Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/6602b74c-b92a-3baa-933b-65df556c1247.roa
File:                     6602b74c-b92a-3baa-933b-65df556c1247.roa (raw, json)
Hash identifier:          twlYTUngGw5sRYGo/sxvN6todgyOLGedt8f8Fl8JW+8=
Subject key identifier:   A0:1A:CA:E5:E4:8D:5B:D3:61:34:7F:F1:7A:B1:95:8C:4C:AB:F1:80
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584A49C5C3A485BA631BC1E4C300
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/6602b74c-b92a-3baa-933b-65df556c1247.roa
Signing time:             Mon 23 Jun 2025 15:53:15 +0000
ROA not before:           Mon 23 Jun 2025 15:53:15 +0000
ROA not after:            Sun 21 Sep 2025 15:53:15 +0000
asID:                     20001
IP address blocks:        45.40.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:49:c5:c3:a4:85:ba:63:1b:c1:e4:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jun 23 15:53:15 2025 GMT
            Not After : Sep 21 15:53:15 2025 GMT
        Subject: CN=4af4ca76-5853-4be6-a538-7481a81435a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e7:b6:7f:cf:7d:ba:02:3f:a3:ec:62:25:95:
                    c4:15:fd:cf:c6:cf:80:1c:74:56:9a:ee:11:57:e8:
                    35:f8:10:7e:ab:8b:5a:c0:85:1f:ee:9f:7d:be:2e:
                    21:d0:0e:3c:1e:fb:9a:d8:b1:7b:9f:de:77:23:4f:
                    66:88:b9:4e:59:8d:8c:d9:c4:4c:74:f2:a2:7a:7e:
                    6c:46:99:c2:88:2b:fb:0f:21:b6:1a:0f:03:4f:8b:
                    42:72:23:78:d9:1b:e1:7a:27:fd:7a:8c:40:0b:75:
                    2c:08:b6:1e:38:ac:9a:10:01:1a:7e:6e:a5:1e:b8:
                    7f:23:67:ff:6b:ad:6c:a2:aa:de:c0:f7:9d:dd:83:
                    5d:4a:af:c0:49:65:f8:be:f8:4b:dc:3f:9a:f6:eb:
                    6e:cb:7d:e3:35:34:8f:88:da:5d:da:df:d9:5c:e6:
                    41:95:db:8c:13:32:1c:53:dd:e5:ab:4d:17:7b:ea:
                    38:57:25:3a:73:59:22:21:44:1e:c1:be:61:7d:06:
                    8c:f9:ef:4a:78:9e:72:dd:cd:c3:c4:3f:32:9b:ec:
                    78:7e:52:b5:4e:c1:a2:24:f7:d2:63:df:0f:e8:29:
                    ef:7d:33:02:3b:79:0f:96:8c:b1:b1:43:82:10:93:
                    4b:e3:c8:94:1e:a6:77:47:29:b5:40:6e:c3:9a:a2:
                    94:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:1A:CA:E5:E4:8D:5B:D3:61:34:7F:F1:7A:B1:95:8C:4C:AB:F1:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/6602b74c-b92a-3baa-933b-65df556c1247.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.40.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:8a:6c:3e:25:e4:90:ef:03:ea:53:01:cb:3e:d8:e0:fd:1f:
         1c:a5:c4:78:32:c3:fb:56:42:ea:e0:24:db:ca:64:0a:c2:d2:
         17:2a:0f:7b:4b:4e:bb:ca:45:7c:46:f6:a8:c8:13:4b:c0:2a:
         fc:41:33:e8:52:1c:0f:6e:20:9c:3b:09:12:06:5b:98:0a:f9:
         97:4a:ef:83:2b:b3:a1:79:bf:62:40:97:85:db:90:cc:f2:65:
         47:29:24:7c:ed:be:29:9b:27:81:55:4f:c6:e1:38:97:fa:1a:
         a7:8c:78:5a:74:7b:82:50:09:d5:26:84:b9:9b:51:3c:cf:c4:
         f5:c9:77:4f:68:af:56:74:9a:bd:c2:46:55:b1:b3:c3:94:d7:
         71:5f:4c:ff:10:c3:1a:08:e1:0b:e0:f8:fe:4a:ed:50:dc:fd:
         19:95:f1:79:64:38:31:58:75:34:9d:9e:de:1d:73:02:04:2a:
         6b:de:12:93:86:2e:06:da:db:a5:30:d0:96:5a:f7:3d:d6:22:
         2c:fc:3c:c7:09:a3:6c:5e:b0:c6:24:92:b7:e4:c7:4f:3c:3b:
         6d:76:a0:cb:ef:67:92:24:5b:3e:9a:78:0c:60:20:01:c4:37:
         4f:dd:e4:40:ad:ac:bb:13:8e:c6:68:fc:d0:8e:c0:6a:af:51:
         23:73:16:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:37:37 2025 by rpki-client