Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b07ca14-14aa-4b56-b9ce-46c9768a8f93/8562bb05-a6be-3c84-b6c2-2a009b29702d.roa
File:                     8562bb05-a6be-3c84-b6c2-2a009b29702d.roa (raw, json)
Hash identifier:          yHPRx8f6o/3AtWFJnSV+igCINkRmH20JfcB9V5st9lA=
Subject key identifier:   8C:1C:8F:83:25:EF:2C:10:00:64:A0:BA:96:45:92:45:D2:5D:A1:42
Certificate issuer:       /CN=6b07ca14-14aa-4b56-b9ce-46c9768a8f93
Certificate serial:       010D0C9F4328584A23BFFC4D6C3A08A623343300
Authority key identifier: 05:DB:A8:45:3C:01:3F:61:68:0D:6E:53:31:03:A9:80:95:7E:5E:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b07ca14-14aa-4b56-b9ce-46c9768a8f93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b07ca14-14aa-4b56-b9ce-46c9768a8f93/8562bb05-a6be-3c84-b6c2-2a009b29702d.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     15830
IP address blocks:        199.244.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b07ca14-14aa-4b56-b9ce-46c9768a8f93/6b07ca14-14aa-4b56-b9ce-46c9768a8f93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b07ca14-14aa-4b56-b9ce-46c9768a8f93/6b07ca14-14aa-4b56-b9ce-46c9768a8f93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b07ca14-14aa-4b56-b9ce-46c9768a8f93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:bf:fc:4d:6c:3a:08:a6:23:34:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b07ca14-14aa-4b56-b9ce-46c9768a8f93
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=c6164061-3f4c-46a4-9bdc-91d1485fdacd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a4:51:41:7a:f4:3b:cb:7d:a2:64:8a:06:a6:
                    f5:4a:23:bd:8a:df:41:ca:e1:b9:60:8d:86:78:19:
                    4c:67:4b:e3:8f:21:c7:f7:bd:3c:48:9b:d6:3c:25:
                    f2:f8:cb:3b:b4:7c:fc:e1:49:4d:5e:c2:74:0d:31:
                    e2:8c:c2:a2:63:9f:36:a5:77:3b:96:21:f3:15:aa:
                    c7:69:29:5e:9e:5b:5a:77:9c:0d:ea:d4:01:f2:08:
                    33:95:60:7c:b3:45:bb:9f:cc:43:de:e8:65:a9:32:
                    d2:8c:94:3d:bb:3d:a4:9c:39:c6:bd:75:9a:4b:54:
                    f0:63:90:13:8f:19:e3:da:51:d3:40:d6:1c:33:35:
                    d8:29:42:bb:9d:62:e9:c2:28:f2:fa:67:f7:fb:2f:
                    3f:4c:2f:9d:d5:aa:dd:01:4d:50:3f:96:50:b6:06:
                    09:e0:35:86:23:1b:d8:f4:fb:55:1c:c7:fa:88:a9:
                    68:21:45:da:c0:8f:fb:6a:bc:13:01:7b:89:c7:b0:
                    1f:15:96:e3:9b:17:e4:ec:60:47:bf:30:e6:63:b5:
                    24:77:d8:30:1e:c4:4b:30:50:71:97:de:6f:63:82:
                    9b:6f:a9:91:39:89:20:cb:e6:f5:56:5f:48:3a:f5:
                    c9:06:75:26:f9:15:47:4e:75:38:23:69:41:f8:25:
                    c6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:1C:8F:83:25:EF:2C:10:00:64:A0:BA:96:45:92:45:D2:5D:A1:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b07ca14-14aa-4b56-b9ce-46c9768a8f93/8562bb05-a6be-3c84-b6c2-2a009b29702d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b07ca14-14aa-4b56-b9ce-46c9768a8f93/6b07ca14-14aa-4b56-b9ce-46c9768a8f93.crl

            X509v3 Authority Key Identifier:
                keyid:05:DB:A8:45:3C:01:3F:61:68:0D:6E:53:31:03:A9:80:95:7E:5E:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b07ca14-14aa-4b56-b9ce-46c9768a8f93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.244.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:cd:d7:30:d0:64:b6:af:24:75:8a:78:09:39:e7:18:5a:3b:
         5a:fe:9d:12:44:e0:d3:41:03:36:85:02:2b:91:50:54:08:6e:
         b9:e1:8e:ff:38:fc:27:3e:22:1a:b0:b0:c4:92:e6:20:ab:f7:
         16:6a:13:53:e7:27:92:f6:0e:0c:4c:8e:25:f1:11:ba:a0:c7:
         3b:e1:91:3e:14:9a:e8:8f:bd:77:d2:3f:a8:f8:72:a9:47:86:
         a5:62:34:93:39:c8:91:48:fe:fb:ee:2e:9d:13:ed:ca:88:65:
         81:4c:0e:44:72:17:97:0d:85:15:7c:77:20:1a:0e:00:5d:0f:
         1d:ca:3f:56:66:85:ec:ca:de:07:25:d7:0d:63:37:c1:e1:b6:
         e4:83:2d:65:c3:00:67:4b:ce:d3:56:74:a0:89:aa:5b:f8:05:
         20:6c:ba:1c:77:0d:9b:e4:8e:26:80:8c:2e:72:50:e1:fc:26:
         eb:a0:10:f1:19:7a:fc:7d:44:27:9e:7b:1c:23:09:5a:eb:bc:
         e8:ff:2c:58:0f:aa:4e:33:09:7a:43:69:09:b2:60:e8:15:88:
         62:88:c4:d4:8c:64:66:80:e5:aa:4e:08:e4:3c:d4:92:90:ad:
         19:f3:f4:3e:33:fb:f6:6c:89:c3:5a:e7:1b:60:0c:e2:02:bd:
         d5:3b:15:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:18:38 2025 by rpki-client