Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/9a2045a2-d1cc-36ea-ad77-cecc419b305e.roa
File:                     9a2045a2-d1cc-36ea-ad77-cecc419b305e.roa (raw, json)
Hash identifier:          6sbrCNTB9MMG8opVuK2ZrUfi7/55ECMMENeTvuUG+IA=
Subject key identifier:   EC:92:86:6B:51:71:44:85:CB:E3:43:B8:03:92:C4:34:EF:64:D2:73
Certificate issuer:       /CN=a90f006a-b108-4757-9dfd-b36376534658
Certificate serial:       010D0C9F4328584A3050355B70D3868CABFD4CE0
Authority key identifier: 56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/9a2045a2-d1cc-36ea-ad77-cecc419b305e.roa
Signing time:             Sat 14 Jun 2025 13:01:04 +0000
ROA not before:           Sat 14 Jun 2025 13:01:04 +0000
ROA not after:            Fri 12 Sep 2025 13:01:04 +0000
asID:                     7029
IP address blocks:        45.43.7.0/24 maxlen: 24
                          45.43.8.0/24 maxlen: 24
                          66.11.125.0/24 maxlen: 24
                          104.192.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:30:50:35:5b:70:d3:86:8c:ab:fd:4c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a90f006a-b108-4757-9dfd-b36376534658
        Validity
            Not Before: Jun 14 13:01:04 2025 GMT
            Not After : Sep 12 13:01:04 2025 GMT
        Subject: CN=1cdb8f94-236d-42a8-b47c-7869902881f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e0:56:03:c1:19:41:3b:3f:45:4e:84:be:99:
                    69:a5:32:fd:26:ad:40:cb:ec:3e:44:c8:47:49:4e:
                    36:74:43:01:b5:10:cb:ac:91:99:7c:b1:6a:b0:46:
                    a9:d3:50:99:4a:ec:33:5e:22:12:11:f5:1a:c2:ca:
                    8d:60:a0:7f:42:12:a7:c7:cb:c7:da:82:9d:83:a0:
                    a0:62:66:3a:0c:98:a8:55:c3:bf:36:b7:57:6c:ae:
                    ed:ce:5b:49:50:b3:46:08:46:4b:4e:b0:66:12:3e:
                    62:14:41:d4:b2:cd:4f:4e:8c:bc:80:8d:d5:40:d5:
                    6e:a5:dd:78:9c:6a:69:3f:c9:33:4d:87:ab:75:5d:
                    fc:1e:5e:ec:72:e3:e6:14:e9:09:0d:f4:62:26:3a:
                    bb:ab:8c:29:83:2b:03:e6:f0:84:16:49:79:18:d5:
                    45:50:dd:11:12:2a:4e:24:9d:85:c2:a0:55:de:04:
                    ad:f2:2e:76:ca:40:4d:3d:24:69:cb:7f:d5:1f:41:
                    8e:b0:8a:65:7c:bb:e7:31:69:ea:4b:16:ea:86:37:
                    34:e5:52:8c:d4:2e:2f:49:a1:91:b9:0d:d0:2d:9a:
                    57:95:ea:ae:12:e8:1d:50:f3:4d:32:33:1a:92:bd:
                    33:bb:21:a7:38:0f:d8:0f:eb:9a:22:4f:dd:ad:a3:
                    45:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:92:86:6B:51:71:44:85:CB:E3:43:B8:03:92:C4:34:EF:64:D2:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/9a2045a2-d1cc-36ea-ad77-cecc419b305e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl

            X509v3 Authority Key Identifier:
                keyid:56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.43.7.0-45.43.8.255
                  66.11.125.0/24
                  104.192.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:31:24:e0:88:18:f7:25:4e:d8:0d:08:21:61:f9:ee:a0:5e:
         1b:51:fe:c0:50:13:a9:e9:e0:dc:2a:61:ea:09:65:0a:85:82:
         2b:d9:ca:e6:93:17:48:8f:57:3b:d1:64:0f:cf:fd:6d:5e:24:
         5f:9e:2d:91:7b:f9:49:03:08:d0:75:52:5f:91:98:ad:63:7d:
         2b:76:e2:cc:c8:b2:38:59:da:33:d4:1c:e6:0f:a6:5c:d9:e0:
         49:fc:5e:8e:c0:bf:64:f6:29:23:a0:18:93:64:a8:f1:44:32:
         14:7c:ba:b2:5f:1d:c6:1b:58:af:6f:f2:cf:2b:2a:a4:f4:45:
         fc:57:22:e3:1d:65:96:3a:32:76:e4:4d:ac:d5:c3:8d:25:58:
         ed:51:59:e9:c5:e7:7c:3e:bf:0d:7f:c5:34:95:26:06:e9:bb:
         14:4f:62:71:ef:77:fe:ca:83:0d:fd:68:b2:1d:8f:ac:d7:d5:
         f8:be:5d:ff:ea:84:e9:3a:6b:69:9a:40:a3:ca:e0:a4:d3:c0:
         e2:96:e0:e1:8c:fe:60:c4:b6:ca:ca:2c:c0:c7:22:3e:09:e8:
         2b:d8:75:5d:24:b6:9d:f2:14:92:0f:fa:19:e5:c5:24:34:16:
         47:29:2e:6b:6c:02:83:ff:3b:23:90:a1:9a:6d:1e:81:72:c0:
         62:87:2f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 01:24:15 2025 by rpki-client