Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1c778358-aaaf-3ef7-8ca6-973615f0a17b.roa
File:                     1c778358-aaaf-3ef7-8ca6-973615f0a17b.roa (raw, json)
Hash identifier:          UoHOQO91yJiqdZsy8S9PWKv29DTQI4wjWq8aFr5FT3s=
Subject key identifier:   EF:E2:E8:E9:9F:45:33:27:0F:BD:E5:FE:0D:E5:E1:02:AA:86:37:B3
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285849AD1A0FBE2A840FDD84B71580
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1c778358-aaaf-3ef7-8ca6-973615f0a17b.roa
Signing time:             Mon 28 Apr 2025 13:01:00 +0000
ROA not before:           Mon 28 Apr 2025 13:01:00 +0000
ROA not after:            Sun 27 Jul 2025 13:01:00 +0000
asID:                     16125
IP address blocks:        45.40.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ad:1a:0f:be:2a:84:0f:dd:84:b7:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Apr 28 13:01:00 2025 GMT
            Not After : Jul 27 13:01:00 2025 GMT
        Subject: CN=a2a9bcdd-b351-410d-bbec-09b6b6c5c970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:17:35:36:ab:d9:d6:1d:5a:d3:e0:66:44:94:
                    01:54:9e:89:22:c8:d4:ca:5d:e9:96:2f:6c:46:0b:
                    1c:a5:52:30:93:8a:b8:e9:f8:58:34:3a:bd:24:9c:
                    5f:d4:39:4c:91:84:25:b2:e7:6f:fb:d9:f7:9f:82:
                    86:9c:ab:01:56:77:64:f8:3d:40:1f:69:f7:52:69:
                    ee:c5:a2:8b:79:a1:4a:af:75:b8:92:49:a1:69:c9:
                    c9:90:a5:2a:9a:0f:4d:a9:ce:da:4d:5c:6f:3b:e2:
                    3e:82:e9:f6:8e:ba:b4:e1:51:6f:bb:45:88:fa:3e:
                    2b:d4:06:50:d7:52:dd:1a:e7:b4:d0:ec:cb:df:5c:
                    49:92:e5:3a:1f:55:b7:15:d5:dc:d3:3a:66:cc:20:
                    bd:fa:8b:30:a7:db:c5:26:0a:f6:c3:21:bf:45:54:
                    4b:d6:da:cd:63:3c:8f:d4:14:82:39:9f:3d:21:f4:
                    5b:cb:8f:c9:ab:ed:79:7c:42:a3:bd:d4:b9:ef:e2:
                    52:06:5c:c3:a5:9b:91:be:b8:ed:fe:72:7b:3b:4e:
                    09:47:0b:b6:da:92:0e:38:4d:6b:67:a9:8f:50:4b:
                    a3:27:71:c8:24:81:64:2a:1d:9a:01:67:a0:57:f8:
                    be:7b:6d:8a:d1:47:17:7c:db:b3:46:ee:d5:a7:e8:
                    a3:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:E2:E8:E9:9F:45:33:27:0F:BD:E5:FE:0D:E5:E1:02:AA:86:37:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1c778358-aaaf-3ef7-8ca6-973615f0a17b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.40.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e4:33:6d:58:ed:69:66:b0:0c:f4:c5:02:d7:51:0a:df:3d:56:
         9d:ee:e1:bc:6f:1a:2e:95:7b:e6:7a:20:99:2e:64:68:f9:ae:
         fb:32:4e:2d:64:b4:8c:09:ed:f3:9e:12:bc:fb:2e:24:9c:0b:
         5e:4a:11:9b:ff:fc:af:ef:17:29:20:24:e8:57:2f:18:e1:ad:
         36:7b:1d:bf:42:1b:84:0d:5f:c0:cb:e6:0f:fd:df:ab:91:38:
         2b:64:b9:e3:2d:34:e9:b5:d1:55:53:56:c3:6f:1f:96:f6:11:
         5e:d4:7d:71:03:bb:17:d5:b2:a8:4c:61:02:03:72:89:62:70:
         a5:79:58:16:22:db:27:65:95:6b:80:1b:67:d5:04:8d:d6:c8:
         4c:99:3e:6b:fb:c0:6b:67:6a:e3:bb:ee:0c:13:e1:e3:ff:0e:
         71:6a:56:43:5f:20:a2:ac:cf:95:c7:03:d9:0e:a5:0b:97:15:
         77:b8:08:5f:3b:0a:b6:f9:0d:f0:48:0b:1a:86:81:f1:88:f3:
         43:78:dd:bc:66:ef:41:ec:8f:c6:ef:39:40:fd:f8:13:f9:f1:
         db:ae:78:4c:92:9d:bb:ab:a4:77:cb:b9:4b:fb:0b:84:23:0b:
         48:6a:38:8d:f1:89:83:c3:de:87:75:a9:5d:c6:7a:98:61:e2:
         f3:db:cc:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:44:28 2025 by rpki-client