Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/545d8570-0b9a-3651-acac-9995e4dc7d88.roa
File:                     545d8570-0b9a-3651-acac-9995e4dc7d88.roa (raw, json)
Hash identifier:          CXTORp1uhhgJm8b/O1Lo+WCNDTvYtn4jAwdWyUJKHEI=
Subject key identifier:   D0:2E:49:C2:23:59:68:DB:02:74:AE:4D:11:7B:F9:78:E2:A5:50:E2
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20B283CB36A16E6D61C8A80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/545d8570-0b9a-3651-acac-9995e4dc7d88.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        96.33.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0b:28:3c:b3:6a:16:e6:d6:1c:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=c5f3c172-58b3-4a83-910f-b01842a67410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:56:38:9f:0a:11:ea:8b:68:8b:80:e0:87:af:
                    e8:c8:78:cc:64:bd:32:83:91:97:82:f6:16:9b:de:
                    b8:68:cc:f3:21:33:6d:3f:96:07:ae:bd:97:d8:7e:
                    7a:2d:9a:e7:9b:45:51:41:78:d5:ca:04:b8:33:72:
                    8b:ae:37:d8:ea:ac:99:87:e3:26:b3:e1:f0:cc:54:
                    24:74:5e:06:a9:db:88:9d:3b:ac:b8:cc:b1:b8:e1:
                    5d:36:e2:d1:87:c3:25:0b:49:e3:2c:c6:ee:77:43:
                    61:dd:ac:c0:b6:84:d9:d3:91:63:ec:93:29:4a:39:
                    47:98:d4:f9:ce:09:9d:e4:5c:65:d3:12:25:72:5a:
                    72:c3:4b:ed:16:00:9a:99:91:a0:db:d3:f4:ed:e6:
                    d8:9d:9b:f0:f5:77:2e:32:f1:af:2b:bf:4b:35:e0:
                    31:c2:70:f1:ab:d3:33:7e:bd:b1:f4:05:7c:e8:4c:
                    e1:9e:65:31:24:65:db:7f:04:92:27:14:7f:6f:8d:
                    07:bf:b8:4f:60:f1:2e:98:cc:3e:e2:22:53:fb:e0:
                    94:3a:db:e9:eb:1e:57:a5:6c:48:42:f0:1e:30:9e:
                    6c:43:51:24:4e:54:db:32:88:ad:6c:a1:2b:69:d7:
                    d5:9a:a3:43:4e:d4:6e:41:5a:27:58:55:10:bc:b9:
                    c7:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:2E:49:C2:23:59:68:DB:02:74:AE:4D:11:7B:F9:78:E2:A5:50:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/545d8570-0b9a-3651-acac-9995e4dc7d88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.33.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:6a:cd:b4:2a:ed:a6:b2:f5:23:4d:e8:78:c2:3c:98:7c:30:
         0f:b9:ac:0f:47:ad:9b:da:a0:e9:57:b5:df:82:96:1a:f4:cc:
         71:71:f1:fb:13:7e:b7:67:f4:a7:11:4d:56:a0:0f:cc:2e:0b:
         f5:19:b1:90:eb:8f:52:cf:39:ec:bc:16:92:d9:03:1b:bf:2d:
         98:1a:a8:2d:93:94:8a:c2:ac:1d:22:25:56:49:27:f1:33:1d:
         5a:ce:b3:31:d7:10:43:b5:54:38:72:f8:32:e9:c5:08:60:d0:
         d0:af:60:08:a0:c2:22:89:41:ea:dc:3c:70:6d:db:5c:9a:7d:
         f8:23:a9:10:7a:96:af:2b:e0:bf:63:4d:07:4c:5d:dc:35:f9:
         0a:90:61:2b:fd:90:39:a3:d6:94:cf:13:36:45:32:3e:02:32:
         aa:17:e3:50:49:56:55:88:f8:3f:98:55:e2:f0:7d:78:34:32:
         77:db:8b:35:a9:4f:55:f1:35:4e:73:a5:eb:a8:03:df:f5:0d:
         20:f2:33:19:cb:95:c2:af:3a:65:08:a1:fd:f5:2d:e6:83:32:
         96:13:31:58:6b:29:33:f9:45:ab:bc:a8:49:89:0f:5d:98:2b:
         ff:c0:07:fd:a4:72:cc:b1:30:9e:6f:bf:c6:16:c6:92:1e:3b:
         aa:9f:ff:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:58:49 2025 by rpki-client