:50:40:33:fc:a8:ae:0d:1d:1e:02:
                    db:2d:c9:b7:6c:8f:8c:84:ab:4f:64:4d:33:82:1c:
                    c2:95:93:36:cd:c3:b8:56:84:a1:81:59:43:e6:52:
                    68:9f:3c:45:1c:8b:0e:c8:3f:33:a4:df:a1:f4:a7:
                    3c:01:38:88:df:c2:45:01:5d:97:ff:4f:56:ce:38:
                    97:ae:5a:9f:82:56:37:8a:3f:25:47:d5:75:05:14:
                    d3:a3:5b:40:76:d0:d1:7a:0c:bf:8f:ab:23:07:79:
                    f2:8a:c2:0a:93:9e:92:d1:20:db:46:b2:5d:78:e8:
                    aa:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:6F:BA:D4:50:6F:4F:8F:3E:6B:F2:EF:0B:00:E5:F7:67:98:A0:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c95ce3d-c60a-4a89-8fef-bc6c44d54f54/108f695e-beb6-3f8c-917a-4c9a702aff9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c95ce3d-c60a-4a89-8fef-bc6c44d54f54/5c95ce3d-c60a-4a89-8fef-bc6c44d54f54.crl

            X509v3 Authority Key Identifier:
                keyid:B2:93:8C:DF:4E:61:AC:DE:34:BC:B0:1F:BB:7C:32:EE:04:26:A1:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c95ce3d-c60a-4a89-8fef-bc6c44d54f54.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:d6:8e:94:1b:ae:a1:b0:e7:53:0f:15:2a:e3:96:18:50:0d:
         d3:4d:e4:8b:1a:a9:d3:03:73:c9:03:83:c1:e2:c1:04:73:fc:
         e0:da:4c:47:bc:ea:09:a8:11:25:b8:b6:b5:cb:ea:8c:bf:fb:
         4e:b2:e6:51:e6:82:19:09:10:f8:8e:db:07:85:9a:25:f6:14:
         53:41:02:18:04:9c:24:56:e8:32:f4:d2:f2:6e:ea:9e:6f:d6:
         ed:d3:af:99:35:f3:a1:9c:c6:1f:96:cf:2d:c2:3a:b4:b9:a6:
         3e:83:70:5b:f2:43:dd:10:c2:1d:ca:da:53:2c:21:79:aa:1a:
         56:05:87:de:e3:af:36:e2:c7:39:55:45:ce:f8:33:43:f4:62:
         4d:d4:93:35:7f:fa:62:ae:b4:b1:bb:04:b5:9b:44:04:e5:15:
         90:d6:56:2f:2d:5b:a3:90:21:16:db:fb:63:68:76:7d:4e:9f:
         f0:75:b5:55:09:60:2d:84:da:08:90:f3:a9:2d:eb:15:41:0a:
         1b:f7:64:06:d1:80:03:b7:c3:84:c4:a6:5b:48:bf:84:fb:15:
         03:1b:2a:30:42:aa:58:cb:ac:04:3d:c8:95:19:37:7e:68:02:
         9c:68:02:db:25:eb:ad:57:dc:39:20:d9:90:c1:17:c6:b1:2a:
         8e:49:cc:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:40:02 2025 by rpki-client