Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/708838d8-8559-3142-a30e-932c38e17aff.roa
File:                     708838d8-8559-3142-a30e-932c38e17aff.roa (raw, json)
Hash identifier:          XvIINxjDYaTzE9xZ+Zvqr/TWvoedg5hXatAjbpX3BmQ=
Subject key identifier:   A7:1B:11:D0:19:21:AB:1C:27:55:C1:0A:9C:4D:F7:7D:45:B0:DE:41
Certificate issuer:       /CN=4d929512-7541-4207-be46-8af4cc4a4800
Certificate serial:       010D0C9F4328584A5FC5EB29F87936383F34C680
Authority key identifier: 50:76:C6:B0:0E:4F:BF:DD:EB:45:FC:C4:02:E7:4F:56:CB:5D:35:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/708838d8-8559-3142-a30e-932c38e17aff.roa
Signing time:             Tue 01 Jul 2025 13:01:04 +0000
ROA not before:           Tue 01 Jul 2025 13:01:04 +0000
ROA not after:            Mon 29 Sep 2025 13:01:04 +0000
asID:                     26658
IP address blocks:        45.33.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/4d929512-7541-4207-be46-8af4cc4a4800.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/4d929512-7541-4207-be46-8af4cc4a4800.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:c5:eb:29:f8:79:36:38:3f:34:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d929512-7541-4207-be46-8af4cc4a4800
        Validity
            Not Before: Jul  1 13:01:04 2025 GMT
            Not After : Sep 29 13:01:04 2025 GMT
        Subject: CN=dbbdf9c4-1d6a-4d69-80ce-5460aa0663a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e6:70:45:02:48:23:07:18:45:66:24:c9:ee:
                    1a:68:2c:fd:94:21:86:41:73:29:d8:17:b9:c8:58:
                    13:a3:f3:fc:b2:b6:ad:29:93:93:de:55:73:e2:7a:
                    3c:a3:89:c1:03:cc:6e:c4:94:f2:9a:65:8a:c9:80:
                    67:ec:1e:15:6f:9f:ec:98:b1:43:fa:5b:fe:d4:b1:
                    a5:14:5b:73:bc:d6:81:46:80:53:f2:c0:ba:c9:38:
                    9b:23:13:ec:b4:fe:f1:08:62:5e:56:c6:c5:25:ff:
                    0e:1c:35:49:c4:4d:e8:ab:e2:44:b9:7e:ed:1e:87:
                    5e:09:a1:7e:95:b5:c3:90:86:41:ba:53:03:ea:eb:
                    11:ee:e2:b6:48:e0:67:31:0a:f3:64:f1:41:53:f6:
                    a6:7b:a9:58:6f:69:dd:f7:50:63:fd:87:4d:65:01:
                    b2:e7:be:08:f0:b5:11:f5:77:91:26:9a:8e:d1:61:
                    c7:93:d5:98:c6:19:ae:3c:21:0a:97:08:e5:63:99:
                    52:34:c7:63:ac:50:47:08:51:0f:ab:2e:28:3e:eb:
                    a3:08:22:74:64:94:08:94:53:d9:27:29:93:31:3e:
                    62:20:f1:41:1e:22:00:e4:41:de:56:ae:c0:ed:11:
                    56:00:ef:26:40:da:0c:e9:5d:50:5e:18:68:0c:f0:
                    d4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:1B:11:D0:19:21:AB:1C:27:55:C1:0A:9C:4D:F7:7D:45:B0:DE:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/708838d8-8559-3142-a30e-932c38e17aff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/4d929512-7541-4207-be46-8af4cc4a4800.crl

            X509v3 Authority Key Identifier:
                keyid:50:76:C6:B0:0E:4F:BF:DD:EB:45:FC:C4:02:E7:4F:56:CB:5D:35:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.33.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:d8:db:b2:87:b4:2c:52:41:8a:ad:52:c9:ab:38:c8:eb:6c:
         c3:9e:72:2f:ba:c0:be:81:aa:19:cc:bd:74:09:66:db:7e:19:
         36:11:05:a4:11:7a:27:79:0b:a6:b8:34:3f:1c:00:a0:eb:da:
         1c:f1:b1:a5:b2:91:91:73:9c:f2:10:1b:62:9a:83:ef:8c:28:
         7a:45:23:99:be:36:82:52:46:49:ea:35:80:02:7d:d7:22:67:
         e8:b6:72:69:9c:db:e5:c3:fe:cc:87:20:9b:f2:5e:c3:59:8e:
         a2:00:5f:d8:96:e7:02:95:cc:90:2b:65:77:2a:a0:5a:c5:49:
         a1:63:fc:04:19:81:0d:a1:c1:70:de:62:b7:91:a5:ad:d5:a5:
         5d:a7:c3:ad:62:cc:f9:e1:cc:1e:38:26:7f:90:1d:01:6f:0b:
         51:3d:a2:ab:93:19:c8:5d:d5:76:cb:f0:b5:b8:69:f0:8d:69:
         5c:53:dc:aa:cb:eb:e2:15:9a:42:27:8a:2b:e9:58:66:74:80:
         b9:2e:f0:15:e3:49:5f:1b:18:de:18:8a:c2:8c:6b:61:c9:86:
         ad:b7:9d:46:0d:75:7e:e0:b2:f6:cd:0c:12:9f:90:7c:de:31:
         41:45:fb:2a:de:70:f0:cf:41:8f:33:5e:9b:d0:ad:f0:a7:c8:
         4c:b8:0f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 03:41:41 2025 by rpki-client