Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/1acbbbc2-02a2-3ea0-972d-85742d4ba60e.roa
File:                     1acbbbc2-02a2-3ea0-972d-85742d4ba60e.roa (raw, json)
Hash identifier:          glO8qeNCaeO4Jj/t4IlmWq2GA9vT40PUpPqjv+5CXHw=
Subject key identifier:   A7:18:F2:1B:B6:28:8D:99:A8:F4:03:FE:00:45:D8:90:14:CB:FD:EF
Certificate issuer:       /CN=543031bb-b48b-4efb-ae26-4035688199f7
Certificate serial:       010D0C9F4328584A0C055BBFBD8BE560113F6720
Authority key identifier: 2D:2F:7D:F2:35:FF:0E:F9:30:77:87:20:41:F4:80:D2:3E:08:D8:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/1acbbbc2-02a2-3ea0-972d-85742d4ba60e.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     3257
IP address blocks:        45.41.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/543031bb-b48b-4efb-ae26-4035688199f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/543031bb-b48b-4efb-ae26-4035688199f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:5b:bf:bd:8b:e5:60:11:3f:67:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=543031bb-b48b-4efb-ae26-4035688199f7
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=4f538b38-3c4d-4194-99d8-9711ac1042b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:13:3d:36:2a:ea:64:79:42:3d:7b:ac:b8:8c:
                    0d:f9:df:89:52:27:68:54:d5:b9:cc:5a:50:89:ba:
                    bb:16:d5:f2:06:48:27:9b:a3:3e:61:57:60:fb:45:
                    0e:84:bb:38:3b:d7:0c:24:b2:b4:44:4e:36:8b:3e:
                    cc:e0:f7:51:c9:59:c7:43:11:90:9f:6c:ea:6e:a2:
                    7e:1c:71:74:d9:be:a3:5c:90:b4:19:9a:ac:e3:55:
                    cd:1c:28:b0:5b:e1:0f:50:62:d8:f8:cf:26:d4:ee:
                    1d:cc:c9:50:d6:67:63:4f:6a:7b:d7:20:44:38:b5:
                    d7:8f:0c:fa:ab:77:00:f3:5f:4d:a2:1c:9b:49:72:
                    19:42:77:bf:5c:8e:5a:97:03:90:61:a0:1c:1c:d2:
                    14:74:d2:71:48:8c:15:8f:c0:1f:d7:6c:0b:79:bb:
                    ae:dd:ed:71:62:58:e0:3f:af:d1:df:74:1f:b9:79:
                    41:30:a9:a7:47:0c:43:19:20:5f:e5:07:e0:4f:2e:
                    bb:75:9a:fe:10:5a:81:49:58:5d:b4:ff:29:09:63:
                    44:35:d3:e4:1a:0b:15:23:da:96:09:43:a2:03:96:
                    d3:38:36:ac:ca:a3:a6:17:2c:44:88:4d:2b:e6:ac:
                    5a:c4:60:49:ad:21:37:02:89:01:65:0b:a4:5b:ff:
                    6b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:18:F2:1B:B6:28:8D:99:A8:F4:03:FE:00:45:D8:90:14:CB:FD:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/1acbbbc2-02a2-3ea0-972d-85742d4ba60e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/543031bb-b48b-4efb-ae26-4035688199f7.crl

            X509v3 Authority Key Identifier:
                keyid:2D:2F:7D:F2:35:FF:0E:F9:30:77:87:20:41:F4:80:D2:3E:08:D8:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.41.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:f1:61:4c:52:82:2f:43:ad:86:22:e9:5c:31:ae:c4:ca:33:
         34:c6:09:b0:b6:42:fd:6d:3c:a0:b6:bc:94:6b:44:64:7f:58:
         49:4c:68:82:d7:90:71:b7:4c:da:55:f4:f3:65:1b:99:4d:e3:
         5d:a6:24:85:a5:69:3c:c6:90:2d:88:df:90:5e:94:33:c9:1a:
         fd:d4:4d:4f:b5:ce:32:e2:d3:ab:68:b3:af:a7:f5:fe:a9:d5:
         fe:8a:57:47:1c:7e:32:c9:f0:0f:a6:a6:ed:34:10:fb:c9:7d:
         e4:ac:48:b5:6b:3c:73:86:52:c5:04:05:c2:4a:4d:25:f3:fd:
         6b:40:91:6f:6a:58:d4:84:ab:25:46:a2:c0:b8:74:09:89:75:
         eb:5a:b4:7a:12:bb:83:e1:8b:72:d0:55:9c:75:d4:85:e4:17:
         8b:4c:ce:2a:d9:ac:93:9d:1b:47:dd:d7:01:fe:92:b8:14:cb:
         08:08:ff:d0:38:37:6c:86:52:2d:79:ff:13:aa:a7:49:00:ed:
         49:1e:33:a7:50:46:b0:5d:15:e6:49:fe:f8:17:d7:a3:da:13:
         a1:7e:7c:2f:59:1c:55:b2:18:ca:6a:1b:d7:49:42:8f:8b:17:
         a6:d1:1c:80:4a:af:f8:f8:62:20:fd:f3:97:82:13:91:50:f3:
         7b:60:d1:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:59:17 2025 by rpki-client