Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/25d04c7f-5d48-3add-b08a-ef43cdcfb32f.roa
File:                     25d04c7f-5d48-3add-b08a-ef43cdcfb32f.roa (raw, json)
Hash identifier:          cQuOHSB3WkZToq7cWpazMJ4R26uT9jXWHv5GODmkc1M=
Subject key identifier:   61:38:A9:D4:1B:20:5B:67:BB:A0:37:77:F7:AD:60:AD:1F:FA:FE:60
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F43285849849EF0EBCCE9C266BD1EA5C0
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/25d04c7f-5d48-3add-b08a-ef43cdcfb32f.roa
Signing time:             Mon 14 Apr 2025 01:00:43 +0000
ROA not before:           Mon 14 Apr 2025 01:00:43 +0000
ROA not after:            Sun 13 Jul 2025 01:00:43 +0000
asID:                     16591
IP address blocks:        45.56.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:84:9e:f0:eb:cc:e9:c2:66:bd:1e:a5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Apr 14 01:00:43 2025 GMT
            Not After : Jul 13 01:00:43 2025 GMT
        Subject: CN=01db64e8-42ef-4352-be1a-c19fc21cf76c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ab:3c:ce:8b:0f:cc:43:00:39:61:36:8d:0e:
                    e1:a1:48:3b:29:35:3f:38:a2:96:dc:13:3e:38:da:
                    f9:dc:95:b8:46:32:7b:d0:a6:f1:e7:5a:03:93:da:
                    c5:40:84:b2:fe:b4:be:5e:55:82:5e:e3:18:20:7e:
                    4e:ef:99:3f:b0:ff:1d:79:b6:53:7d:a6:e4:87:d4:
                    dd:40:32:fa:5e:41:7a:f5:f0:b7:69:49:c9:18:e9:
                    f8:18:c5:09:b5:7e:59:94:8c:7c:9c:d6:2b:ef:55:
                    bb:92:c3:0c:ef:5f:3d:a9:43:75:be:8e:ca:8c:82:
                    fe:8e:65:55:66:92:1f:2a:be:4e:cd:9f:6d:62:4d:
                    5f:fd:bd:39:84:14:72:35:5c:c4:af:91:3a:2b:53:
                    a2:48:cd:df:05:bd:af:43:48:44:24:78:06:48:fe:
                    ef:06:72:8f:9f:37:29:8d:eb:a2:47:11:31:fd:73:
                    00:40:ca:ed:de:73:8b:78:6b:37:0c:f9:ad:ee:34:
                    a8:05:97:5a:83:2b:be:88:a0:14:e8:25:6a:2f:5e:
                    d7:fe:20:d5:f8:49:a5:4b:bc:6e:5e:66:3a:91:f3:
                    24:e4:af:47:2c:9a:d5:1a:87:de:7c:90:d8:29:e7:
                    08:f6:77:da:bb:8b:c9:02:ac:7e:e0:35:be:62:12:
                    19:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:38:A9:D4:1B:20:5B:67:BB:A0:37:77:F7:AD:60:AD:1F:FA:FE:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/25d04c7f-5d48-3add-b08a-ef43cdcfb32f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.56.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:c9:58:6b:09:9b:e0:0e:63:f0:8b:3a:b0:1b:7b:41:ac:4e:
         3f:61:d1:03:f7:b5:c1:3e:e4:d0:5e:c7:d2:d6:44:7e:f7:e7:
         37:29:95:8d:b8:23:cd:9e:6c:29:0e:98:a1:15:36:6e:fa:31:
         18:0d:b7:40:19:76:d4:97:9a:d4:05:fe:0f:7d:a6:96:1b:82:
         91:f9:df:6c:40:e0:71:91:6c:93:e2:33:72:41:5a:6d:1e:cb:
         d7:e5:73:37:cb:95:64:75:59:e4:6b:73:47:c0:a3:99:ae:d9:
         67:92:c0:05:35:1d:f4:b2:6e:96:5e:b7:81:f5:03:b4:03:ec:
         0e:ac:3c:a8:99:7b:29:03:64:d8:a6:78:d4:88:d1:56:fa:8c:
         14:23:b7:5f:c6:19:cc:30:54:55:31:ba:91:5d:f4:cb:6e:fb:
         1a:ff:ff:91:24:46:74:5b:f6:5c:f0:d0:5b:72:a3:c4:a6:7b:
         74:ac:28:6a:ff:c0:59:a4:a8:32:e1:c0:6f:10:5e:96:59:0d:
         f3:ce:38:46:90:01:6e:74:36:09:53:85:4f:fb:5d:f4:5b:66:
         f9:dd:8c:0a:88:da:48:e8:83:b8:04:9d:ec:b1:2d:ea:91:f3:
         08:b5:b4:e9:67:15:69:57:c0:ed:79:88:45:7e:e7:30:28:64:
         d6:1c:6b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 20:36:01 2025 by rpki-client