Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0541c0b6-a35e-3101-b265-eeb4d3cb2b86.roa
File:                     0541c0b6-a35e-3101-b265-eeb4d3cb2b86.roa (raw, json)
Hash identifier:          x8VSHLSZ48v1sVLr0GxYMm60a8zfWom9b/+TwD/ouy4=
Subject key identifier:   1F:4B:BE:42:32:D2:05:DD:4F:98:67:6E:EC:E7:39:84:A4:64:43:B5
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849AF806AAE81267EDF6038E100
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0541c0b6-a35e-3101-b265-eeb4d3cb2b86.roa
Signing time:             Tue 29 Apr 2025 09:39:02 +0000
ROA not before:           Tue 29 Apr 2025 09:39:02 +0000
ROA not after:            Mon 28 Jul 2025 09:39:02 +0000
asID:                     30036
IP address blocks:        45.59.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:af:80:6a:ae:81:26:7e:df:60:38:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr 29 09:39:02 2025 GMT
            Not After : Jul 28 09:39:02 2025 GMT
        Subject: CN=454db98f-e459-4a52-b1a4-bfda1e630213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:77:cd:fe:27:77:da:a5:13:08:72:fe:2c:c8:
                    d1:de:7e:62:9a:fd:d2:7e:b0:26:14:f3:07:91:f0:
                    99:f1:13:9a:15:6b:77:6d:ce:52:0b:8d:71:e8:f2:
                    21:a6:ab:35:34:bb:04:32:3a:18:22:56:92:f8:59:
                    cb:94:a9:42:88:13:fa:93:be:91:ff:13:58:c0:48:
                    ce:66:ee:55:8c:0c:af:3c:d9:20:60:63:7d:1e:9b:
                    73:a6:2c:bd:ca:0b:f6:51:cc:02:38:5b:6a:8d:fa:
                    c7:83:45:fe:ee:a8:cd:f2:80:3b:65:fe:0e:02:50:
                    e1:48:3c:a6:0f:0b:d1:cc:15:5c:e1:93:d7:cd:31:
                    57:2d:22:26:a9:77:a6:b0:43:5d:cb:3e:98:6f:4e:
                    0e:8f:d6:68:2f:cd:0c:c8:12:a7:cc:89:91:8d:6c:
                    0f:69:b1:1b:17:b0:60:a0:80:da:21:56:f1:e8:9d:
                    1a:db:c6:d1:44:7e:59:4b:42:0a:e6:29:c3:f2:46:
                    cd:67:d3:37:64:f2:19:1e:02:9b:c4:82:95:04:ff:
                    c9:46:4d:c3:b5:66:dd:0a:0a:36:bf:13:7b:03:e4:
                    a9:3b:20:1d:f3:8b:4b:ed:b9:f1:79:71:25:f2:b0:
                    4d:2c:88:6c:d5:ae:7a:dd:d0:90:57:eb:ae:a0:83:
                    f3:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:4B:BE:42:32:D2:05:DD:4F:98:67:6E:EC:E7:39:84:A4:64:43:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0541c0b6-a35e-3101-b265-eeb4d3cb2b86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:47:db:a8:84:8d:44:67:ed:63:03:b2:97:2f:d1:5a:54:65:
         b6:d3:3e:7d:f8:af:04:08:2b:c3:93:87:ca:64:d7:83:b9:a6:
         b0:3c:33:f9:9e:b1:06:4c:43:84:67:bd:9c:ca:d8:ad:a3:bd:
         46:f3:3c:98:be:0e:4e:94:e2:ba:8a:aa:12:3a:1b:5a:04:d1:
         5f:45:f3:d5:da:e7:87:e9:7a:b7:36:fa:71:87:fb:9d:bd:d0:
         af:58:ac:e3:f5:56:01:59:36:44:ed:4f:cd:9d:13:1e:53:56:
         a2:8a:72:ac:84:f0:f1:6a:a6:51:3d:34:96:6a:62:36:db:0c:
         de:83:51:fe:c1:88:4d:ef:f0:f1:a6:f0:b7:9b:71:60:98:cc:
         5a:50:ca:7c:6a:bf:bd:f6:04:29:01:4f:a5:14:bd:cd:fd:7a:
         40:b7:98:02:93:f0:46:53:f8:01:4a:3c:9f:57:a2:a2:b6:1f:
         38:81:ac:76:50:7e:22:47:82:c4:7d:0e:35:f8:f7:7f:d9:8c:
         8a:1b:46:bd:2e:84:06:6e:2e:e8:89:63:ce:df:df:6a:a5:f5:
         93:6b:cc:68:ad:6b:97:ad:96:8d:3b:c5:12:3b:e5:c7:30:0b:
         8d:58:9d:7c:5c:3d:48:88:af:85:e0:34:5f:d4:b2:5a:3c:21:
         0b:4e:3c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:31:35 2025 by rpki-client