Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f1099499-e865-4a58-89d5-0df023af2376/b1343bd7-f187-31ce-837b-42ff238b920b.roa
File:                     b1343bd7-f187-31ce-837b-42ff238b920b.roa (raw, json)
Hash identifier:          XNKDTAgOSO/oI39A2lUTdTz/ydAek4eAFNw/mbaiwrc=
Subject key identifier:   C8:6F:4A:67:F8:31:F8:DF:0A:86:C6:A2:2D:AA:4D:EF:A7:AC:E9:04
Certificate issuer:       /CN=f1099499-e865-4a58-89d5-0df023af2376
Certificate serial:       010D0C9F4328584A1B5FF3E4920C454D8AB00F00
Authority key identifier: C4:83:95:BC:07:81:7D:1D:AE:34:86:BC:A2:03:C2:30:72:E3:46:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f1099499-e865-4a58-89d5-0df023af2376.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f1099499-e865-4a58-89d5-0df023af2376/b1343bd7-f187-31ce-837b-42ff238b920b.roa
Signing time:             Sat 07 Jun 2025 01:00:50 +0000
ROA not before:           Sat 07 Jun 2025 01:00:50 +0000
ROA not after:            Fri 05 Sep 2025 01:00:50 +0000
asID:                     32030
IP address blocks:        45.45.168.0/24 maxlen: 24
                          192.40.141.0/24 maxlen: 24
                          2620:128:7000::/48 maxlen: 48
                          2620:128:7003::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f1099499-e865-4a58-89d5-0df023af2376/f1099499-e865-4a58-89d5-0df023af2376.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f1099499-e865-4a58-89d5-0df023af2376/f1099499-e865-4a58-89d5-0df023af2376.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f1099499-e865-4a58-89d5-0df023af2376.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1b:5f:f3:e4:92:0c:45:4d:8a:b0:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1099499-e865-4a58-89d5-0df023af2376
        Validity
            Not Before: Jun  7 01:00:50 2025 GMT
            Not After : Sep  5 01:00:50 2025 GMT
        Subject: CN=412b1d40-99dd-457b-8106-a41fbafc19f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ee:fd:33:dd:d9:61:08:ae:0f:82:ad:8c:a7:
                    ac:5e:1e:00:df:d1:9b:79:3e:1c:a6:96:18:8f:11:
                    5e:bd:0a:91:f9:50:dd:8e:39:3e:82:a8:62:69:c5:
                    a0:45:c7:30:3d:d4:6a:5c:b7:9a:d5:39:a7:bd:98:
                    f4:7f:cb:2f:5f:97:c0:6e:03:91:3a:5c:27:38:f2:
                    62:a4:fc:04:ee:03:b3:73:56:2b:b6:27:0b:b1:a2:
                    6c:82:80:63:5b:7f:2a:bc:94:b9:23:f1:2a:64:ca:
                    9b:3d:74:8d:17:13:d7:82:73:70:63:8d:16:d6:45:
                    cc:d7:3e:46:a8:1f:ff:48:d0:41:ce:df:3a:a2:db:
                    38:ab:ec:a3:c2:0a:43:f4:ee:47:83:d9:41:72:fd:
                    3b:61:c8:d3:2c:55:fd:d0:db:0a:12:a5:d8:f9:ae:
                    d9:e2:b7:e4:d7:5e:60:62:c0:fb:7d:1f:70:05:fa:
                    e7:3d:35:89:14:a2:d4:3f:02:62:b9:1a:72:c9:f3:
                    bf:53:24:b0:4f:2b:ef:bb:7f:29:b3:97:dc:c3:0e:
                    49:63:15:5c:de:41:92:5c:0b:af:0d:ea:e5:52:72:
                    02:0e:a5:61:76:52:1a:33:9e:9e:76:36:fb:4a:51:
                    89:d8:d4:95:d3:58:47:c2:7f:6a:bc:67:08:ed:b9:
                    80:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:6F:4A:67:F8:31:F8:DF:0A:86:C6:A2:2D:AA:4D:EF:A7:AC:E9:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f1099499-e865-4a58-89d5-0df023af2376/b1343bd7-f187-31ce-837b-42ff238b920b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f1099499-e865-4a58-89d5-0df023af2376/f1099499-e865-4a58-89d5-0df023af2376.crl

            X509v3 Authority Key Identifier:
                keyid:C4:83:95:BC:07:81:7D:1D:AE:34:86:BC:A2:03:C2:30:72:E3:46:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f1099499-e865-4a58-89d5-0df023af2376.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.168.0/24
                  192.40.141.0/24
                IPv6:
                  2620:128:7000::/48
                  2620:128:7003::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:e5:bc:08:fc:e7:7a:2a:64:a5:55:19:10:4e:e3:79:98:84:
         92:67:c6:e1:f8:77:58:cd:9f:b6:52:fd:ea:0c:27:23:46:73:
         cc:e5:68:d5:55:a6:77:de:09:8f:69:f9:9d:c4:2b:5b:3b:60:
         2a:41:1e:02:84:20:09:a4:15:c5:33:2b:25:05:b3:2d:51:b2:
         c6:8b:3b:e3:67:37:be:a0:69:3a:05:0c:27:59:04:1b:87:bd:
         a2:fc:cd:0b:5f:4e:47:36:02:6c:3a:27:ec:78:22:c1:7e:cc:
         5b:b2:a7:4e:d9:31:50:89:5e:e7:d4:59:fe:f9:27:c2:8e:c3:
         a3:47:03:89:1c:39:83:e4:da:79:5a:c7:26:35:46:e4:b2:c7:
         23:17:2b:ed:5f:3b:16:b2:39:d3:7c:9a:c9:4b:78:a0:cf:b5:
         c0:be:ea:63:3e:15:ce:33:5a:97:d7:70:4d:a9:05:1c:e5:f9:
         6a:83:9a:61:93:cc:b4:22:b4:85:fa:6b:3d:8c:79:7a:29:c0:
         6a:d9:6f:59:89:ac:28:24:a7:1c:78:eb:41:71:01:c7:09:2f:
         7e:d1:c5:6b:d5:eb:62:ed:82:83:43:6c:8c:52:0e:4f:62:91:
         00:49:2c:92:ee:50:01:11:2b:78:37:8c:bf:80:d6:ba:27:e3:
         be:7a:5d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 19:44:12 2025 by rpki-client