Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/45a3fe8d-acf7-4107-b540-5163b9d101d0/edb48c67-ba52-3773-a05d-686a41c740fd.roa
File:                     edb48c67-ba52-3773-a05d-686a41c740fd.roa (raw, json)
Hash identifier:          /mYfuO6GGO3wDnZsr9tfw8emHrNfCYPKFYTu0+IbQlQ=
Subject key identifier:   67:E6:28:59:E5:F0:CE:B9:1C:9B:B2:BA:16:6D:74:69:21:23:7B:89
Certificate issuer:       /CN=45a3fe8d-acf7-4107-b540-5163b9d101d0
Certificate serial:       010D0C9F43285849AD1A0D9AA6866B9470D4AC00
Authority key identifier: 0E:6A:2F:F5:54:3B:E4:7E:D9:FA:E2:97:BF:DE:BF:B2:41:79:A6:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/45a3fe8d-acf7-4107-b540-5163b9d101d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/45a3fe8d-acf7-4107-b540-5163b9d101d0/edb48c67-ba52-3773-a05d-686a41c740fd.roa
Signing time:             Mon 28 Apr 2025 13:01:00 +0000
ROA not before:           Mon 28 Apr 2025 13:01:00 +0000
ROA not after:            Sun 27 Jul 2025 13:01:00 +0000
asID:                     16509
IP address blocks:        52.144.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/45a3fe8d-acf7-4107-b540-5163b9d101d0/45a3fe8d-acf7-4107-b540-5163b9d101d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/45a3fe8d-acf7-4107-b540-5163b9d101d0/45a3fe8d-acf7-4107-b540-5163b9d101d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/45a3fe8d-acf7-4107-b540-5163b9d101d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ad:1a:0d:9a:a6:86:6b:94:70:d4:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45a3fe8d-acf7-4107-b540-5163b9d101d0
        Validity
            Not Before: Apr 28 13:01:00 2025 GMT
            Not After : Jul 27 13:01:00 2025 GMT
        Subject: CN=c4eab6c0-4e76-4141-81dd-466d43de9550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e4:b6:75:d2:91:65:ec:7e:7b:47:9d:d4:4b:
                    be:16:c9:11:4b:ce:5a:ec:fb:d5:2f:d2:f7:6f:69:
                    60:ed:d8:60:e5:db:09:be:d5:2f:9f:1b:64:5f:49:
                    ce:e4:42:de:86:41:1e:9a:b4:0f:5e:5c:06:32:6e:
                    bb:88:95:e4:76:3f:5f:b3:0f:c5:68:37:8a:dd:80:
                    91:9a:a2:5e:2b:b1:5d:04:28:c1:87:95:47:5a:bb:
                    40:b8:59:8a:6d:dc:0e:46:8d:2d:61:80:5b:4c:ff:
                    4e:96:3c:c5:4e:81:65:0c:1b:f3:92:d7:5a:2b:dc:
                    dd:e9:7c:ea:92:96:b4:9d:ae:bb:0a:5c:a3:57:52:
                    4b:92:59:8c:c9:3b:d1:34:f2:60:30:82:0b:46:59:
                    8b:b2:9f:ac:75:3c:45:01:18:e8:39:b7:42:55:7d:
                    ca:f6:38:2f:14:cd:59:95:91:a2:8f:79:1c:d8:ba:
                    8e:5d:05:f7:ea:0f:8f:4b:fc:80:51:0b:18:d8:d3:
                    fa:55:1a:bb:c1:dc:7f:b4:12:cf:49:36:5e:f5:90:
                    2e:2c:ee:27:1e:34:4e:47:71:30:a9:65:0a:23:40:
                    43:10:31:89:c6:18:9a:1a:f8:97:e0:64:51:6b:2f:
                    6d:94:a0:9a:85:4e:73:c1:82:5b:a1:62:d5:ff:b0:
                    7d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:E6:28:59:E5:F0:CE:B9:1C:9B:B2:BA:16:6D:74:69:21:23:7B:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/45a3fe8d-acf7-4107-b540-5163b9d101d0/edb48c67-ba52-3773-a05d-686a41c740fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/45a3fe8d-acf7-4107-b540-5163b9d101d0/45a3fe8d-acf7-4107-b540-5163b9d101d0.crl

            X509v3 Authority Key Identifier:
                keyid:0E:6A:2F:F5:54:3B:E4:7E:D9:FA:E2:97:BF:DE:BF:B2:41:79:A6:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/45a3fe8d-acf7-4107-b540-5163b9d101d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.144.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dc:51:1f:c7:28:c3:a6:7c:69:98:e4:1a:33:ae:d3:0e:df:f5:
         49:d2:6c:e8:b4:c1:8d:1a:9a:39:52:0f:56:b4:28:d1:82:32:
         6d:9a:81:55:63:2d:99:d1:dd:77:ab:e5:e7:81:e0:ab:87:5a:
         3e:fd:ab:82:84:04:90:11:06:79:f7:6a:a0:1a:11:36:58:c6:
         60:96:90:aa:76:50:d9:8a:45:cc:6d:2e:78:86:41:9b:79:7f:
         90:3b:c1:f9:b1:85:bf:43:2e:b9:01:5a:7f:9d:65:f6:42:f4:
         99:11:b2:af:6e:d5:3a:ba:16:6d:59:f6:b7:8f:dd:f3:69:0c:
         8d:b0:37:8e:a2:26:24:02:57:fb:67:66:8e:02:39:11:f4:12:
         6a:8c:f9:d4:b9:b7:bc:a3:53:56:8a:31:c1:a8:af:62:30:c3:
         59:a2:24:f9:24:cb:09:6e:a7:d2:d4:74:ed:a3:21:a8:81:f0:
         1f:2b:0b:66:56:2d:92:71:9c:8f:fd:10:40:57:62:0a:70:d2:
         1f:0c:7c:90:34:b7:df:00:f4:fe:55:11:9e:ca:98:14:d9:87:
         3a:89:6d:df:c0:2a:62:91:9c:77:5a:27:ea:52:98:fb:4a:bd:
         ea:85:d0:7e:2a:bc:d4:a7:1b:20:27:9c:0b:d8:15:f1:4e:a2:
         7e:c5:e4:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:50:41 2025 by rpki-client