Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/9003b81d-d6dc-3a33-a6a2-99ade3a133b4.roa
File:                     9003b81d-d6dc-3a33-a6a2-99ade3a133b4.roa (raw, json)
Hash identifier:          sfe5v9RMlopFxOOWJYzLWHhqDBYQ8weVxXz0GH+dDFQ=
Subject key identifier:   39:14:80:31:53:3E:0E:78:CE:4F:C0:F7:7B:C2:44:69:58:DB:18:8A
Certificate issuer:       /CN=5d9aaf11-1c74-496e-99c6-6152cb292b86
Certificate serial:       010D0C9F43285845A15DFEAE63BE97DDDA365560
Authority key identifier: BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/9003b81d-d6dc-3a33-a6a2-99ade3a133b4.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     397423
IP address blocks:        45.59.160.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5d:fe:ae:63:be:97:dd:da:36:55:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9aaf11-1c74-496e-99c6-6152cb292b86
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=f2a7246c-f0ea-4b98-94e4-1aba150884b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:37:c3:f3:69:62:ec:70:fb:7f:61:1f:0b:22:
                    c3:ef:01:c9:40:9f:dd:d1:5b:fa:a5:80:39:56:c7:
                    6c:34:e6:ba:0e:9a:d8:9f:e1:09:1c:6c:4d:67:f4:
                    86:7b:e3:ed:47:94:d1:6f:e9:ae:0c:d3:52:c0:c8:
                    32:fc:6b:84:18:6e:eb:46:39:d8:88:3f:10:45:00:
                    84:45:74:12:c0:aa:ab:10:76:43:53:8d:0b:23:59:
                    fe:69:64:65:3e:d8:cb:d9:f1:55:7a:25:36:05:c5:
                    2d:95:74:1d:22:65:5f:64:03:20:23:22:a8:68:86:
                    8f:82:71:e6:70:27:b4:16:0e:b6:38:48:1f:7f:33:
                    3c:53:ca:ea:d8:d8:d3:2f:0f:a0:e4:35:cf:d1:18:
                    3d:36:44:04:5d:d8:d0:16:ec:65:11:a4:58:8e:b0:
                    12:bf:11:b5:65:0b:33:e3:de:91:61:59:5d:44:76:
                    ad:fa:62:bd:93:12:89:40:f3:fb:b9:fb:e1:8b:3c:
                    8b:c9:a1:61:1f:d5:30:d4:37:2f:d7:9b:b9:06:3c:
                    49:40:19:07:15:d3:dc:57:83:37:ea:27:5d:26:df:
                    b4:d0:47:df:82:61:b8:75:f9:5b:22:84:bc:f4:d1:
                    3d:db:f0:3e:84:8a:cf:b7:8e:8b:5a:0e:19:d5:72:
                    a5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:14:80:31:53:3E:0E:78:CE:4F:C0:F7:7B:C2:44:69:58:DB:18:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/9003b81d-d6dc-3a33-a6a2-99ade3a133b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl

            X509v3 Authority Key Identifier:
                keyid:BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:84:8e:d7:d8:cb:ad:b6:4e:73:9c:ac:40:a8:6c:23:ba:7f:
         bf:a4:1a:5e:0b:3a:bb:07:2b:37:d0:ce:06:27:c0:3a:59:6d:
         3d:e1:7e:76:2d:ef:c6:2e:66:0c:47:4c:2e:48:56:c3:99:00:
         36:e3:55:32:22:19:b6:d9:b3:d6:15:3e:dc:f5:04:7d:6a:d9:
         ec:75:99:e8:8a:dd:1d:d0:de:fd:ca:7a:f3:76:db:62:4d:cc:
         80:36:91:f9:74:9d:d2:ea:cd:60:ac:e0:ae:57:d7:a5:d6:fc:
         34:5a:a6:d3:65:bd:d5:2a:31:4a:9c:9e:6b:0d:29:d6:b7:7f:
         94:2c:60:c2:b9:f0:8c:e1:29:d9:14:a3:9d:2a:63:7d:ef:d2:
         bb:68:de:bb:ab:82:da:9f:86:b1:50:e1:d0:d1:87:88:a4:c7:
         8f:46:e8:79:90:2f:b6:0f:c4:b9:1a:ff:04:bf:53:74:8a:f9:
         32:ea:cf:72:71:57:96:ab:b4:f3:c8:28:82:f1:c7:9e:28:ab:
         58:9a:9a:7c:f3:ea:76:b9:2a:80:ca:09:e3:41:b9:ef:93:5b:
         86:45:9a:5d:a6:50:ff:e1:22:77:a4:f8:69:95:fa:19:b3:4c:
         98:d6:e1:d4:0d:95:48:87:4d:94:b8:a9:cb:cd:73:42:1f:a5:
         87:1f:e1:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 01:50:30 2024 by rpki-client on console-fra.rpki-client.org