Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/d5309ef4-02ef-32b1-925e-116cefdf66ee.roa
File:                     d5309ef4-02ef-32b1-925e-116cefdf66ee.roa (raw, json)
Hash identifier:          nhWKgZ0iaSCzIl5SE3TaINOnbx85/s2tF1nwTy5C+u4=
Subject key identifier:   7C:39:1A:29:C8:1A:3E:8B:0A:CB:D0:7B:8D:A4:7B:9B:CD:A1:94:80
Certificate issuer:       /CN=22f3c152-12b6-441e-b4d6-66feab870c4d
Certificate serial:       010D0C9F43285849AD1A0A878228C606E1846580
Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/d5309ef4-02ef-32b1-925e-116cefdf66ee.roa
Signing time:             Mon 28 Apr 2025 13:01:00 +0000
ROA not before:           Mon 28 Apr 2025 13:01:00 +0000
ROA not after:            Sun 27 Jul 2025 13:01:00 +0000
asID:                     58061
IP address blocks:        45.62.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ad:1a:0a:87:82:28:c6:06:e1:84:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d
        Validity
            Not Before: Apr 28 13:01:00 2025 GMT
            Not After : Jul 27 13:01:00 2025 GMT
        Subject: CN=ec0790c4-1806-42d2-85bb-fa3b1eea2139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:16:b4:b7:6e:d9:8f:b1:88:96:18:29:b9:d4:
                    57:8e:c2:6a:2b:7e:e3:e1:45:ae:c3:cc:b1:1a:e9:
                    4e:d8:dc:93:b7:79:b4:0d:12:ed:6c:9a:be:aa:89:
                    93:20:0f:39:ea:ca:22:97:19:df:ae:33:e7:fd:43:
                    be:81:61:a4:76:53:c7:28:bd:0f:17:3f:c6:61:50:
                    30:1c:fd:36:6e:2c:f7:d9:1d:d8:f4:08:41:bd:17:
                    75:2c:65:86:f8:21:5c:01:bd:3e:24:84:56:08:cb:
                    68:7b:dc:7a:1f:9d:3c:2e:1d:c5:43:cf:5b:6b:aa:
                    db:74:d0:b6:6e:35:bb:5e:72:eb:8a:1a:78:44:92:
                    cf:07:db:6d:62:06:b7:37:41:4e:fa:d8:a2:45:89:
                    a8:03:f5:26:90:7f:7e:8a:75:97:d3:dd:55:e6:6a:
                    25:58:cc:3b:8b:d9:6a:c8:ce:16:16:b4:07:dd:b0:
                    91:51:18:22:7e:9b:70:d3:71:3e:30:15:d9:1e:bf:
                    c0:96:25:f4:d3:8e:c9:ff:9c:e1:b6:8c:35:0f:8d:
                    b1:ec:17:ae:12:83:4c:cf:f2:a6:93:66:97:e7:2b:
                    96:12:a7:01:99:b1:16:30:7d:58:89:6a:14:76:c5:
                    32:1b:4d:42:33:9b:92:5b:74:56:06:0f:5c:06:9b:
                    2c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:39:1A:29:C8:1A:3E:8B:0A:CB:D0:7B:8D:A4:7B:9B:CD:A1:94:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/d5309ef4-02ef-32b1-925e-116cefdf66ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl

            X509v3 Authority Key Identifier:
                keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.62.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:37:70:78:3c:12:de:5e:c9:f9:ea:77:e6:96:ea:51:a7:94:
         88:ca:ad:dd:65:fb:ed:ea:30:8c:7d:59:66:92:07:f6:7b:b6:
         f5:4b:28:42:e5:d5:c8:18:a6:71:7a:00:94:bd:9f:65:a9:7b:
         bd:33:a9:57:6a:4e:b0:57:70:24:7a:d8:47:7c:e6:8c:fd:b6:
         74:7b:cd:76:63:03:cc:4b:e9:c1:52:03:6d:c1:67:39:44:58:
         bd:3c:b4:2e:cd:d5:43:a3:43:c0:f1:01:32:dd:27:6e:3a:29:
         ff:a4:e8:a4:ad:be:be:f6:a9:b6:cd:db:e2:b0:bf:29:78:0b:
         87:8d:fa:10:d3:f6:fb:a1:0f:53:98:58:65:c6:b3:af:b1:e8:
         8e:5c:45:4e:52:0a:b6:01:46:1e:fa:c1:0e:6a:0a:2b:49:7b:
         d3:23:a2:2d:c5:dc:ee:9f:13:e7:97:b7:93:1d:37:d3:26:d2:
         43:b6:da:89:e2:90:f0:a0:64:0f:01:c7:7c:94:39:e5:37:a4:
         fc:e4:a2:15:02:6c:43:33:32:75:8e:b6:6f:2c:70:5d:bf:8c:
         ff:38:d0:ae:11:70:43:f3:59:4c:6e:8b:77:1e:0f:f0:d0:c1:
         40:d0:f7:f4:f7:f5:7b:61:a1:01:6d:a4:65:8a:a1:70:7a:0b:
         27:d7:eb:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:30:19 2025 by rpki-client