Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/ef75e4f6-a3d6-3f3d-af4c-5bfcbb5104cf.roa
File:                     ef75e4f6-a3d6-3f3d-af4c-5bfcbb5104cf.roa (raw, json)
Hash identifier:          UGlh0KNVgZNywedJtBO9YNDdnustLTwuOQBaUFy3dHk=
Subject key identifier:   DB:96:39:3D:E9:7E:62:6E:97:39:06:91:35:2F:9E:D3:41:7B:9D:A1
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F43285849AA4F697EA4B63CE6A1002580
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/ef75e4f6-a3d6-3f3d-af4c-5bfcbb5104cf.roa
Signing time:             Sun 27 Apr 2025 13:01:01 +0000
ROA not before:           Sun 27 Apr 2025 13:01:01 +0000
ROA not after:            Sat 26 Jul 2025 13:01:01 +0000
asID:                     55293
IP address blocks:        45.4.172.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:aa:4f:69:7e:a4:b6:3c:e6:a1:00:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Apr 27 13:01:01 2025 GMT
            Not After : Jul 26 13:01:01 2025 GMT
        Subject: CN=87739fdf-52cc-451e-a008-6c35d73070ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:80:40:42:8a:c4:7e:95:be:de:ac:40:62:6b:
                    18:15:d2:f9:44:c3:4d:37:13:8d:20:36:c0:66:da:
                    f2:c0:18:6b:bb:c9:94:66:09:8b:da:9b:c5:89:31:
                    c1:63:16:2e:04:69:18:60:1f:64:37:d8:4f:d9:94:
                    be:0d:fd:2e:88:89:f2:cc:07:1c:d3:e7:71:e6:c8:
                    cb:d6:b3:ed:b7:15:78:24:04:e3:f9:a8:10:16:ab:
                    15:a5:2b:7c:64:d1:34:15:22:c4:94:dc:9e:a6:5c:
                    39:7c:45:2c:75:b0:58:fa:7b:fb:bf:e4:1c:20:9e:
                    98:34:0e:8f:41:98:27:86:97:d7:27:ce:3b:06:9e:
                    97:78:da:e1:11:2d:50:74:9f:0b:6c:b2:dd:e2:38:
                    6b:22:be:53:f8:9b:87:be:7b:8a:c3:04:ea:58:ef:
                    ef:07:d8:a4:2a:d5:98:fb:de:95:f0:f3:34:61:06:
                    dc:8e:00:1a:ac:0a:38:d6:57:31:39:a8:2c:7d:b8:
                    99:a4:c8:60:29:d6:f5:94:86:ab:77:0e:d2:e6:d8:
                    9f:c8:5d:83:27:0f:5d:28:d0:3c:d6:33:d0:45:ab:
                    50:e0:bf:4d:62:b7:0d:40:a0:45:f7:cb:99:13:a6:
                    97:4e:a8:f0:34:02:d9:96:90:78:32:ec:44:84:28:
                    9d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:96:39:3D:E9:7E:62:6E:97:39:06:91:35:2F:9E:D3:41:7B:9D:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/ef75e4f6-a3d6-3f3d-af4c-5bfcbb5104cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:93:c2:5a:d5:a3:5c:be:80:79:cd:11:0c:7a:eb:b8:90:68:
         f8:be:33:17:bc:68:9d:7f:99:35:16:eb:ba:b7:cc:4d:ef:db:
         7a:f0:c1:de:32:b0:ca:82:05:1c:c4:13:87:8b:33:38:d2:a6:
         c4:50:ac:72:30:d7:04:34:ed:71:64:74:e8:f1:dc:45:54:c2:
         23:8d:e3:1a:ed:3b:c5:a0:a0:10:82:f5:c8:88:ec:70:08:d7:
         0c:2e:0b:6a:57:d0:bd:45:a7:ee:25:c4:88:0a:ac:b2:96:a7:
         b1:1c:d8:5b:3a:a4:12:2c:c8:65:99:64:27:6b:53:03:b2:2b:
         87:c9:6f:83:e0:36:14:04:5d:e1:a6:6e:a8:52:b4:96:4d:cd:
         87:0a:2f:3e:99:d5:cc:e4:a9:6f:f9:f3:4c:b2:9e:6e:78:ae:
         9a:0e:8f:06:1f:fa:af:92:2b:39:92:26:51:f2:08:fa:ec:f3:
         b7:8c:ab:df:59:ea:21:a7:ca:26:7f:f0:bf:f4:60:d0:f8:9b:
         6a:62:10:c3:7f:df:29:84:db:9e:77:3e:8e:b3:3a:a7:96:de:
         d1:a2:39:c2:09:30:18:87:de:d9:f5:de:d5:35:57:c6:d5:eb:
         4a:48:92:0c:ed:86:63:27:3f:bc:16:a5:e6:a9:7d:24:dc:e0:
         d2:8e:6a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:48:54 2025 by rpki-client