Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9169bc31-6884-4381-b12c-1cc4d38ce1d1/2ebe7dc7-746b-335f-920f-8b8cf237b302.roa
File:                     2ebe7dc7-746b-335f-920f-8b8cf237b302.roa (raw, json)
Hash identifier:          NDZ5lp9fP98l6dFpXrscBPkI2kyBZNxQ05kms80EC/8=
Subject key identifier:   56:B7:28:3B:B2:00:C8:F8:A1:E3:B2:BB:40:87:F9:A2:C4:38:D2:DB
Certificate issuer:       /CN=9169bc31-6884-4381-b12c-1cc4d38ce1d1
Certificate serial:       010D0C9F432858460313FB9A13414A18EA56E050
Authority key identifier: 33:E0:96:67:97:F3:E8:D7:73:A3:F4:AD:37:FB:9A:19:7F:B9:D6:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9169bc31-6884-4381-b12c-1cc4d38ce1d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9169bc31-6884-4381-b12c-1cc4d38ce1d1/2ebe7dc7-746b-335f-920f-8b8cf237b302.roa
Signing time:             Mon 27 May 2024 13:00:34 +0000
ROA not before:           Mon 27 May 2024 13:00:34 +0000
ROA not after:            Sun 25 Aug 2024 13:00:34 +0000
asID:                     16612
IP address blocks:        45.59.48.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9169bc31-6884-4381-b12c-1cc4d38ce1d1/9169bc31-6884-4381-b12c-1cc4d38ce1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9169bc31-6884-4381-b12c-1cc4d38ce1d1/9169bc31-6884-4381-b12c-1cc4d38ce1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9169bc31-6884-4381-b12c-1cc4d38ce1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:03:13:fb:9a:13:41:4a:18:ea:56:e0:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9169bc31-6884-4381-b12c-1cc4d38ce1d1
        Validity
            Not Before: May 27 13:00:34 2024 GMT
            Not After : Aug 25 13:00:34 2024 GMT
        Subject: CN=fea7a2a6-3c9d-4a6f-b0ec-09bff6c85721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1e:26:a8:c8:1c:b0:c6:be:4c:cf:76:d1:80:
                    9c:b2:62:48:40:7c:7b:d8:95:90:99:c2:27:1c:ab:
                    52:ed:3b:1a:55:03:24:ba:fa:c3:34:27:48:a4:bb:
                    0c:cc:d9:f5:e4:bd:5e:b9:92:cf:22:4d:8c:65:5e:
                    9a:3c:ad:ae:c1:ff:c4:4b:c9:7b:26:24:76:24:13:
                    a0:b2:16:c8:62:1a:31:05:04:7b:e8:8b:d3:1f:7c:
                    24:50:72:56:50:53:3e:20:58:4f:8e:67:35:d3:8c:
                    60:5f:53:80:ee:13:d5:67:5d:c3:f7:a1:67:25:d9:
                    10:3b:58:02:9a:0c:3c:10:17:27:83:8a:e5:e3:f3:
                    37:00:24:de:62:cc:d0:15:ea:df:75:49:40:a4:54:
                    7d:ba:26:bc:cd:c9:26:08:48:be:85:af:ed:6a:ba:
                    40:33:49:a5:e2:0b:01:1b:0e:d3:49:57:4d:fe:ec:
                    88:9f:6b:82:b7:d5:b0:7b:6a:44:51:2d:91:22:a2:
                    30:33:0b:91:ef:75:b5:9b:a6:7b:27:4c:32:5b:7e:
                    a0:75:0a:0d:99:5d:7e:e1:04:6f:7a:f5:cc:2e:5b:
                    71:90:ad:b8:f4:c0:33:8a:3c:86:35:bb:d7:fe:3a:
                    2d:ac:cf:ac:12:b9:3a:cd:6e:6a:c6:fe:7a:72:bb:
                    62:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:B7:28:3B:B2:00:C8:F8:A1:E3:B2:BB:40:87:F9:A2:C4:38:D2:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9169bc31-6884-4381-b12c-1cc4d38ce1d1/2ebe7dc7-746b-335f-920f-8b8cf237b302.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9169bc31-6884-4381-b12c-1cc4d38ce1d1/9169bc31-6884-4381-b12c-1cc4d38ce1d1.crl

