Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3fa78927-8a39-3fb0-b486-f5266be33acb.roa
File:                     3fa78927-8a39-3fb0-b486-f5266be33acb.roa (raw, json)
Hash identifier:          3rNjmn28q/DIpSe1sHPfGvjzwIAtPVjz24D357NyZo4=
Subject key identifier:   BC:57:39:42:60:BC:D5:E0:79:0D:4D:0B:83:59:38:76:EB:9F:E4:90
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849AF8089016EF97E0197124400
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3fa78927-8a39-3fb0-b486-f5266be33acb.roa
Signing time:             Tue 29 Apr 2025 09:39:16 +0000
ROA not before:           Tue 29 Apr 2025 09:39:16 +0000
ROA not after:            Mon 28 Jul 2025 09:39:16 +0000
asID:                     19905
IP address blocks:        45.59.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:af:80:89:01:6e:f9:7e:01:97:12:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr 29 09:39:16 2025 GMT
            Not After : Jul 28 09:39:16 2025 GMT
        Subject: CN=bd1da27d-8989-421d-bda4-e750b629f1ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c3:c9:4a:24:ba:0b:c3:97:6a:9c:cd:6d:72:
                    3c:f0:1b:66:94:43:d5:9b:e8:ae:7b:7e:16:9d:a0:
                    af:e0:66:36:e3:fb:3b:12:d6:f6:c2:34:30:31:b1:
                    ee:1c:50:0f:4d:34:2d:57:32:46:86:24:ee:d2:bc:
                    57:35:b3:27:43:b3:9f:4e:de:11:b2:a5:75:72:9b:
                    a6:4e:1b:34:91:4f:65:24:57:a5:3a:f1:18:18:87:
                    2a:18:52:df:8f:62:42:cf:f7:42:90:45:2e:5e:bb:
                    30:7a:9b:91:24:49:18:16:dd:c0:fd:a2:78:99:42:
                    b8:8f:2e:05:18:e6:50:8f:4b:52:5d:26:e2:7b:b4:
                    28:33:69:93:8f:c5:91:b1:03:7b:8e:69:a9:b0:cc:
                    8a:18:ed:0a:24:75:d4:87:14:12:a4:39:cc:b6:b6:
                    d5:5a:17:ae:0e:08:ef:ac:52:95:a0:ba:bc:c9:e2:
                    f9:05:d1:64:3c:a6:6c:64:73:c1:cb:3a:e8:3f:2e:
                    b3:85:c1:21:97:52:52:d0:d0:03:5f:8b:3d:ca:83:
                    51:1c:b2:27:1b:d6:05:ba:82:9a:21:05:b9:9b:99:
                    bf:ec:81:d2:e7:d8:43:6d:e8:08:9a:59:ae:6e:a2:
                    d1:1f:6c:5d:d8:4a:e5:75:32:4e:40:93:02:6a:64:
                    28:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:57:39:42:60:BC:D5:E0:79:0D:4D:0B:83:59:38:76:EB:9F:E4:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3fa78927-8a39-3fb0-b486-f5266be33acb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:da:f0:5a:71:cf:d8:3b:eb:ba:83:c4:b7:91:ed:d0:99:77:
         aa:6e:bf:88:5b:99:4a:f3:af:06:b1:5d:26:24:6c:3e:bf:0e:
         4f:ee:02:3f:4c:ad:d8:de:9a:33:db:14:ac:83:95:0b:bf:a2:
         8f:c4:04:85:a1:9b:af:ce:37:8d:fa:10:8e:26:2c:88:4a:4c:
         ee:95:54:db:1f:3c:3f:5c:73:5e:b4:a3:19:d0:13:02:98:0e:
         c9:a2:7b:fd:2d:a5:ac:e6:c9:7b:b8:a1:03:05:ad:03:c1:27:
         e4:b8:ba:e5:c2:b5:93:08:8b:f6:e2:17:0c:cd:dc:75:c9:c8:
         f1:bc:ae:d4:14:2b:50:b4:ca:24:d6:cf:a6:3c:39:ac:be:cb:
         ab:f3:71:9b:11:4b:81:4d:f0:e3:0e:07:4b:62:30:97:9b:52:
         4a:94:5e:e1:d1:7b:2e:e9:b4:85:2f:bd:d4:4c:41:dd:ae:e1:
         8f:1b:cc:d4:77:16:11:40:31:4a:43:86:f4:5d:2f:0f:fc:03:
         ac:70:fa:13:09:23:e8:c0:e4:6f:db:f0:ab:21:0b:4c:ae:de:
         7d:98:e3:c6:b5:e6:98:00:75:c8:67:76:be:b4:94:d2:70:8c:
         5b:50:86:51:6b:35:89:81:95:6b:b1:b4:46:ed:eb:e1:a8:76:
         74:1a:d0:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:32:56 2025 by rpki-client