Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0675db59-b7a3-47ed-ae85-edcfb590155e/ca067487-2689-33f9-b6cf-e4e4b4b8d573.roa
File:                     ca067487-2689-33f9-b6cf-e4e4b4b8d573.roa (raw, json)
Hash identifier:          HQSljaob1umM+MDCxZZwzxAghAk94tb56ui3UtUVD4Y=
Subject key identifier:   75:6F:0A:9E:8D:C9:19:BB:02:E5:BD:B9:1C:1A:24:AA:40:92:6D:BF
Certificate issuer:       /CN=0675db59-b7a3-47ed-ae85-edcfb590155e
Certificate serial:       010D0C9F43285849B6DF5B14C61C141532E91240
Authority key identifier: D6:DD:50:92:34:CF:D1:3B:C7:4B:47:40:06:68:71:C3:2A:DE:A6:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0675db59-b7a3-47ed-ae85-edcfb590155e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0675db59-b7a3-47ed-ae85-edcfb590155e/ca067487-2689-33f9-b6cf-e4e4b4b8d573.roa
Signing time:             Fri 02 May 2025 01:00:47 +0000
ROA not before:           Fri 02 May 2025 01:00:47 +0000
ROA not after:            Thu 31 Jul 2025 01:00:47 +0000
asID:                     399866
IP address blocks:        45.45.193.0/24 maxlen: 24
                          2602:fc5d::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0675db59-b7a3-47ed-ae85-edcfb590155e/0675db59-b7a3-47ed-ae85-edcfb590155e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0675db59-b7a3-47ed-ae85-edcfb590155e/0675db59-b7a3-47ed-ae85-edcfb590155e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0675db59-b7a3-47ed-ae85-edcfb590155e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b6:df:5b:14:c6:1c:14:15:32:e9:12:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0675db59-b7a3-47ed-ae85-edcfb590155e
        Validity
            Not Before: May  2 01:00:47 2025 GMT
            Not After : Jul 31 01:00:47 2025 GMT
        Subject: CN=37d6b415-59e2-4cc0-a2e9-f3fc86e33375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:74:df:1d:5e:30:6f:b5:42:e9:da:80:aa:af:
                    41:da:f5:99:fa:35:b8:a8:65:44:2e:07:24:ad:ab:
                    15:90:6e:13:04:5d:b1:d8:65:ee:24:df:f4:9e:bf:
                    e8:64:7e:4e:8b:8f:ea:6a:b7:ba:5d:c0:6b:49:8c:
                    f2:f1:54:de:3d:7e:5c:67:ed:d5:7c:83:3f:4a:1d:
                    92:46:b7:7d:7d:90:9f:05:37:19:b3:b8:5d:81:15:
                    37:e7:b1:bb:3c:88:9f:82:35:37:59:e6:3e:49:5c:
                    4c:4d:aa:94:4d:71:24:19:18:7c:a2:91:a1:b6:e2:
                    41:f8:96:77:22:2a:8e:b9:fd:f5:db:36:6b:c3:d7:
                    e8:51:93:a7:62:3e:6a:d3:ec:60:28:21:46:d9:7a:
                    d6:cc:db:d0:79:08:44:db:6f:bf:85:52:6b:31:2a:
                    56:82:e5:7f:3a:91:80:ad:e7:0e:d7:45:dd:d2:18:
                    01:03:4f:ba:d0:6a:d3:23:e3:4e:02:f8:6e:12:0d:
                    b7:8a:70:e1:1a:ae:a1:55:f8:c3:85:66:94:88:cd:
                    76:2f:29:60:a2:db:1a:f6:5b:1e:98:88:e4:8a:92:
                    26:c0:86:1a:e3:c9:0f:fd:8e:e5:39:d7:cf:c1:a0:
                    17:c1:82:ac:c9:a4:f6:7c:9c:d1:a0:1f:f7:18:3f:
                    f4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:6F:0A:9E:8D:C9:19:BB:02:E5:BD:B9:1C:1A:24:AA:40:92:6D:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0675db59-b7a3-47ed-ae85-edcfb590155e/ca067487-2689-33f9-b6cf-e4e4b4b8d573.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0675db59-b7a3-47ed-ae85-edcfb590155e/0675db59-b7a3-47ed-ae85-edcfb590155e.crl

            X509v3 Authority Key Identifier:
                keyid:D6:DD:50:92:34:CF:D1:3B:C7:4B:47:40:06:68:71:C3:2A:DE:A6:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0675db59-b7a3-47ed-ae85-edcfb590155e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.193.0/24
                IPv6:
                  2602:fc5d::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:45:30:d9:73:6d:a6:01:85:89:2f:80:0e:55:b3:25:36:ea:
         e3:16:13:12:3c:14:c2:a8:6a:be:6a:a2:d3:31:0c:d6:77:55:
         c7:a6:61:d1:ee:3b:a2:1a:53:45:90:6b:0f:08:34:c9:14:f3:
         95:81:51:64:09:7b:d1:5f:7f:f0:96:aa:0a:d4:71:ca:c4:ab:
         87:43:1d:4d:d4:0c:f1:05:9b:c4:45:fe:ce:6c:84:14:d1:5f:
         f0:be:80:0c:6b:99:20:cf:11:c6:6c:29:29:6d:e9:27:d8:c6:
         d0:35:a9:9d:72:31:77:59:30:92:ba:af:8f:8a:3f:76:7b:be:
         48:73:29:73:45:84:82:8f:cc:a2:20:b1:df:e5:d6:7e:9f:d4:
         31:66:ff:00:52:1a:e4:a2:6a:5f:35:b3:60:09:93:0c:da:40:
         37:f6:95:7b:2f:64:a7:92:58:d6:e1:7a:4d:8a:90:31:87:80:
         34:33:37:98:68:ee:25:31:36:01:70:8d:c0:a0:67:bf:f3:5d:
         fb:a8:43:74:dc:95:29:48:a0:51:d8:8e:ec:1a:bf:a3:8c:a9:
         0c:4d:6c:3b:c6:c7:d9:23:2e:d0:ca:4e:db:55:90:59:f5:de:
         3e:3b:82:62:12:a4:e9:2d:fc:d1:43:79:e5:bf:38:78:4e:f6:
         66:16:bf:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:35:48 2025 by rpki-client