Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/abed2747-44df-31bb-b5c4-71ee2ca51ccc.roa
File:                     abed2747-44df-31bb-b5c4-71ee2ca51ccc.roa (raw, json)
Hash identifier:          G9Z0qPOM/DfBVV379dVvOyR+0nPw0pkenJtKJaJ3mnU=
Subject key identifier:   21:0E:30:91:27:8C:FB:F8:1A:A8:E1:5E:B8:E1:45:F0:63:03:A5:EF
Certificate issuer:       /CN=52fbdac8-20c0-4da4-8654-27b4bf592930
Certificate serial:       010D0C9F432858499DBF393681F8418A20C8D080
Authority key identifier: 83:F5:A6:59:FF:1E:96:96:C8:E5:B4:B9:DF:F6:3D:37:29:30:A4:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/abed2747-44df-31bb-b5c4-71ee2ca51ccc.roa
Signing time:             Wed 23 Apr 2025 01:00:46 +0000
ROA not before:           Wed 23 Apr 2025 01:00:46 +0000
ROA not after:            Tue 22 Jul 2025 01:00:46 +0000
asID:                     394491
IP address blocks:        45.45.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/52fbdac8-20c0-4da4-8654-27b4bf592930.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/52fbdac8-20c0-4da4-8654-27b4bf592930.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9d:bf:39:36:81:f8:41:8a:20:c8:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52fbdac8-20c0-4da4-8654-27b4bf592930
        Validity
            Not Before: Apr 23 01:00:46 2025 GMT
            Not After : Jul 22 01:00:46 2025 GMT
        Subject: CN=c836a765-8e07-4bab-9977-0f26fa274fcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f6:be:aa:2d:c1:64:b6:dc:28:69:4e:92:20:
                    67:8e:29:6f:4f:86:b3:5c:84:3e:44:0f:4d:93:e6:
                    e1:44:f5:80:4f:65:da:a5:a0:01:32:ab:f9:fc:ac:
                    bb:31:b8:32:94:c8:34:69:2d:52:53:c3:c5:ea:4d:
                    df:1f:c9:0b:5a:35:1a:7b:fa:aa:50:19:25:e1:ca:
                    95:9e:0e:9e:37:bb:1f:3d:e7:3f:76:d8:24:aa:30:
                    44:df:f5:4d:05:5c:c8:d4:75:eb:ee:1d:f2:7d:b2:
                    06:7e:93:63:68:e4:d7:b3:aa:94:45:22:d5:fb:2a:
                    14:b8:9a:e7:a6:77:c7:0e:e6:ad:a4:c4:38:42:14:
                    04:0d:f9:a6:fe:04:d6:b0:c9:64:1f:6c:fd:11:c9:
                    a0:54:a5:48:f7:bb:63:50:0a:03:7b:7d:d7:d0:9a:
                    b5:66:bb:49:dd:28:46:97:44:14:7c:d2:03:5e:5e:
                    e2:95:e6:38:8b:50:b6:99:f1:7c:01:4f:00:e4:fa:
                    ad:38:e5:87:cd:06:9e:b5:49:fd:c4:39:6e:e2:54:
                    11:48:f8:ce:ed:e8:a7:16:c1:78:33:ec:77:8d:c0:
                    ed:73:84:4c:82:3f:fc:74:06:97:40:c7:62:85:37:
                    d4:c6:3d:3b:ff:ab:12:ac:98:f1:01:8c:6b:be:de:
                    26:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:0E:30:91:27:8C:FB:F8:1A:A8:E1:5E:B8:E1:45:F0:63:03:A5:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/abed2747-44df-31bb-b5c4-71ee2ca51ccc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/52fbdac8-20c0-4da4-8654-27b4bf592930.crl

            X509v3 Authority Key Identifier:
                keyid:83:F5:A6:59:FF:1E:96:96:C8:E5:B4:B9:DF:F6:3D:37:29:30:A4:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:8a:cb:f1:3b:ed:ec:54:82:d2:27:43:7a:ca:9d:af:65:66:
         8e:f4:1b:bc:59:8f:da:08:ed:88:51:81:e5:3b:30:ab:9c:f5:
         88:67:a6:01:22:c1:80:2e:6c:c4:07:07:4b:b1:f9:b9:48:68:
         23:c0:23:85:c2:ff:bd:41:dd:72:f6:5a:78:a5:47:d8:fe:12:
         16:82:7b:ad:58:e0:18:d9:8b:f8:8e:61:0e:cc:22:14:01:c8:
         77:5b:41:67:6c:6f:ca:d6:a9:4d:ba:77:cf:62:97:e0:cc:ec:
         a4:89:ed:57:7d:ca:21:cd:27:45:85:03:1b:89:e5:a6:d2:07:
         b9:30:d5:73:08:3c:69:eb:e5:3b:90:ea:c0:b4:30:b7:d3:b0:
         13:0f:3f:31:06:c2:3b:96:2f:03:84:55:02:f5:c7:0e:4a:0d:
         61:05:26:fa:bc:a6:49:f9:66:d7:ee:b3:09:b7:f2:71:ba:64:
         4b:80:1e:98:24:ef:86:28:67:a8:86:c1:59:81:25:cc:2e:87:
         36:b7:55:f3:49:47:ec:d1:53:cd:19:3e:f1:b6:8c:5a:62:f8:
         36:d2:f8:5e:16:2a:46:50:8b:f1:81:08:c4:46:f2:75:b2:6b:
         52:cc:92:6b:5b:bd:b1:d8:83:f0:04:fd:b5:29:2a:79:59:df:
         85:3a:69:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 02:21:39 2025 by rpki-client