Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/480271fb-9291-3757-aefe-1b969caf89ca.roa
File:                     480271fb-9291-3757-aefe-1b969caf89ca.roa (raw, json)
Hash identifier:          kLYcFfe2lOujQAn4rG0qJpGHd9ewmWHVZ3jyKFxZFSw=
Subject key identifier:   1E:4D:0F:27:4C:3D:8C:41:4C:0E:07:14:6F:57:EE:55:90:AA:A1:81
Certificate issuer:       /CN=9e8ed950-4488-49b1-8d39-bb8c71a767d2
Certificate serial:       010D0C9F43285849A22A1158C925795FDB1C6340
Authority key identifier: 26:16:DB:85:90:7D:14:0F:A6:08:91:5A:F3:8C:48:B7:DC:F3:D4:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/480271fb-9291-3757-aefe-1b969caf89ca.roa
Signing time:             Thu 24 Apr 2025 14:59:32 +0000
ROA not before:           Thu 24 Apr 2025 14:59:32 +0000
ROA not after:            Wed 23 Jul 2025 14:59:32 +0000
asID:                     36168
IP address blocks:        45.42.173.0/24 maxlen: 24
                          45.42.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9e8ed950-4488-49b1-8d39-bb8c71a767d2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9e8ed950-4488-49b1-8d39-bb8c71a767d2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 May 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a2:2a:11:58:c9:25:79:5f:db:1c:63:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e8ed950-4488-49b1-8d39-bb8c71a767d2
        Validity
            Not Before: Apr 24 14:59:32 2025 GMT
            Not After : Jul 23 14:59:32 2025 GMT
        Subject: CN=a67d25a4-982f-4c37-bc02-75fbc7237220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:23:e0:04:f0:0c:5a:60:ad:86:f5:66:a7:59:
                    76:5a:5b:74:f5:5b:72:bb:42:51:91:37:86:48:d1:
                    5c:23:a6:a5:0c:1d:c5:17:00:e9:58:3d:ea:67:ec:
                    a4:de:7e:31:6c:90:71:cd:cc:13:c5:dd:a2:5b:07:
                    84:eb:6a:9c:5c:dd:dc:d8:36:24:24:11:37:41:87:
                    df:f0:7c:87:7a:4b:ef:aa:11:9f:db:86:5a:1a:58:
                    bb:72:68:48:c4:14:84:f0:04:5f:39:44:78:bb:d8:
                    27:18:de:9c:66:24:46:fc:d7:10:48:75:54:f1:23:
                    19:c3:aa:b6:55:05:1e:9b:f7:27:c0:03:e0:eb:57:
                    5b:87:a3:98:fa:93:19:06:3e:f2:4d:55:1d:32:68:
                    db:df:78:24:ab:bc:0d:61:23:74:ca:02:b4:ed:3d:
                    ce:fe:69:5f:fc:61:7d:e6:7a:83:9d:b5:e3:a9:2a:
                    c3:3e:ec:55:e3:ce:64:e9:71:bc:1a:25:79:3a:05:
                    56:e8:b0:97:2b:14:4d:3d:cc:e4:92:8e:65:35:d2:
                    e8:85:ae:d1:60:af:e7:00:c5:ef:92:00:6f:6e:85:
                    ee:59:e0:dd:04:74:fb:ad:4e:85:d9:d6:4a:ed:23:
                    8d:84:2a:15:73:87:a6:48:f6:c1:a4:bc:a3:56:0c:
                    cd:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:4D:0F:27:4C:3D:8C:41:4C:0E:07:14:6F:57:EE:55:90:AA:A1:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/480271fb-9291-3757-aefe-1b969caf89ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9e8ed950-4488-49b1-8d39-bb8c71a767d2.crl

            X509v3 Authority Key Identifier:
                keyid:26:16:DB:85:90:7D:14:0F:A6:08:91:5A:F3:8C:48:B7:DC:F3:D4:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.173.0-45.42.174.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:71:40:dd:8a:86:22:03:f6:ba:f6:b3:db:be:b3:8f:9e:72:
         5b:91:10:dd:d8:1c:81:5b:71:a5:5c:b7:09:6c:90:25:78:0b:
         63:18:75:e8:2e:54:43:19:48:3a:d3:94:bf:e1:5c:68:1f:5b:
         aa:2b:13:cd:82:c6:a0:2f:fe:ca:3e:4a:06:fa:c4:9d:35:5e:
         1d:ed:67:a9:f0:b9:cc:dc:c3:62:51:d7:a9:d0:61:b5:bf:e7:
         1e:f1:b3:83:66:a0:f5:da:0a:c4:6d:e8:4d:65:8f:03:b4:6e:
         4e:7f:9f:d1:7a:ba:e8:22:d8:b1:f9:01:36:00:7d:48:c8:76:
         60:34:28:c3:df:3e:23:a4:02:ba:b5:f9:77:5f:65:2a:38:ae:
         35:27:44:36:8b:09:12:81:1c:08:7d:ec:d4:e4:b6:e6:ae:57:
         90:8f:19:ca:99:af:e6:7d:3c:26:bc:4d:63:57:57:f6:ad:60:
         35:61:f2:b8:dd:7a:31:b6:02:73:1b:67:ea:f5:22:99:64:57:
         25:5b:9d:7e:25:1f:71:20:41:c7:d5:b1:6b:8b:80:c9:e5:99:
         bd:77:27:7f:f7:94:1b:aa:ed:ec:1c:14:b4:a5:0a:2e:e6:6b:
         08:89:04:19:b8:18:62:7d:5c:6f:89:a5:57:a0:89:da:05:8c:
         0e:50:f1:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:47:41 2025 by rpki-client