Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f5274a63-2be0-3192-95a8-a67e7c9e0435.roa
File:                     f5274a63-2be0-3192-95a8-a67e7c9e0435.roa (raw, json)
Hash identifier:          BvJWR0JsV4hwFGX3MNDpBdIC1TLfVH/DcUAoTwvFppA=
Subject key identifier:   3C:D9:88:E7:64:C1:91:D1:A8:7D:F9:96:A5:64:F1:F5:91:F1:3B:02
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285845C873ADD71401E263B0099CC8
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f5274a63-2be0-3192-95a8-a67e7c9e0435.roa
Signing time:             Mon 06 May 2024 13:00:34 +0000
ROA not before:           Mon 06 May 2024 13:00:34 +0000
ROA not after:            Sun 04 Aug 2024 13:00:34 +0000
asID:                     210542
IP address blocks:        45.39.70.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c8:73:ad:d7:14:01:e2:63:b0:09:9c:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May  6 13:00:34 2024 GMT
            Not After : Aug  4 13:00:34 2024 GMT
        Subject: CN=5b0aa3cb-5075-45fe-a5cb-e37d579dfaa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c8:ec:3e:b3:eb:e2:ea:c0:dd:db:d4:bb:20:
                    3f:9c:3a:50:28:de:ac:4d:53:82:9c:fb:c5:c0:88:
                    c2:1c:3a:f7:a2:cd:d7:56:99:91:0d:8d:0a:f0:f5:
                    11:08:d2:b6:20:cd:af:11:13:78:c3:db:9e:e4:53:
                    ad:ea:cd:b2:62:c1:36:d3:df:f7:f0:12:4a:6a:86:
                    e6:4f:f6:91:c9:c3:cb:b0:66:fe:df:6e:de:5f:c2:
                    9d:bc:cb:d4:1a:6c:f9:f2:27:c5:c1:89:0e:63:3a:
                    a7:cd:04:54:54:4f:7a:e5:19:3b:a8:e4:b9:2e:3d:
                    35:b8:d4:e3:0b:55:14:29:29:dc:bd:6b:df:63:70:
                    8f:7a:c0:a4:93:04:15:36:c3:b4:28:e2:47:72:b8:
                    0b:d3:da:f5:8f:b6:f9:d8:e1:a3:04:db:c9:15:ee:
                    30:b0:28:3e:03:52:f1:06:4c:da:91:f1:c9:6f:97:
                    62:00:e8:9b:86:52:23:81:32:01:c4:c9:ed:f2:a1:
                    75:72:60:25:62:cd:82:c3:c6:57:d8:dd:ed:f9:c4:
                    29:cd:7c:13:00:06:69:59:fe:2d:93:dc:61:53:da:
                    2a:d7:bf:1f:27:df:2e:12:d9:11:3a:a5:92:73:c4:
                    e5:92:6a:4c:17:76:8b:db:1f:f2:a6:38:23:fc:fa:
                    4b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:D9:88:E7:64:C1:91:D1:A8:7D:F9:96:A5:64:F1:F5:91:F1:3B:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f5274a63-2be0-3192-95a8-a67e7c9e0435.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.70.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:30:e3:92:90:ac:cb:09:d2:7d:ce:4a:b8:59:56:54:8d:73:
         11:c3:cb:08:c7:34:8b:2b:9d:c1:97:7f:2c:36:3d:6c:f4:d1:
         98:11:87:22:62:e9:f8:83:2e:b7:b4:10:e0:d9:e7:35:b2:88:
         48:19:36:1f:62:9d:30:24:de:6b:3f:e5:a9:7e:23:5d:63:56:
         06:fa:b6:4d:06:b8:50:ff:98:97:e3:58:8b:ac:c6:be:7b:b8:
         2c:08:61:67:dc:92:48:43:d8:38:23:bf:f8:be:16:f6:a8:6e:
         6b:77:6e:4e:0b:68:52:d8:9a:0a:bc:17:4e:a2:77:84:aa:24:
         a1:f9:9a:78:50:33:fb:a3:a9:0e:3e:67:a1:64:a6:31:65:59:
         f4:1c:c9:f9:60:ed:41:66:e5:b2:40:6f:b7:c1:6d:38:ad:fb:
         62:3d:cb:d9:f5:fa:97:05:68:1d:a9:cb:4f:23:26:7b:c4:b7:
         f4:4a:dc:29:8f:88:34:fa:85:54:3b:c5:ee:12:80:bb:aa:78:
         15:d3:8e:2a:b0:42:27:b2:3a:9a:9a:53:1a:ac:d8:f0:45:45:
         36:4d:2e:ad:9b:44:8f:4a:56:80:f3:5d:4b:ed:58:3e:90:5b:
         8f:19:03:74:06:f9:12:17:11:50:1e:35:b3:f9:12:9c:1c:a2:
         18:a4:06:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 20:16:53 2024 by rpki-client on console-ams.rpki-client.org