Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/37f97f97-7938-33a2-94e9-584d409d7825.roa
File:                     37f97f97-7938-33a2-94e9-584d409d7825.roa (raw, json)
Hash identifier:          d/MW14J3DxYfwIzKeuLz7dp/dWTSwhirOJFx3lBRIIw=
Subject key identifier:   A7:6E:9D:DF:66:78:AB:EF:2D:BB:0D:23:ED:BA:E2:3F:58:83:15:FD
Certificate issuer:       /CN=59c9f46b-742f-4b2d-929b-267fefccc50a
Certificate serial:       010D0C9F4328584A146562DCD358616FBB07DF80
Authority key identifier: 31:94:CB:06:4F:A4:B6:3C:A6:4A:48:CC:A8:86:01:92:A7:0E:A0:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/37f97f97-7938-33a2-94e9-584d409d7825.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     16509
IP address blocks:        45.45.196.0/22 maxlen: 24
                          208.74.168.0/21 maxlen: 24
                          2607:880::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:62:dc:d3:58:61:6f:bb:07:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59c9f46b-742f-4b2d-929b-267fefccc50a
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=73c6dee9-80e8-4045-b012-e65da8597e1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d4:d4:9e:4a:20:bb:b0:d5:58:6a:a0:14:ea:
                    b5:f2:28:ec:29:fd:11:6f:97:38:bb:a2:bb:6a:dc:
                    8a:19:67:ae:2f:9f:9f:84:a1:e1:07:37:a9:06:6a:
                    40:04:58:08:9b:e8:90:c4:4b:43:86:91:0b:a0:24:
                    25:a7:94:7f:5f:b7:7c:51:ec:3c:2b:61:9f:86:da:
                    c6:6c:96:1e:86:40:49:6d:3f:39:76:94:b5:b0:02:
                    0a:cf:9f:c2:1e:bb:34:83:f2:66:63:da:1d:eb:23:
                    8d:22:ea:81:6b:07:0d:8a:07:3d:6a:20:7a:17:46:
                    8b:1b:7c:10:a8:cc:b8:ee:a4:f7:7f:9b:78:cd:d1:
                    9a:85:6e:bb:4e:4e:84:9b:0c:91:ee:ae:2e:12:b9:
                    7b:dd:db:26:5a:06:66:38:37:7e:50:28:c7:17:a2:
                    a2:ca:f7:79:48:d4:bb:96:82:c1:1f:21:b6:6f:4f:
                    7a:77:b3:c7:1a:07:92:00:8d:77:a9:53:a9:cc:c9:
                    98:11:11:d4:24:5b:ac:e2:6a:57:f4:cd:16:65:f3:
                    c1:c4:f3:fe:56:62:45:85:38:3d:44:34:2e:3b:9b:
                    05:fd:7c:31:ad:45:87:c1:78:36:ba:75:24:3e:f2:
                    5f:df:9d:7b:e6:58:42:ae:6b:a7:3a:46:20:20:4d:
                    58:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:6E:9D:DF:66:78:AB:EF:2D:BB:0D:23:ED:BA:E2:3F:58:83:15:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/37f97f97-7938-33a2-94e9-584d409d7825.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.crl

            X509v3 Authority Key Identifier:
                keyid:31:94:CB:06:4F:A4:B6:3C:A6:4A:48:CC:A8:86:01:92:A7:0E:A0:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.196.0/22
                  208.74.168.0/21
                IPv6:
                  2607:880::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:45:0a:f6:2d:ac:8a:e2:c3:5e:7e:99:aa:ee:cd:e5:24:6c:
         03:f5:32:36:51:34:c6:49:20:5c:bb:94:62:3f:0b:f0:bc:f8:
         2b:64:bf:81:74:35:dc:b6:49:0f:85:c6:bf:bd:86:8e:a3:cf:
         11:e8:ad:d5:9c:be:00:ca:62:37:fc:a6:fc:28:d8:3b:8a:b2:
         c0:77:4b:9b:25:1c:b5:a0:d7:6e:bd:17:f5:33:e4:e4:40:51:
         97:4d:09:84:e4:c6:5b:3b:60:5f:d1:31:cd:be:15:88:a2:0f:
         c9:ab:c3:0d:03:e6:03:62:bb:d2:1a:59:90:7d:01:e6:d2:2b:
         a0:cb:1c:15:52:ab:69:e9:16:39:89:09:2e:a6:09:49:4f:c2:
         91:91:5f:9e:0d:ed:8e:6c:a3:3a:83:79:45:07:ac:17:8f:8a:
         5c:54:01:5b:4b:f3:01:86:c8:c4:1a:3b:ce:37:fa:68:32:ca:
         74:d3:7f:4e:cd:c8:da:e5:81:33:ae:d4:10:41:72:72:df:f9:
         86:42:47:08:1b:fc:04:65:5c:1e:93:a0:ee:2e:b8:ce:fc:6c:
         75:20:39:ae:51:53:67:25:91:15:94:da:f6:17:62:b7:1d:62:
         05:79:55:88:aa:e0:29:5d:de:9f:d2:ed:e8:b8:32:b8:25:1e:
         48:3e:10:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:19:16 2025 by rpki-client