Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/53009550-1451-3677-ae05-9e5e5e0b9c09.roa
File:                     53009550-1451-3677-ae05-9e5e5e0b9c09.roa (raw, json)
Hash identifier:          M82yu8MTPuGvKHpUdqhMnq0Kn46HvYexcRFh33qttNE=
Subject key identifier:   CC:94:48:69:32:AF:36:07:3A:85:CE:DF:9B:77:4E:6E:37:34:D7:60
Certificate issuer:       /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Certificate serial:       010D0C9F432858454272C37C027917DA9D627640
Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/53009550-1451-3677-ae05-9e5e5e0b9c09.roa
Signing time:             Tue 19 Mar 2024 13:00:34 +0000
ROA not before:           Tue 19 Mar 2024 13:00:34 +0000
ROA not after:            Mon 17 Jun 2024 13:00:34 +0000
asID:                     3257
IP address blocks:        45.56.195.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:42:72:c3:7c:02:79:17:da:9d:62:76:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
        Validity
            Not Before: Mar 19 13:00:34 2024 GMT
            Not After : Jun 17 13:00:34 2024 GMT
        Subject: CN=95a6e4ba-7282-4a53-bd36-66ef87e97bd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:e2:bc:11:db:89:ce:44:65:e3:78:c8:ef:af:
                    2c:01:4e:4d:ef:e4:75:fe:77:31:71:4f:15:00:e5:
                    1d:07:81:7f:f8:d9:c5:d5:f7:93:00:06:ea:f1:f6:
                    79:d4:ec:58:7e:34:25:a9:e0:61:56:38:3a:63:4b:
                    9a:3c:c8:63:0d:c7:d9:26:bc:10:85:26:2f:27:44:
                    d1:3a:9b:b9:f0:35:dc:67:70:c6:dd:dd:91:44:e0:
                    50:8e:76:53:94:ad:e3:15:1a:d4:bc:a0:17:08:5b:
                    3c:11:c9:2b:11:2c:60:b4:61:44:cf:b7:6c:7c:59:
                    17:98:37:1e:86:52:a3:b1:77:3f:b3:74:9e:b7:9e:
                    46:98:c2:b9:0a:38:08:15:f0:df:ed:95:5d:02:01:
                    90:ab:a7:36:3b:f9:fb:28:99:d6:b6:15:cb:87:1a:
                    e1:5c:99:8e:0e:29:7f:3e:40:e7:85:97:7c:b3:e8:
                    f7:5c:67:97:7b:7f:10:14:b7:09:81:91:5c:a5:ca:
                    0b:d0:31:10:0a:6f:ec:49:2e:71:d3:2b:48:a1:54:
                    80:75:4e:51:7e:23:b4:40:77:62:1f:55:6b:7d:70:
                    14:ec:93:34:57:70:91:ff:eb:c4:9d:64:1d:18:90:
                    b2:69:e7:22:fc:9f:f7:19:24:d4:4b:c0:5d:a0:fe:
                    7a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:94:48:69:32:AF:36:07:3A:85:CE:DF:9B:77:4E:6E:37:34:D7:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/53009550-1451-3677-ae05-9e5e5e0b9c09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl

            X509v3 Authority Key Identifier:
                keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.56.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:80:39:7a:d0:88:10:aa:68:9f:61:7c:db:58:a2:54:48:a5:
         00:a9:6f:63:c0:bb:3d:67:1a:2a:28:62:f7:13:e2:31:58:07:
         53:27:9c:7c:b7:b6:2b:6d:2d:25:5c:5a:34:f6:1c:02:b1:13:
         b4:c6:8e:4c:75:60:a7:1e:0b:8b:5e:06:22:dc:0d:4d:1e:8d:
         29:54:22:d1:7b:b2:a8:ee:e9:8b:46:80:72:8f:6d:aa:95:b7:
         9f:b1:7e:df:76:94:5d:10:cf:30:79:9d:35:ef:8f:3f:9b:c3:
         99:42:97:9f:1f:53:2d:53:18:14:d9:4f:6f:42:ca:76:d9:c3:
         c8:87:62:5c:33:c6:f4:d5:7d:9d:b0:29:2e:44:d3:36:63:c4:
         18:b7:0f:cb:02:83:25:9a:27:e4:2b:47:e3:6e:e2:83:64:6f:
         88:30:1b:0d:e0:0e:8d:92:1c:c0:f9:db:de:7f:df:2a:bc:b6:
         97:4c:ca:b3:3a:bb:4e:9f:6e:a9:43:50:c6:3c:3b:07:b3:37:
         fa:cc:93:b9:f2:e6:26:d7:07:eb:14:98:68:26:b0:ba:a6:71:
         f1:60:68:7c:81:a7:17:53:52:39:17:f7:db:73:df:e4:e1:81:
         58:a3:16:14:f7:d4:5d:b6:db:a2:83:07:6e:38:a6:a5:bb:76:
         fa:24:4a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:02:14 2024 by rpki-client on console-fra.rpki-client.org