Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/1c87c1c9-331a-3524-9f44-1bc4e33059d8.roa
File:                     1c87c1c9-331a-3524-9f44-1bc4e33059d8.roa (raw, json)
Hash identifier:          2keBR1wXmiU+gNXLLRMPip7B3tuQRm2TznY7BApYFLk=
Subject key identifier:   58:18:45:6A:E1:9D:57:B0:44:5B:A2:15:89:65:65:2E:A8:95:0A:6D
Certificate issuer:       /CN=af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3
Certificate serial:       010D0C9F43285849C0A4E90EC09973C98790DCC0
Authority key identifier: B2:BB:D7:45:02:8D:36:D6:C2:33:7F:4D:48:8C:43:47:21:60:07:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/1c87c1c9-331a-3524-9f44-1bc4e33059d8.roa
Signing time:             Mon 05 May 2025 13:01:00 +0000
ROA not before:           Mon 05 May 2025 13:01:00 +0000
ROA not after:            Sun 03 Aug 2025 13:01:00 +0000
asID:                     1011
IP address blocks:        45.45.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c0:a4:e9:0e:c0:99:73:c9:87:90:dc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3
        Validity
            Not Before: May  5 13:01:00 2025 GMT
            Not After : Aug  3 13:01:00 2025 GMT
        Subject: CN=ec3d7c11-3aba-4d7c-8b4d-e963bd334a3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:92:9f:5e:5a:19:75:63:62:67:24:b4:96:ad:
                    bd:63:0d:1c:97:f6:88:8b:f7:68:78:ee:68:14:59:
                    44:73:c3:f6:d0:41:0d:9b:82:0c:bd:a1:77:99:66:
                    d1:0b:d2:43:69:8e:dc:5f:de:e3:cb:8c:da:c9:c3:
                    9f:59:de:68:4e:05:e4:73:d9:78:9b:06:44:79:1d:
                    94:7c:18:25:63:79:97:6f:e0:b6:76:a2:14:5d:7f:
                    9e:68:18:16:7d:55:a0:59:a6:05:49:05:a6:d4:b1:
                    f7:84:b3:4b:08:46:c3:6f:50:04:c5:55:e4:3f:71:
                    a9:4e:2d:bf:fe:7d:78:52:99:86:2a:93:0d:d7:87:
                    3a:7f:8c:7c:f1:a2:c0:65:67:1c:b6:98:0a:bc:d8:
                    66:ad:df:4f:ee:2a:56:8f:92:b3:76:00:66:e6:4c:
                    94:1d:8a:da:c6:2b:3a:c9:9c:09:df:f5:e4:1e:90:
                    8b:8c:14:86:ef:2b:ce:9f:92:b5:31:59:74:8e:3e:
                    1a:05:21:80:62:50:e5:70:e2:31:09:4c:8a:ac:fa:
                    3a:b0:8f:17:06:31:bc:e9:72:f6:6f:79:57:01:13:
                    51:d7:ab:e6:ae:71:61:9f:29:8e:24:4d:01:fc:a5:
                    02:9a:77:82:fc:fc:94:9c:9c:30:5b:1c:22:19:b9:
                    ca:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:18:45:6A:E1:9D:57:B0:44:5B:A2:15:89:65:65:2E:A8:95:0A:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/1c87c1c9-331a-3524-9f44-1bc4e33059d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.crl

            X509v3 Authority Key Identifier:
                keyid:B2:BB:D7:45:02:8D:36:D6:C2:33:7F:4D:48:8C:43:47:21:60:07:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:c4:61:19:76:9a:ae:d3:f4:1b:b4:fb:3f:f1:93:7f:59:89:
         b9:be:92:4a:fb:92:26:5a:8d:c3:42:83:b7:41:c7:f1:68:bc:
         34:39:8b:c8:f1:51:4a:f3:5a:71:ad:bf:5c:30:80:2f:c4:22:
         5f:d3:06:ab:d2:eb:87:dd:84:27:8b:9c:ac:d9:f1:ef:fb:d4:
         4a:5f:fd:37:dd:03:19:b0:6e:22:8b:43:be:c4:05:af:a5:93:
         d0:f2:bb:42:50:7a:5a:ac:a7:1c:80:6f:d9:d5:b6:6c:78:5f:
         fc:08:ae:18:7e:0c:de:58:3a:c5:e7:6f:66:92:ef:74:2d:38:
         bb:90:1a:c9:6b:67:c7:f0:1a:88:61:d7:63:80:54:bc:74:c1:
         53:4e:f0:ed:25:3b:d3:74:48:ff:d9:0f:47:05:cb:66:f4:a0:
         49:79:50:46:0c:23:99:de:90:6c:1f:d8:c7:70:95:2f:65:3b:
         c8:c8:13:64:8a:3c:05:11:94:84:ba:b1:9f:2d:a2:1d:eb:8d:
         9a:63:fe:14:64:3b:e5:4c:98:02:08:3e:84:d3:32:83:8f:e4:
         15:d1:38:46:22:80:b9:b1:be:a8:ca:52:8a:60:04:64:d0:66:
         60:ef:86:a4:f7:0a:3e:32:8c:54:1b:ae:03:04:a1:a8:e3:a2:
         5b:49:3c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 14:32:48 2025 by rpki-client