Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/fc17c0a8-f9bc-3c4b-871a-2a240934009e.roa
File:                     fc17c0a8-f9bc-3c4b-871a-2a240934009e.roa (raw, json)
Hash identifier:          Fqi6RioJOjNA9qVk+Q3hYQmHNLeV/kEYTekQNP53xms=
Subject key identifier:   B3:EA:C7:11:9B:BF:66:6F:44:6F:66:C3:CC:9B:CC:0A:C5:30:43:A0
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285845095570A4F2D83297DDBFC100
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/fc17c0a8-f9bc-3c4b-871a-2a240934009e.roa
Signing time:             Wed 28 Feb 2024 02:00:26 +0000
ROA not before:           Wed 28 Feb 2024 02:00:26 +0000
ROA not after:            Tue 28 May 2024 01:00:26 +0000
asID:                     29802
IP address blocks:        45.40.115.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:09:55:70:a4:f2:d8:32:97:dd:bf:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Feb 28 02:00:26 2024 GMT
            Not After : May 28 01:00:26 2024 GMT
        Subject: CN=0d545427-f5dc-4e71-bb32-007d7f4313dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c9:e5:61:8d:bd:8d:c6:4e:ab:fc:ed:db:db:
                    65:70:69:58:06:8f:d9:b3:72:52:41:fe:44:f0:ab:
                    00:fd:25:95:ab:93:92:4d:c3:5c:1d:28:26:ff:bd:
                    60:02:5b:a8:13:5f:ab:75:76:e4:97:a2:1b:96:38:
                    64:a4:b7:a5:7c:a8:7a:a4:39:c4:f6:7f:49:c0:07:
                    38:fd:df:d1:b5:b8:67:6f:a8:e8:6a:d2:c1:8d:c9:
                    78:f3:29:77:b8:81:d8:76:91:d4:2c:cd:bc:4e:03:
                    26:0a:80:db:ad:6c:24:80:80:15:e4:24:e0:77:cf:
                    11:7a:8d:d3:0b:2a:35:88:8d:9a:ea:4d:e9:cb:e0:
                    eb:4e:83:a3:47:ba:bb:9e:40:87:a3:a1:0b:05:ed:
                    15:ed:93:63:7c:eb:61:63:9f:f2:81:39:aa:6d:ff:
                    95:5e:10:f3:6c:83:96:9b:77:2b:48:b1:80:4f:d3:
                    90:c1:1c:90:5f:01:fe:35:5f:de:4b:7a:28:53:5a:
                    31:50:9a:5b:5c:93:52:83:78:ca:15:8b:63:3a:6f:
                    f5:d6:2a:4f:11:a8:05:88:b7:a5:35:03:40:08:ff:
                    0f:c1:66:e1:cb:bd:7a:a2:11:b3:cf:76:a1:9e:ae:
                    18:33:a2:47:3e:95:1f:70:35:5a:9c:c4:15:a8:b8:
                    d0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:EA:C7:11:9B:BF:66:6F:44:6F:66:C3:CC:9B:CC:0A:C5:30:43:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/fc17c0a8-f9bc-3c4b-871a-2a240934009e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.40.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:83:73:e0:e6:31:7f:1f:92:c1:d5:93:a7:fd:9c:5e:26:dc:
         3e:16:5e:d7:c2:1f:3d:7c:de:2f:bc:84:9c:4a:1b:1f:85:7a:
         42:f5:56:0f:0a:4e:ab:6f:7c:af:07:91:29:fa:fc:20:89:47:
         d2:74:b8:02:a6:4f:30:34:f5:3c:4d:cb:fe:c4:a4:5d:d0:e6:
         c6:fa:a7:90:37:b2:f8:59:04:10:e4:da:ac:7c:85:70:29:dd:
         e0:bf:bd:73:e7:49:53:1c:2a:b2:ff:d5:ee:43:93:bf:ac:95:
         f9:a5:bf:4f:51:dd:94:6a:f0:d6:70:51:12:2e:a1:9f:5d:20:
         81:35:4f:b2:d6:bb:f6:0d:04:56:b9:d1:31:f9:ff:1f:c4:52:
         ca:5a:b9:14:8f:68:42:7b:e5:ad:12:6b:65:54:db:9c:b0:17:
         83:a0:e6:60:1e:ce:27:e8:7c:c1:ff:82:4f:b7:03:95:21:0c:
         f0:59:b1:f7:2e:97:32:c5:6b:70:cf:1e:12:2b:02:2d:d4:1e:
         94:a6:f1:3b:73:5d:49:f6:47:c3:cf:12:35:9b:f9:30:09:c3:
         f8:8f:db:e4:63:f2:de:3e:96:0b:14:56:8c:e6:29:be:0d:97:
         ed:64:d1:28:11:36:02:51:1a:04:ad:80:f0:2f:64:fa:af:9a:
         bc:01:ec:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 07:39:41 2024 by rpki-client on console-fra.rpki-client.org