Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/1ef1cfa5-f797-3fa1-a58c-e1647b4c340c.roa
File:                     1ef1cfa5-f797-3fa1-a58c-e1647b4c340c.roa (raw, json)
Hash identifier:          Blb+kBt1IK2j90eitx4vX6qhb1Tvx9ebGR6kl6NaNDk=
Subject key identifier:   E9:36:2D:60:4C:90:EE:31:2C:F7:E6:EB:57:A5:0C:68:A7:D1:B6:39
Certificate issuer:       /CN=45de47ca-0b52-44ab-af26-767d8a671192
Certificate serial:       010D0C9F43285849B9AA071C448A6EED5693A180
Authority key identifier: C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/1ef1cfa5-f797-3fa1-a58c-e1647b4c340c.roa
Signing time:             Sat 03 May 2025 01:00:47 +0000
ROA not before:           Sat 03 May 2025 01:00:47 +0000
ROA not after:            Fri 01 Aug 2025 01:00:47 +0000
asID:                     5645
IP address blocks:        69.196.128.0/18 maxlen: 18
                          69.196.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b9:aa:07:1c:44:8a:6e:ed:56:93:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45de47ca-0b52-44ab-af26-767d8a671192
        Validity
            Not Before: May  3 01:00:47 2025 GMT
            Not After : Aug  1 01:00:47 2025 GMT
        Subject: CN=b8759b1b-2dae-4837-bd47-4a200990c253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2a:54:bc:e4:62:a8:5a:3a:74:d1:24:4d:40:
                    a8:3b:e6:cb:66:a6:0f:31:be:0d:7c:cf:ec:70:af:
                    96:74:ed:2f:67:f2:1e:d6:92:72:4e:de:9b:df:9a:
                    79:7d:b3:66:47:37:20:c0:fa:b7:2c:6c:a2:d8:2c:
                    67:bc:fd:ac:1c:89:e5:f2:1f:7e:a7:17:a8:92:a5:
                    0d:22:a9:5d:c5:ef:4f:61:5a:26:72:4e:81:fe:7e:
                    bc:80:ca:1e:60:9c:5e:af:28:55:21:e9:45:73:a8:
                    2d:45:44:10:90:80:65:8e:99:11:72:3a:63:4e:52:
                    b7:b8:f8:c6:0d:02:9e:43:81:50:46:d3:af:65:04:
                    32:8d:8e:c7:49:94:38:2c:cf:38:8a:e2:00:b9:bf:
                    9d:f1:2e:8e:15:d8:c2:55:54:06:c7:03:a9:ec:c2:
                    1f:54:f4:4d:e1:5e:a2:5c:de:ab:ab:e7:c8:bc:ff:
                    3b:c2:f5:93:88:76:b9:f1:d4:69:f9:a9:2e:95:75:
                    dc:4f:34:1c:d0:47:0f:7b:66:d8:fa:e4:09:e7:61:
                    9f:8d:ba:35:4b:bd:17:a0:71:c9:0d:dd:38:95:1f:
                    2b:5e:ec:67:02:5f:ab:73:74:63:73:51:cb:58:4f:
                    20:14:51:b7:4d:be:aa:36:89:94:6c:d2:ff:e8:c2:
                    0d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:36:2D:60:4C:90:EE:31:2C:F7:E6:EB:57:A5:0C:68:A7:D1:B6:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/1ef1cfa5-f797-3fa1-a58c-e1647b4c340c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl

            X509v3 Authority Key Identifier:
                keyid:C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.196.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:0d:e3:79:c9:d7:55:43:32:43:8f:04:a2:b3:26:d2:cf:a2:
         1b:8d:44:71:f7:ea:4a:c5:90:3b:3f:85:d5:7e:2b:c4:dd:2b:
         c7:e6:c0:64:97:a6:be:df:1e:1a:e9:4d:b5:98:23:73:16:b6:
         09:8c:c3:5f:d1:30:e0:4c:37:59:cc:9d:18:3d:12:68:f5:55:
         cd:aa:e5:4b:53:04:8b:85:4a:51:cc:bc:5c:57:3d:f3:bc:de:
         31:f3:08:87:4e:af:33:fc:d6:da:72:d8:29:8c:26:0e:11:34:
         51:a3:32:b0:6e:e4:6e:93:25:1f:9a:be:8e:60:92:b3:31:63:
         98:c7:c5:33:b3:4b:ee:99:55:bc:09:94:68:b4:37:93:6c:32:
         b9:79:a9:cd:fa:30:91:56:37:5f:97:bc:a9:58:f0:ba:dc:ab:
         21:36:87:63:82:d0:ca:4b:f3:9a:ce:02:29:92:f4:49:f0:14:
         71:ca:9c:87:3e:7a:6e:2e:aa:53:91:1d:e7:7c:c1:00:ef:40:
         d3:aa:01:b2:91:48:53:23:6b:01:9a:20:13:68:9a:ea:b2:20:
         d0:74:0f:64:e4:68:85:85:55:7d:3d:15:2f:d9:e2:08:0b:4c:
         1f:07:05:01:52:93:fc:e7:0b:ae:a0:5c:ca:31:8f:d1:a9:71:
         c2:d8:f3:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 14:24:01 2025 by rpki-client