            X509v3 Authority Key Identifier:
                keyid:33:E0:96:67:97:F3:E8:D7:73:A3:F4:AD:37:FB:9A:19:7F:B9:D6:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9169bc31-6884-4381-b12c-1cc4d38ce1d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:6f:5f:ab:b2:8f:a6:5e:bb:ca:6b:aa:92:5e:da:63:d3:d2:
         63:f6:89:c7:73:00:c9:eb:1a:4e:58:6e:3a:2d:97:09:11:27:
         b4:11:84:56:3e:27:c2:05:38:8c:3c:4c:13:30:8d:7e:93:a0:
         23:9b:30:31:d4:ce:01:f0:28:ef:06:07:68:f5:12:b6:f1:05:
         8b:d4:ac:cf:3b:ac:77:b6:71:95:9a:dd:b3:1c:dc:bf:3f:ac:
         e2:b5:4e:98:4f:fd:75:77:67:77:e1:e8:24:c2:c4:42:38:fd:
         47:ca:98:3f:64:65:57:fe:4f:83:98:c5:cc:73:6f:5d:ec:36:
         bd:97:77:f3:46:fd:9f:e0:14:73:d6:2f:9d:85:49:5f:03:7b:
         85:b5:74:da:de:03:c8:07:3b:b1:db:ef:04:6d:48:65:f0:b3:
         54:7e:76:bd:ed:83:95:b6:f2:ed:19:b9:c2:17:73:a3:2f:50:
         d4:16:0a:91:50:6f:82:94:92:4e:5b:c0:8a:43:c5:68:77:4a:
         04:78:66:8c:5f:6d:fc:4e:1b:9c:8c:09:ab:14:d1:85:36:2d:
         95:29:8a:ba:1d:ad:43:c9:ef:a6:83:d8:21:a8:09:94:5e:d0:
         75:a8:59:45:7d:d5:6a:14:40:a0:9f:a3:ab:88:d5:27:e8:35:
         8e:e5:d4:98
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEYDE/uaE0FKGOpW4FAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTE2OWJjMzEtNjg4NC00MzgxLWIxMmMtMWNjNGQzOGNl
MWQxMB4XDTI0MDUyNzEzMDAzNFoXDTI0MDgyNTEzMDAzNFowLzEtMCsGA1UEAxMk
ZmVhN2EyYTYtM2M5ZC00YTZmLWIwZWMtMDliZmY2Yzg1NzIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwR4mqMgcsMa+TM920YCcsmJIQHx72JWQmcIn
HKtS7TsaVQMkuvrDNCdIpLsMzNn15L1euZLPIk2MZV6aPK2uwf/ES8l7JiR2JBOg
shbIYhoxBQR76IvTH3wkUHJWUFM+IFhPjmc104xgX1OA7hPVZ13D96FnJdkQO1gC
mgw8EBcng4rl4/M3ACTeYszQFerfdUlApFR9uia8zckmCEi+ha/tarpAM0ml4gsB
Gw7TSVdN/uyIn2uCt9Wwe2pEUS2RIqIwMwuR73W1m6Z7J0wyW36gdQoNmV1+4QRv
evXMLltxkK249MAzijyGNbvX/jotrM+sErk6zW5qxv56crtiHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFa3KDuyAMj4oeOyu0CH+aLEONLbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MTY5
YmMzMS02ODg0LTQzODEtYjEyYy0xY2M0ZDM4Y2UxZDEvMmViZTdkYzctNzQ2Yi0z
MzVmLTkyMGYtOGI4Y2YyMzdiMzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTE2OWJjMzEtNjg4NC00MzgxLWIx
MmMtMWNjNGQzOGNlMWQxLzkxNjliYzMxLTY4ODQtNDM4MS1iMTJjLTFjYzRkMzhj
ZTFkMS5jcmwwHwYDVR0jBBgwFoAUM+CWZ5fz6Ndzo/StN/uaGX+51o8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MTY5YmMzMS02ODg0LTQzODEtYjEyYy0xY2M0
ZDM4Y2UxZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELTswMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB9vX6uyj6Zeu8prqpJe2mPT0mP2icdzAMnrGk5YbjotlwkRJ7QRhFY+
J8IFOIw8TBMwjX6ToCObMDHUzgHwKO8GB2j1ErbxBYvUrM87rHe2cZWa3bMc3L8/
rOK1TphP/XV3Z3fh6CTCxEI4/UfKmD9kZVf+T4OYxcxzb13sNr2Xd/NG/Z/gFHPW
L52FSV8De4W1dNreA8gHO7Hb7wRtSGXws1R+dr3tg5W28u0ZucIXc6MvUNQWCpFQ
b4KUkk5bwIpDxWh3SgR4ZoxfbfxOG5yMCasU0YU2LZUpirodrUPJ76aD2CGoCZRe
0HWoWUV91WoUQKCfo6uI1SfoNY7l1Jg=
-----END CERTIFICATE-----
Generated at Sun Jun 2 21:00:17 2024 by rpki-client on console-fra.rpki-client.org