Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/88e1522b-7d36-3c0e-9f8a-509e899f8e03.roa
File:                     88e1522b-7d36-3c0e-9f8a-509e899f8e03.roa (raw, json)
Hash identifier:          Hj2SuF5+2KhrZOyUn2hX7qKJtGelngPzOJcunCFPkPc=
Subject key identifier:   C0:62:7B:ED:1C:26:92:ED:B7:62:C6:E2:95:33:89:28:B5:62:6C:8F
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849FB4530E23F46C89678335200
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/88e1522b-7d36-3c0e-9f8a-509e899f8e03.roa
Signing time:             Mon 26 May 2025 13:01:03 +0000
ROA not before:           Mon 26 May 2025 13:01:03 +0000
ROA not after:            Sun 24 Aug 2025 13:01:03 +0000
asID:                     30036
IP address blocks:        45.59.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fb:45:30:e2:3f:46:c8:96:78:33:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May 26 13:01:03 2025 GMT
            Not After : Aug 24 13:01:03 2025 GMT
        Subject: CN=40fb8552-860a-433b-8cda-3065129fe5ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:9d:8c:c3:56:2d:0d:77:8f:8f:05:c4:7e:a1:
                    89:b4:5a:09:8b:09:1d:ad:d7:84:c1:2d:14:f0:a4:
                    5f:68:a0:b4:5d:3e:e4:27:c6:67:a1:2c:62:af:29:
                    58:74:c1:c5:35:74:6e:f8:0e:32:d3:7b:df:cc:34:
                    bc:a9:69:74:90:1e:a6:d0:8b:40:fe:ed:cb:10:9b:
                    9c:9b:23:b8:bd:ac:73:2e:85:06:dd:c2:a7:08:20:
                    6f:7b:62:69:96:50:93:a4:2a:79:be:42:19:25:42:
                    5c:25:5f:b9:d9:dd:a4:cb:59:fd:5b:76:2c:a1:67:
                    3d:db:ca:bb:c8:2e:8e:f5:7c:52:00:97:12:c3:07:
                    0c:68:92:48:a7:1e:37:a4:3c:22:d6:a2:6d:b8:92:
                    d5:89:1f:39:ff:1a:b5:94:6f:71:50:01:2c:0a:e0:
                    39:a1:9b:86:56:cb:3b:e4:07:97:11:77:e6:ef:7a:
                    aa:de:a1:fe:6c:09:69:99:92:82:c5:e3:80:c7:47:
                    1e:a6:92:43:19:bb:24:21:96:78:a9:44:7b:1f:f2:
                    2b:71:84:a4:59:1a:7f:ee:ac:d9:37:fc:ef:b8:19:
                    d1:66:41:a6:0b:04:9a:04:81:47:15:fc:4a:ed:28:
                    61:46:04:f6:93:d7:7a:f7:c5:f4:55:fa:11:bb:91:
                    03:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:62:7B:ED:1C:26:92:ED:B7:62:C6:E2:95:33:89:28:B5:62:6C:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/88e1522b-7d36-3c0e-9f8a-509e899f8e03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:69:97:3b:c6:03:78:aa:e7:db:79:a1:34:9e:e4:47:82:ed:
         fd:4b:9d:a4:6b:7b:59:36:7b:e7:53:7d:38:ff:44:41:ed:60:
         fa:58:ed:7c:27:c7:5d:e4:0c:9c:26:b6:cf:ae:0e:40:95:44:
         0a:2a:d1:ea:06:d2:a8:ae:2e:45:c0:d1:aa:f7:f5:b7:77:81:
         f9:e3:b4:c4:21:b7:91:9b:60:5f:ca:78:f5:42:76:95:cd:5a:
         81:4d:12:0a:50:a1:e0:aa:fa:98:c0:97:cb:fe:fb:43:b5:5c:
         29:3c:6d:1d:b4:7b:fd:67:ed:6b:a2:f0:92:84:f3:81:1b:57:
         77:aa:44:72:f5:19:9b:ee:14:77:11:df:24:f8:ad:d7:8e:66:
         bb:91:68:1f:f5:93:fc:1d:6e:44:fd:4a:ac:0b:5b:3b:90:bd:
         7f:bd:19:21:6a:6d:7b:5a:e0:2c:3d:96:97:b0:08:a9:d7:75:
         4e:9c:51:34:f5:2d:23:26:0c:5e:99:41:f3:5e:9b:c4:a4:8e:
         4f:c0:45:e2:34:ce:03:23:87:18:ca:1c:fb:41:23:13:5d:b8:
         8b:92:70:74:a4:ce:2f:7b:b4:2d:17:a7:33:c7:1b:b2:75:af:
         1e:1c:b5:41:ea:0c:fa:fe:5e:0e:98:75:d1:2e:bc:f4:ca:7a:
         d7:9f:0c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:09:39 2025 by rpki-client