Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/30584fee-d966-3388-b9b2-9b9abfc5544f.roa
File:                     30584fee-d966-3388-b9b2-9b9abfc5544f.roa (raw, json)
Hash identifier:          YineZ3BKflBi8oCp/UhG5hVa8Omz1Bm6mxvkgS3wu7g=
Subject key identifier:   3B:6B:29:36:C6:81:1F:6A:8E:CF:83:FB:B5:18:FD:58:CF:B8:60:E6
Certificate issuer:       /CN=9f07c9e2-648c-4ca2-8784-02ac3c144538
Certificate serial:       010D0C9F432858498FC9BB4CD330FE87C5993E00
Authority key identifier: 64:75:EB:7C:25:7B:70:FF:79:31:BF:57:7E:7C:BA:C6:74:D1:CE:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/30584fee-d966-3388-b9b2-9b9abfc5544f.roa
Signing time:             Fri 18 Apr 2025 01:00:47 +0000
ROA not before:           Fri 18 Apr 2025 01:00:47 +0000
ROA not after:            Thu 17 Jul 2025 01:00:47 +0000
asID:                     32896
IP address blocks:        45.59.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/9f07c9e2-648c-4ca2-8784-02ac3c144538.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/9f07c9e2-648c-4ca2-8784-02ac3c144538.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8f:c9:bb:4c:d3:30:fe:87:c5:99:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f07c9e2-648c-4ca2-8784-02ac3c144538
        Validity
            Not Before: Apr 18 01:00:47 2025 GMT
            Not After : Jul 17 01:00:47 2025 GMT
        Subject: CN=67b8def1-a534-4c19-b7a6-5818e82c1fef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ef:16:da:bd:2f:30:b5:d5:f7:70:bb:f5:d5:
                    26:80:2a:79:0f:47:60:c9:70:42:cd:c8:c8:b5:ef:
                    f2:90:72:f6:8d:d7:43:cb:2c:7f:a6:df:78:4d:af:
                    64:80:b2:66:07:f8:aa:82:be:89:89:58:ec:40:05:
                    e7:09:ef:36:af:db:9e:3a:3d:ae:32:0b:f5:39:81:
                    5b:94:02:5b:60:93:c5:1e:24:6a:10:8f:ba:78:57:
                    e2:da:63:1f:5b:11:0e:26:18:e4:f8:34:00:fc:4b:
                    11:bf:86:64:5b:6b:c6:83:63:02:0c:77:6f:93:46:
                    08:e6:dd:63:b5:ba:85:93:fc:af:65:83:6a:0f:43:
                    b6:7c:7e:09:29:03:2a:2b:50:9a:35:7a:fb:b1:b7:
                    73:81:9e:09:25:e6:dc:16:d7:b1:7d:d0:18:77:2e:
                    37:35:ef:02:73:e7:96:99:5d:03:03:aa:4d:d8:f1:
                    3b:5a:0a:d7:6a:65:01:e2:53:e6:94:14:2b:62:46:
                    af:67:70:18:83:f1:4f:a5:52:b1:00:e8:03:6b:29:
                    39:02:21:1b:62:04:ea:ba:e2:04:48:29:27:07:eb:
                    53:00:da:a3:1a:47:f5:48:94:68:35:ee:2a:45:1a:
                    42:5d:77:9b:f2:f8:7e:6c:e1:9a:f0:10:6f:54:16:
                    c3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:6B:29:36:C6:81:1F:6A:8E:CF:83:FB:B5:18:FD:58:CF:B8:60:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/30584fee-d966-3388-b9b2-9b9abfc5544f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/9f07c9e2-648c-4ca2-8784-02ac3c144538.crl

            X509v3 Authority Key Identifier:
                keyid:64:75:EB:7C:25:7B:70:FF:79:31:BF:57:7E:7C:BA:C6:74:D1:CE:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:a4:c6:73:bb:2a:e3:b7:13:e4:e9:be:eb:56:63:50:50:1c:
         c7:1b:d2:0a:c9:8e:95:a6:30:15:ce:1e:16:47:32:2f:51:5a:
         62:37:bf:d7:03:01:41:33:b7:2b:94:23:fb:89:b4:51:cb:01:
         da:ec:68:ff:22:74:39:80:f4:83:d8:2a:8b:0f:96:09:0a:21:
         fc:6b:1e:a1:61:6c:4b:59:f0:5e:46:99:c9:8c:f6:82:34:c2:
         97:07:17:d8:2c:d9:3c:0c:de:8a:5b:35:48:a0:c2:3e:eb:a5:
         3e:5e:c7:18:47:16:b6:36:0c:42:e1:30:d2:a7:39:2e:eb:66:
         37:e1:90:4a:10:71:05:2a:8f:89:29:3b:ee:99:b9:61:e8:04:
         52:b9:11:68:91:5c:a4:39:4d:5a:2d:93:18:37:4c:24:51:17:
         00:ce:8d:cf:69:4a:61:ff:7a:e5:43:a9:33:10:40:c3:e1:57:
         5c:07:46:5c:2e:cc:d9:58:48:2d:89:6e:f6:69:d4:f0:37:27:
         f1:15:04:28:46:1f:43:19:a3:7b:ab:58:0f:db:4a:b8:4c:6f:
         b9:1e:51:cc:01:8d:58:7e:3d:d5:0d:33:29:a7:ab:bc:d6:df:
         89:37:3a:8c:cd:a7:31:9c:c7:28:ee:d3:5d:9f:ca:29:b7:fa:
         5e:f5:7a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:08:45 2025 by rpki-client