Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/eeb6178c-43e3-3e52-b110-cb9de876479b.roa
File:                     eeb6178c-43e3-3e52-b110-cb9de876479b.roa (raw, json)
Hash identifier:          NNRh+CmI//n5X5ZKoiv7h3krl3iR41NAtzT+y22znbI=
Subject key identifier:   C3:7E:51:51:96:D1:73:9A:E2:2F:14:7E:1A:54:49:10:A3:A3:32:0B
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285849A4B9FC3F74D3A1EE78CEA400
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/eeb6178c-43e3-3e52-b110-cb9de876479b.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     9009
IP address blocks:        45.74.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:b9:fc:3f:74:d3:a1:ee:78:ce:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=43d756f7-2391-45a0-8d62-30511d504c9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:bd:6f:c2:4e:90:0e:0a:db:78:fc:8e:a0:f4:
                    5e:30:96:01:7f:f0:4c:03:48:5e:b2:7a:a0:03:c2:
                    95:20:13:6f:e8:e0:fb:a2:c0:9e:02:94:47:d9:bf:
                    72:43:fd:b5:12:91:9e:e8:53:19:2d:f1:f8:7c:4f:
                    6c:b0:44:19:81:01:13:4a:07:d4:45:34:d1:6a:15:
                    33:29:12:d1:4e:b1:60:bb:50:35:67:cc:46:2c:71:
                    69:7d:6d:85:58:a5:20:4b:66:0a:17:60:45:79:3e:
                    33:c5:7e:68:49:8f:13:6d:a1:c5:17:73:3b:71:f4:
                    31:9a:72:40:8b:11:98:bc:4c:64:d2:d8:86:d8:ae:
                    3b:3e:63:fa:87:7b:14:5b:0c:92:1b:be:bf:0a:d3:
                    c7:b7:e6:6e:52:eb:5b:1d:14:9e:45:51:4d:6e:8d:
                    bd:c1:08:fd:f0:93:31:a8:d6:28:b5:d0:11:ca:2c:
                    fe:7f:eb:df:8d:bc:36:80:04:4c:fc:75:f3:b0:41:
                    d9:52:51:c3:76:93:59:12:7e:d1:ce:3a:de:64:70:
                    91:a1:fb:30:5b:1b:97:69:a0:af:b2:11:88:32:32:
                    61:d5:d7:4e:e7:54:1c:32:e6:61:92:0e:45:3d:2e:
                    70:27:d4:47:4a:c7:40:cb:10:33:ea:fb:87:47:83:
                    48:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:7E:51:51:96:D1:73:9A:E2:2F:14:7E:1A:54:49:10:A3:A3:32:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/eeb6178c-43e3-3e52-b110-cb9de876479b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.74.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:5d:5c:2e:11:e6:03:08:4e:df:f5:dc:04:25:cd:87:5f:e5:
         3d:ac:3b:68:eb:19:00:12:90:ae:a3:67:92:4e:97:53:a7:28:
         8c:b2:da:d9:bb:dc:80:83:e0:60:b8:e0:a1:f4:b5:a6:84:53:
         58:f3:2a:a0:62:ad:fc:bb:77:64:10:9b:0e:99:af:17:bd:be:
         94:71:62:43:81:66:8b:5c:b2:e5:05:76:7c:11:b4:4b:df:f0:
         27:e6:a6:f8:27:b1:bb:4d:dd:f8:4e:81:de:87:f2:d1:9b:d8:
         43:40:a8:1a:91:b5:ba:79:5a:2d:4e:d1:78:a9:fa:b8:41:db:
         0b:2b:5b:de:59:f3:ce:bb:8c:61:03:8d:fd:99:6b:bf:56:b9:
         3d:1a:68:be:67:f6:b6:87:93:e5:4d:c9:c1:5f:82:9c:17:f2:
         ab:78:62:e2:88:43:a0:40:c8:6b:99:d1:b7:ac:f5:c7:5a:15:
         0b:9c:20:a4:6e:95:95:6f:58:c9:29:08:47:1c:14:70:c0:b7:
         64:b4:e7:db:99:9b:12:a2:16:f6:66:79:a6:2b:74:85:fa:e4:
         9d:72:d0:c3:79:16:17:46:fb:cb:85:62:c0:d4:73:4b:6b:37:
         e2:53:9e:30:7a:26:38:c4:3a:11:61:e9:45:e1:fd:b9:da:02:
         5c:ab:22:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:15:44 2025 by rpki-client