Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/746d32d6-cdae-3263-a43d-4fe067b49807.roa
File:                     746d32d6-cdae-3263-a43d-4fe067b49807.roa (raw, json)
Hash identifier:          uuZ5XzMq2Nt+nHVm4Fs3P8SDF7oRbqkJPZCa7gB5Ub8=
Subject key identifier:   7F:D3:AB:3F:45:2D:0E:C8:41:A5:D4:92:82:74:ED:8E:2F:8C:21:8D
Certificate issuer:       /CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2
Certificate serial:       010D0C9F4328584A093A98C9DB0F4C48AA6C27E0
Authority key identifier: 19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/746d32d6-cdae-3263-a43d-4fe067b49807.roa
Signing time:             Sat 31 May 2025 13:01:03 +0000
ROA not before:           Sat 31 May 2025 13:01:03 +0000
ROA not after:            Fri 29 Aug 2025 13:01:03 +0000
asID:                     62874
IP address blocks:        45.41.128.0/22 maxlen: 22
                          45.41.140.0/22 maxlen: 22
                          142.147.224.0/20 maxlen: 20
                          142.147.248.0/21 maxlen: 21
                          162.249.164.0/22 maxlen: 22
                          167.160.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:09:3a:98:c9:db:0f:4c:48:aa:6c:27:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2
        Validity
            Not Before: May 31 13:01:03 2025 GMT
            Not After : Aug 29 13:01:03 2025 GMT
        Subject: CN=ef178318-d34e-4b64-8d54-804c9d564cd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d8:91:7e:b5:42:d7:31:97:72:df:b5:4e:77:
                    4f:f0:45:d6:57:04:80:ea:08:91:69:ac:5e:6b:03:
                    1e:96:f0:b5:57:8a:5a:fa:62:61:28:d5:69:5d:88:
                    60:c5:77:9a:3a:19:cd:07:4e:48:3c:50:76:06:97:
                    3b:9b:74:d1:7c:7e:74:3a:28:42:f2:26:7a:6c:83:
                    05:ce:1e:7e:ee:1b:21:99:30:1d:ff:ac:03:40:d7:
                    66:77:cf:76:b9:a4:bd:89:3d:81:d5:cc:e1:b4:95:
                    a5:9d:e3:22:fd:2d:e2:b3:2c:a8:12:cf:e9:37:66:
                    dc:94:3e:51:9d:b9:ab:11:0f:e1:b1:a0:20:25:70:
                    e0:09:eb:23:81:f9:95:fb:68:1a:52:c9:80:a6:98:
                    fd:59:b1:f2:01:67:91:bc:66:dd:9a:1c:c8:3f:fb:
                    23:f2:f7:7c:14:75:b1:05:2a:4b:cc:e4:56:34:bf:
                    6c:b3:7b:f9:64:b7:76:89:da:ef:fa:10:86:b8:b9:
                    56:6f:9e:e5:48:d9:84:3b:a2:c0:8f:55:a4:2b:55:
                    89:f3:44:13:08:e2:e8:5b:68:cd:a4:58:a4:5d:99:
                    50:39:d2:95:a8:cf:1a:c5:bf:cc:d3:bf:a6:c5:5e:
                    87:bc:ec:55:14:08:e2:6f:a3:07:6a:6e:b4:30:87:
                    c3:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:D3:AB:3F:45:2D:0E:C8:41:A5:D4:92:82:74:ED:8E:2F:8C:21:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/746d32d6-cdae-3263-a43d-4fe067b49807.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl

            X509v3 Authority Key Identifier:
                keyid:19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.41.128.0/22
                  45.41.140.0/22
                  142.147.224.0/20
                  142.147.248.0/21
                  162.249.164.0/22
                  167.160.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:ef:72:1c:05:1c:9b:3c:4d:53:93:7a:12:25:1f:de:0d:d6:
         a5:7f:4f:23:58:a8:a2:ca:1e:0a:33:49:9b:ff:f6:d6:6b:d1:
         44:49:77:98:4b:a4:29:f8:85:d1:b4:65:10:ff:6e:d1:26:f4:
         8b:a2:63:08:af:4e:58:ee:e6:f9:c9:b1:02:2d:c3:db:ff:d7:
         0e:a4:3e:ce:c2:b5:32:1e:89:6b:52:a3:1f:09:6b:c9:26:71:
         8f:f5:6f:f0:e7:10:69:94:87:2c:bc:1b:16:21:be:96:d8:d8:
         13:9c:c5:c3:56:de:94:60:f0:c4:0f:4e:70:f8:7f:e9:bc:e2:
         06:51:d9:da:7e:d8:8b:7f:64:c8:34:2d:d0:ec:ae:ec:d0:44:
         2e:b9:53:5a:3c:64:b6:f4:2b:ab:bb:e7:9c:9a:a8:16:00:55:
         2e:56:09:39:45:96:24:9e:cf:8c:74:e5:28:e5:b1:ba:48:5e:
         16:2d:08:a7:93:87:fe:ca:82:fb:62:52:7b:0a:11:38:3b:4e:
         91:95:d7:25:dd:ae:84:71:c6:4d:a2:58:b1:98:2b:4b:2c:bb:
         f6:2c:7e:34:8c:57:c5:01:98:3b:04:24:d4:62:92:76:f3:88:
         d3:c3:0b:2c:bf:46:fd:ec:17:2d:09:f4:d6:8a:43:ba:0a:22:
         79:c0:00:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:12:46 2025 by rpki-client