Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/98db0440-90ac-3d89-bcd8-7014e4109a93.roa
File:                     98db0440-90ac-3d89-bcd8-7014e4109a93.roa (raw, json)
Hash identifier:          fhL2DfJOgk8IVKkwT5pq6qxqFD5HnfTiNQzbaN4JUhU=
Subject key identifier:   8A:5E:96:EB:0A:F9:04:6A:29:14:2D:46:52:6E:4B:6F:6B:45:A1:79
Certificate issuer:       /CN=52fbdac8-20c0-4da4-8654-27b4bf592930
Certificate serial:       010D0C9F432858453E42A01974CFCB405E0FA880
Authority key identifier: 83:F5:A6:59:FF:1E:96:96:C8:E5:B4:B9:DF:F6:3D:37:29:30:A4:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/98db0440-90ac-3d89-bcd8-7014e4109a93.roa
Signing time:             Mon 18 Mar 2024 01:00:25 +0000
ROA not before:           Mon 18 Mar 2024 01:00:25 +0000
ROA not after:            Sun 16 Jun 2024 01:00:25 +0000
asID:                     396982
IP address blocks:        45.45.253.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/52fbdac8-20c0-4da4-8654-27b4bf592930.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/52fbdac8-20c0-4da4-8654-27b4bf592930.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3e:42:a0:19:74:cf:cb:40:5e:0f:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52fbdac8-20c0-4da4-8654-27b4bf592930
        Validity
            Not Before: Mar 18 01:00:25 2024 GMT
            Not After : Jun 16 01:00:25 2024 GMT
        Subject: CN=0555f549-29fe-4964-b4b3-bda6d8a75e22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:a3:45:b0:07:86:7e:82:c8:ab:d9:d4:03:37:
                    b3:c3:f4:5b:3a:59:54:81:78:34:0a:b3:5f:c3:4a:
                    66:f5:01:ce:ec:0e:c8:f8:06:47:e1:10:4f:12:2d:
                    74:0b:09:2e:a2:d7:c9:ce:6e:1c:5b:c1:01:ce:c3:
                    10:3d:c4:52:df:e0:e3:74:95:2f:07:73:19:fa:15:
                    cb:fa:1a:09:88:64:ca:8d:cc:21:29:de:66:22:cd:
                    ad:c4:50:c1:20:f8:58:ed:92:eb:c5:7f:d0:f0:63:
                    e5:7f:a0:a4:67:74:76:9c:f8:7e:52:d0:78:be:77:
                    12:c3:95:39:17:46:96:ab:4f:05:42:75:1b:c1:8e:
                    5b:38:40:4e:a8:a6:e2:9b:c0:c6:4d:be:5c:e5:8b:
                    0a:e4:69:14:fa:0e:c8:38:ee:7f:61:91:f9:af:92:
                    9f:24:64:66:e7:f0:5b:9f:07:d7:53:bb:32:33:46:
                    b3:68:23:a1:da:16:66:ea:b1:ec:8f:fa:cf:ed:46:
                    42:b0:e5:15:a9:70:04:27:a8:7d:72:41:0e:6b:da:
                    64:07:17:26:72:09:21:e8:18:ab:91:28:d8:2f:a8:
                    8a:ed:3a:52:ef:32:53:5e:65:12:6c:f7:0c:84:0e:
                    74:8f:d5:6f:df:6d:41:15:d1:b3:6e:b5:55:b7:9f:
                    1c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:5E:96:EB:0A:F9:04:6A:29:14:2D:46:52:6E:4B:6F:6B:45:A1:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/98db0440-90ac-3d89-bcd8-7014e4109a93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/52fbdac8-20c0-4da4-8654-27b4bf592930.crl

            X509v3 Authority Key Identifier:
                keyid:83:F5:A6:59:FF:1E:96:96:C8:E5:B4:B9:DF:F6:3D:37:29:30:A4:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:62:30:fa:c0:24:80:19:fa:e7:53:b6:05:23:cb:7e:f5:70:
         a3:6c:7d:86:2f:3b:05:38:3c:5c:8f:1a:11:ec:34:22:43:d4:
         fc:02:6d:62:fa:c2:a0:fd:45:05:78:cb:78:99:f1:7c:44:8d:
         38:65:6b:53:aa:9a:b9:25:83:b0:73:35:eb:bd:74:68:fc:a8:
         0d:60:c3:06:77:ae:84:1a:51:3e:b4:b1:ce:e8:7e:8c:2c:77:
         a9:32:cb:38:4f:a8:11:af:3a:de:0a:28:7d:ee:52:06:ad:6c:
         93:6c:7b:62:3b:de:7a:51:5a:d7:bc:12:e3:9e:c3:7c:f0:87:
         26:48:e9:2a:6a:1f:a6:3a:6b:6f:38:3d:0c:03:01:ab:70:a2:
         d4:57:e2:2c:f0:a4:78:b2:da:48:f7:04:73:94:91:a1:df:33:
         51:9f:0f:51:b8:af:27:40:ee:e2:7f:f5:a2:e5:3f:7d:a5:79:
         53:84:7d:ef:d5:9b:87:86:de:13:c0:8c:79:6e:4a:20:af:a8:
         ad:15:2d:12:66:ba:9d:18:50:31:ca:3b:69:e6:b7:d8:93:c4:
         63:3b:a3:6d:54:b3:2f:b7:84:dc:68:08:c6:54:1c:be:13:f6:
         3c:35:b5:b4:bb:4f:65:96:8c:e3:1c:5f:ec:e7:8d:55:43:98:
         96:6e:21:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 21:21:12 2024 by rpki-client on console-ams.rpki-client.org