Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/48ac6385-6e5f-421f-b01a-efa9da49be2c/eae15308-b9c6-3c7f-9c16-a7ac33afba81.roa
File:                     eae15308-b9c6-3c7f-9c16-a7ac33afba81.roa (raw, json)
Hash identifier:          tX8h55n/6o2GexA41R1ob852vuoyaMQ+7ZD4PTuOWSE=
Subject key identifier:   EF:64:7D:24:75:AD:12:11:8B:48:73:E8:B7:14:47:54:80:2E:4B:E5
Certificate issuer:       /CN=48ac6385-6e5f-421f-b01a-efa9da49be2c
Certificate serial:       010D0C9F4328584A4C3B098DEF93FA73BB0783C0
Authority key identifier: 30:C0:7D:6D:41:99:E3:FE:4D:12:4C:9E:CA:1E:50:CE:E5:24:27:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/48ac6385-6e5f-421f-b01a-efa9da49be2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/48ac6385-6e5f-421f-b01a-efa9da49be2c/eae15308-b9c6-3c7f-9c16-a7ac33afba81.roa
Signing time:             Tue 24 Jun 2025 13:01:03 +0000
ROA not before:           Tue 24 Jun 2025 13:01:03 +0000
ROA not after:            Mon 22 Sep 2025 13:01:03 +0000
asID:                     398574
IP address blocks:        45.114.234.0/24 maxlen: 24
                          45.114.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/48ac6385-6e5f-421f-b01a-efa9da49be2c/48ac6385-6e5f-421f-b01a-efa9da49be2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/48ac6385-6e5f-421f-b01a-efa9da49be2c/48ac6385-6e5f-421f-b01a-efa9da49be2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/48ac6385-6e5f-421f-b01a-efa9da49be2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4c:3b:09:8d:ef:93:fa:73:bb:07:83:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48ac6385-6e5f-421f-b01a-efa9da49be2c
        Validity
            Not Before: Jun 24 13:01:03 2025 GMT
            Not After : Sep 22 13:01:03 2025 GMT
        Subject: CN=912c4615-1f99-45f0-9bfb-7866be57cd2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:77:50:3c:37:7e:32:21:0c:a7:0f:aa:9d:3d:
                    5b:84:09:22:51:d3:8b:6e:ed:f6:7d:a8:5d:ba:55:
                    d3:fc:02:ec:e4:76:15:2d:40:ae:d8:d3:69:a4:a6:
                    59:c5:aa:38:65:2b:ec:51:aa:e8:df:21:6d:25:b1:
                    b4:35:2d:4b:40:57:28:b4:41:56:09:32:b0:a6:dd:
                    6f:58:d6:b9:16:46:6a:27:83:72:61:ab:fb:49:4c:
                    42:2a:40:01:f8:5d:ab:99:61:07:e5:37:ea:48:d9:
                    29:bf:b0:19:17:38:35:ad:f4:11:eb:f5:7a:1c:57:
                    fb:5e:43:10:62:d8:84:fe:a9:bf:24:ee:58:7e:b4:
                    ed:f7:d9:a3:6f:9d:ed:a9:24:c6:00:70:56:ff:05:
                    53:e3:8a:db:8d:ad:35:21:9f:42:44:4a:d7:02:d5:
                    26:e6:c8:77:44:b2:02:26:31:95:6f:1b:1a:dd:b2:
                    e7:ac:7e:79:ab:fd:e2:89:57:5c:4b:dc:44:c4:b6:
                    39:95:04:0c:0b:00:f3:70:e5:32:65:7f:33:c4:ab:
                    5d:5f:4b:45:19:f4:61:ff:f9:16:50:f0:16:b7:19:
                    aa:87:20:20:68:3c:29:39:71:f0:40:d1:66:10:45:
                    7f:10:88:07:74:6b:b2:37:1a:79:5e:ec:70:f3:75:
                    e6:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:64:7D:24:75:AD:12:11:8B:48:73:E8:B7:14:47:54:80:2E:4B:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/48ac6385-6e5f-421f-b01a-efa9da49be2c/eae15308-b9c6-3c7f-9c16-a7ac33afba81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/48ac6385-6e5f-421f-b01a-efa9da49be2c/48ac6385-6e5f-421f-b01a-efa9da49be2c.crl

            X509v3 Authority Key Identifier:
                keyid:30:C0:7D:6D:41:99:E3:FE:4D:12:4C:9E:CA:1E:50:CE:E5:24:27:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/48ac6385-6e5f-421f-b01a-efa9da49be2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.114.234.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:18:0f:4d:7a:49:a5:10:00:47:bb:66:2d:eb:e3:40:1c:68:
         45:cb:81:16:cf:56:a0:58:d0:83:ed:da:95:75:81:c6:6b:bc:
         37:f6:4e:d4:df:84:cf:09:ac:75:83:e1:72:84:7b:44:4f:9c:
         b5:66:5d:f7:6d:db:b9:44:31:e0:36:a3:c1:92:45:a5:7d:ea:
         47:69:1c:cc:3b:0f:04:0b:ff:14:b3:3a:d5:fe:4e:11:19:1e:
         10:76:cd:45:ae:b2:30:d7:ab:a2:df:c3:05:84:7d:2f:65:a1:
         9c:95:96:0e:b6:b6:fb:d9:42:fc:38:28:8e:34:36:14:df:4b:
         90:2a:69:e7:65:be:da:a9:1b:4f:4b:70:86:cc:3d:2b:d1:3b:
         61:26:c9:70:36:db:5b:12:26:51:f7:5f:69:4c:75:cc:0b:1e:
         fc:57:f0:d6:cd:81:e6:a5:e4:f3:28:9a:f3:74:9a:30:52:5b:
         5a:a2:7c:c3:90:b1:48:b0:1e:56:8a:9e:d3:7d:20:45:e2:e5:
         7c:32:39:90:6a:a5:d2:a1:18:96:c3:b3:13:e9:31:95:88:25:
         a9:2f:e7:2b:0c:fe:b2:5d:e1:40:a8:c7:1d:44:97:ea:78:55:
         cf:b0:22:d4:ce:e0:82:4e:95:98:1a:26:f5:50:b8:7f:90:7f:
         79:8c:c1:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 12:02:04 2025 by rpki-client