Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/8588dd05-14e8-33b4-a6f8-816574d0424a.roa
File:                     8588dd05-14e8-33b4-a6f8-816574d0424a.roa (raw, json)
Hash identifier:          EtekPS8pLfhK9DtBtI2qw/gwHQUD9RWImyPDD8LvsUw=
Subject key identifier:   03:05:D0:FF:E0:A8:15:50:89:C6:6F:F4:A8:50:76:0D:D2:B9:BF:4D
Certificate issuer:       /CN=22f3c152-12b6-441e-b4d6-66feab870c4d
Certificate serial:       010D0C9F4328584795168CEBCE8D15DE40691C80
Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/8588dd05-14e8-33b4-a6f8-816574d0424a.roa
Signing time:             Fri 18 Oct 2024 13:00:41 +0000
ROA not before:           Fri 18 Oct 2024 13:00:41 +0000
ROA not after:            Thu 16 Jan 2025 14:00:41 +0000
asID:                     394081
IP address blocks:        45.62.163.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:95:16:8c:eb:ce:8d:15:de:40:69:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d
        Validity
            Not Before: Oct 18 13:00:41 2024 GMT
            Not After : Jan 16 14:00:41 2025 GMT
        Subject: CN=2bb11632-e729-4ba1-a3b0-3efe9f30b87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:df:e0:37:e8:6b:a6:aa:47:b4:6e:3d:65:32:
                    83:e4:ab:5d:9e:58:0c:c1:40:11:70:b9:c2:a6:6a:
                    07:a7:b6:86:fd:65:d4:72:5c:72:9a:19:10:10:db:
                    5c:83:fe:dc:e9:69:9e:fd:97:f4:c8:cd:16:0d:b7:
                    83:7c:e7:0e:95:0f:f5:c8:9a:2c:36:cf:89:66:e1:
                    af:68:44:73:ff:0d:06:98:db:4a:ec:a1:f9:6c:c4:
                    f0:38:f9:06:92:22:25:34:54:c3:ec:9e:da:b9:34:
                    7c:1a:07:a3:dd:db:17:91:d1:4a:28:93:8f:c9:52:
                    8d:b5:c7:48:dc:28:b6:f7:b8:54:03:4a:69:59:94:
                    3f:82:4b:f0:96:d3:2f:dc:1d:b2:8c:e9:25:03:4a:
                    6e:1e:a8:a1:8e:07:84:b0:5e:d8:1c:cd:0f:b5:39:
                    bc:b2:a2:1f:e7:fe:b9:3e:bf:36:38:bf:fe:1a:45:
                    b7:19:97:e7:9f:7d:b9:48:05:9b:5e:91:31:99:11:
                    1a:34:56:16:1f:d6:dd:b8:42:d1:79:bc:1c:be:8b:
                    5b:56:ad:90:de:f4:09:ab:db:5e:2d:fe:b4:c1:66:
                    39:69:90:26:6a:0b:6a:a3:01:f7:51:27:73:53:5b:
                    f6:58:87:1c:a7:b8:01:59:02:24:89:8c:7e:6d:70:
                    0c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:05:D0:FF:E0:A8:15:50:89:C6:6F:F4:A8:50:76:0D:D2:B9:BF:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/8588dd05-14e8-33b4-a6f8-816574d0424a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl

            X509v3 Authority Key Identifier:
                keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.62.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:a2:f2:ee:8d:bf:b8:0a:a2:ac:ad:1a:dc:ae:f4:e3:6d:f3:
         31:32:a3:20:2f:93:14:eb:a6:4f:0c:e4:44:d2:f2:41:08:28:
         d6:26:49:c2:9d:b5:e1:a0:7a:a7:40:0c:23:47:1f:45:88:68:
         b3:51:66:5f:8b:69:f9:57:12:6c:74:6d:10:b7:d4:e4:30:5f:
         cb:cd:bb:a0:a6:1d:c2:ac:6c:b6:92:4d:06:a4:b4:97:a4:9c:
         e2:98:b8:3f:cf:6e:28:86:48:30:68:a8:b1:fa:c6:d6:2a:90:
         5f:d3:72:e4:21:b4:8e:20:43:19:8d:75:17:a1:85:25:be:e1:
         c0:05:10:79:1e:3a:bc:ee:c5:79:9a:20:4c:78:de:84:ea:39:
         31:a6:8b:15:fb:b4:f8:57:aa:b3:96:9f:84:df:35:f1:d7:21:
         b6:7d:2f:d0:59:00:dd:f7:0e:68:65:4b:4c:49:9b:12:d3:f1:
         50:c6:18:9f:15:eb:5d:aa:2c:42:24:b2:ce:84:a4:44:dc:08:
         1d:ff:5b:f6:91:6b:a2:38:cd:fa:1b:af:c1:3c:7b:1f:82:ad:
         35:1a:31:d7:e4:83:8b:a9:b0:30:46:07:16:f7:ee:5f:04:c3:
         96:ba:d3:2a:1c:31:dc:d6:5b:fe:43:fa:40:89:4d:1c:f3:47:
         93:02:b6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:00 2024 by rpki-client on console-fra.rpki-client.org