Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c/86320344-199c-34f9-ac8c-4d438fd5cfbc.roa
File:                     86320344-199c-34f9-ac8c-4d438fd5cfbc.roa (raw, json)
Hash identifier:          3toYc58tXl2eoC4WpL5j719A7EvFmDySDmxt3RQYjKQ=
Subject key identifier:   37:26:E5:16:0A:EA:21:8B:B4:4B:50:E5:8B:D1:6C:0D:ED:72:87:C2
Certificate issuer:       /CN=492092dd-7457-4265-80ee-c447496a414c
Certificate serial:       010D0C9F4328584A3E45ACDBA494AD3138C4E380
Authority key identifier: E7:69:F7:DB:81:66:7D:9D:CB:93:E9:EC:D1:71:7D:EB:3A:C5:0C:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c/86320344-199c-34f9-ac8c-4d438fd5cfbc.roa
Signing time:             Thu 19 Jun 2025 13:01:02 +0000
ROA not before:           Thu 19 Jun 2025 13:01:02 +0000
ROA not after:            Wed 17 Sep 2025 13:01:02 +0000
asID:                     1003
IP address blocks:        45.41.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c/492092dd-7457-4265-80ee-c447496a414c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c/492092dd-7457-4265-80ee-c447496a414c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:45:ac:db:a4:94:ad:31:38:c4:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=492092dd-7457-4265-80ee-c447496a414c
        Validity
            Not Before: Jun 19 13:01:02 2025 GMT
            Not After : Sep 17 13:01:02 2025 GMT
        Subject: CN=aafa0094-435e-4dc1-812a-6a841678ee70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:be:fe:2e:82:be:5a:c1:1c:49:d9:97:73:f8:
                    1f:3b:e1:e2:09:3b:60:45:69:43:ec:1c:42:8c:95:
                    46:36:02:0b:a4:f0:68:a4:1e:2d:3d:91:45:05:6c:
                    48:06:39:3c:74:9c:fa:b6:e9:04:ee:8f:eb:80:54:
                    9a:21:a7:9d:40:d0:29:a3:2a:a2:39:88:63:ca:c9:
                    3c:28:10:aa:a8:e2:e7:85:8f:e8:c9:a3:a7:73:35:
                    17:fc:60:63:1d:28:35:b8:f0:c2:b5:96:b6:f7:2f:
                    7c:a9:af:3c:d1:95:5d:c6:79:90:45:c9:06:62:80:
                    62:82:73:68:b8:2d:7b:cc:e4:ba:1c:4c:d4:ee:07:
                    55:6e:b2:87:c3:de:17:cb:24:bf:10:71:07:c6:32:
                    83:4e:3b:b0:35:e9:a5:15:a0:ea:77:82:07:b7:7c:
                    5a:ec:02:53:4d:1c:ea:60:e8:4e:df:ae:c7:c6:7a:
                    f8:68:fb:48:1f:72:63:5b:01:73:86:23:74:33:d3:
                    90:00:29:d0:39:66:c4:8c:fb:82:82:90:84:22:6d:
                    29:6c:de:0a:b2:02:a8:a4:c2:b4:4d:a4:8b:92:73:
                    e5:b8:65:a6:31:dc:14:3f:5f:61:97:5a:48:8f:96:
                    ef:b1:d2:78:11:c0:d3:44:94:14:f8:ab:cd:c7:e8:
                    18:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:26:E5:16:0A:EA:21:8B:B4:4B:50:E5:8B:D1:6C:0D:ED:72:87:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c/86320344-199c-34f9-ac8c-4d438fd5cfbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c/492092dd-7457-4265-80ee-c447496a414c.crl

            X509v3 Authority Key Identifier:
                keyid:E7:69:F7:DB:81:66:7D:9D:CB:93:E9:EC:D1:71:7D:EB:3A:C5:0C:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.41.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:2e:54:fe:2e:5c:bf:d4:44:ff:1b:4d:bb:67:d6:ef:61:80:
         9b:f5:0f:c5:11:76:df:11:65:82:b2:c1:af:a9:4f:de:d6:13:
         1c:63:65:78:46:7a:64:9f:03:cd:a3:14:14:d2:77:a0:01:38:
         df:7f:0a:81:35:6e:0f:5c:64:e2:5e:d0:13:25:ba:c3:02:22:
         cd:85:a5:bc:3a:01:0d:18:c6:8d:ba:99:b6:39:64:8e:9e:88:
         b7:f5:31:f6:3e:2a:a4:ff:10:cf:9a:bf:ee:29:73:dd:51:5f:
         9f:eb:fe:c8:84:6a:77:26:71:fe:22:8a:c6:a4:85:02:9f:9a:
         35:b8:22:53:79:e4:92:2e:96:71:7d:56:18:40:8e:cf:3c:0c:
         f0:5a:5a:6e:ee:cd:e9:fe:33:ab:ee:21:85:36:09:54:c1:8a:
         c5:23:76:0e:11:68:1a:b1:97:35:12:fa:03:7a:c4:d7:81:21:
         61:71:f0:9a:a7:68:3c:ad:d1:6b:18:e1:4b:39:99:fa:32:38:
         64:5f:25:e1:04:36:82:3d:4b:d3:57:b5:7b:19:32:a2:d0:b9:
         38:38:72:27:a0:98:ac:53:6a:0d:16:0a:38:05:a1:aa:21:4c:
         7f:cc:d6:79:7d:e4:70:6e:00:f7:cd:f7:9b:37:45:16:06:fb:
         fc:3d:44:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:21:09 2025 by rpki-client