Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3/13c134c1-3dbc-33de-aa95-3cfbfa9a9be1.roa
File:                     13c134c1-3dbc-33de-aa95-3cfbfa9a9be1.roa (raw, json)
Hash identifier:          /uv6XA4ebg1H4vrHlcQFE5A9CL4oJwN1waDWDRw7O3A=
Subject key identifier:   9E:5D:37:61:9D:45:5D:41:D1:88:41:C2:86:2B:82:A7:6E:2B:E3:1E
Certificate issuer:       /CN=b50a2dec-1d8f-47d7-b523-5a2ca365f5c3
Certificate serial:       010D0C9F43285849E7BA77E5E3D13DA167A64740
Authority key identifier: 35:60:12:FD:7A:D5:B1:82:94:7A:A1:8E:8C:62:72:51:0E:7D:25:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3/13c134c1-3dbc-33de-aa95-3cfbfa9a9be1.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     47027
IP address blocks:        45.41.200.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:77:e5:e3:d1:3d:a1:67:a6:47:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b50a2dec-1d8f-47d7-b523-5a2ca365f5c3
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=701f097c-fa0f-4a77-a47a-3cceb497e01f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:35:e7:be:28:2c:6f:e0:82:c9:fb:61:db:e1:
                    16:a2:52:72:d3:20:3e:3c:35:e7:6f:06:91:60:f5:
                    3f:23:74:0a:e4:c6:6d:13:bc:1b:d5:9e:bc:61:b1:
                    31:19:9b:47:1d:21:3c:45:70:78:11:6c:ba:1c:8c:
                    89:82:1d:b6:03:e9:7f:ac:5d:c7:28:7b:f5:e7:9e:
                    30:cc:ff:44:4b:73:d9:35:e0:15:e8:39:bf:57:d6:
                    c7:cf:5c:6b:e8:99:3a:91:4b:13:f1:73:7f:63:3f:
                    92:b2:29:a0:d1:37:f1:98:61:54:76:94:86:31:db:
                    5d:d2:82:02:da:52:f2:5f:28:0e:1a:36:d6:9d:a1:
                    40:a0:f8:e6:fb:29:aa:53:97:93:f2:49:8b:78:26:
                    1f:19:69:3c:ab:0c:06:aa:8d:ce:80:00:d9:fd:8c:
                    7f:a2:e9:8c:8c:5b:45:fa:43:45:d1:5c:b3:7b:75:
                    c1:8e:b2:4c:3b:f0:1e:5c:22:61:df:5f:a3:89:72:
                    a8:d6:26:6b:ee:1b:1a:0c:e2:7b:54:c8:a1:c8:88:
                    84:89:3d:3f:44:ad:80:15:a6:46:6a:9f:96:36:1c:
                    db:11:80:05:fa:21:58:b0:4b:84:72:3e:fa:43:7b:
                    16:8b:1d:0b:56:cb:61:04:dc:f1:34:bc:bb:b4:f2:
                    6b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:5D:37:61:9D:45:5D:41:D1:88:41:C2:86:2B:82:A7:6E:2B:E3:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3/13c134c1-3dbc-33de-aa95-3cfbfa9a9be1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3.crl

            X509v3 Authority Key Identifier:
                keyid:35:60:12:FD:7A:D5:B1:82:94:7A:A1:8E:8C:62:72:51:0E:7D:25:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.41.200.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:a2:93:bc:3c:77:22:b6:9b:e4:f7:29:5a:a1:c3:8f:87:50:
         8b:2f:8e:c5:19:41:29:9d:db:8e:33:30:c6:fd:ba:e1:95:0e:
         7c:b5:c8:18:02:5a:9f:b7:d8:59:d4:dd:1f:85:7a:b8:a7:6a:
         6b:1e:d3:38:6e:e6:03:92:4e:d4:1f:12:56:8c:2a:9a:ac:12:
         41:58:dd:a5:63:b4:1f:51:28:19:42:76:e4:ef:ba:e9:53:f7:
         c7:46:2f:c6:7b:f7:f9:69:a7:02:68:d4:8e:50:10:59:f2:b4:
         7b:fd:f6:bb:94:5f:1c:33:de:3c:ee:a7:bf:58:bd:b4:2f:f2:
         7a:c1:fb:46:23:4d:f4:d5:88:e6:1e:75:83:17:db:78:47:d1:
         1d:c5:5e:41:6d:5a:0f:be:ae:33:a2:ae:59:ed:fb:a5:90:62:
         cf:21:40:1f:ac:a3:30:cb:e5:0e:17:f7:68:ad:0b:31:6b:bb:
         e6:d0:5c:d1:f0:68:c5:7a:70:c3:68:2e:f1:85:0f:9d:3e:5e:
         d5:6b:e8:7f:7e:c9:55:70:5c:18:2f:0e:2b:f2:b0:c0:70:4f:
         7c:de:2a:09:a0:76:79:97:26:d3:a2:1e:df:b8:0d:3f:78:ad:
         0e:9a:b9:57:42:43:31:71:97:80:43:35:6c:8f:37:5a:95:66:
         f0:94:87:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:28:43 2025 by rpki-client