Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a7813c7-65af-4c6b-affc-323cd6e8e909/e7b08dbf-e8ba-3183-8ae5-6651fddc39c7.roa
File:                     e7b08dbf-e8ba-3183-8ae5-6651fddc39c7.roa (raw, json)
Hash identifier:          8UqfpQmvEhbcgZpqA4WFbJZpZ/ZBYm//5hmiOltsW6Q=
Subject key identifier:   72:DF:9C:A8:C8:41:69:89:75:ED:D8:DC:C5:62:5A:71:12:52:B0:D4
Certificate issuer:       /CN=2a7813c7-65af-4c6b-affc-323cd6e8e909
Certificate serial:       010D0C9F43285847537B7FA9BF3B9968BCA4CA00
Authority key identifier: 50:CB:EC:29:C1:E1:EE:E4:2C:53:5D:8A:99:90:53:8E:5B:0A:A9:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a7813c7-65af-4c6b-affc-323cd6e8e909.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a7813c7-65af-4c6b-affc-323cd6e8e909/e7b08dbf-e8ba-3183-8ae5-6651fddc39c7.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     33154
IP address blocks:        45.41.203.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a7813c7-65af-4c6b-affc-323cd6e8e909/2a7813c7-65af-4c6b-affc-323cd6e8e909.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a7813c7-65af-4c6b-affc-323cd6e8e909/2a7813c7-65af-4c6b-affc-323cd6e8e909.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a7813c7-65af-4c6b-affc-323cd6e8e909.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:7f:a9:bf:3b:99:68:bc:a4:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a7813c7-65af-4c6b-affc-323cd6e8e909
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=dfdf47ac-dc6f-4425-97da-002bb67c3a65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:01:25:95:99:91:61:50:88:ef:c9:0d:44:fb:
                    6b:9c:cc:f2:64:90:81:c7:1e:8f:2a:7c:bc:0a:8f:
                    02:cd:f8:de:d4:a1:83:e5:f3:af:60:9c:de:27:26:
                    23:b7:ea:1d:f4:44:6e:b4:f3:14:dc:3d:2e:3f:7a:
                    b3:94:50:03:85:c2:2e:64:67:9c:58:1a:ae:79:dc:
                    e6:65:56:9f:bd:a7:c6:66:cd:52:45:46:a4:54:45:
                    5f:44:f1:fa:e2:2f:ab:e0:fe:52:c8:11:d3:b3:ab:
                    d9:40:07:13:5c:52:c8:5a:19:32:3c:72:f2:1e:0f:
                    9c:d8:d4:4d:e8:c1:0a:97:b7:62:a0:24:96:06:78:
                    ca:06:21:7b:c0:f4:bb:0f:f5:82:5f:57:96:45:36:
                    79:44:aa:8e:f3:44:88:c9:c5:81:69:5f:3f:d1:f9:
                    26:69:fe:3e:51:ae:84:b6:eb:d8:43:d6:56:f7:33:
                    6c:27:83:f5:5a:1d:1a:59:eb:f1:3e:a2:7f:28:7e:
                    43:05:cf:26:2a:a4:8e:11:58:94:66:fb:4a:6b:74:
                    6f:9d:f2:86:0a:76:55:72:88:80:45:9f:c2:09:c1:
                    f0:09:8e:98:8c:b7:e0:7d:be:f6:1b:9c:3d:e4:d9:
                    0e:78:fc:a6:52:5b:a5:47:a4:c6:40:ca:86:01:7e:
                    1d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:DF:9C:A8:C8:41:69:89:75:ED:D8:DC:C5:62:5A:71:12:52:B0:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a7813c7-65af-4c6b-affc-323cd6e8e909/e7b08dbf-e8ba-3183-8ae5-6651fddc39c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a7813c7-65af-4c6b-affc-323cd6e8e909/2a7813c7-65af-4c6b-affc-323cd6e8e909.crl

            X509v3 Authority Key Identifier:
                keyid:50:CB:EC:29:C1:E1:EE:E4:2C:53:5D:8A:99:90:53:8E:5B:0A:A9:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a7813c7-65af-4c6b-affc-323cd6e8e909.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.41.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:25:36:e8:e0:8f:e4:45:26:2e:e0:71:e1:f6:a8:a1:83:2e:
         60:6e:d1:14:88:f2:59:de:45:b7:af:75:9a:72:0c:57:f5:b0:
         a6:14:6d:3e:c5:17:aa:55:40:66:45:91:a4:66:43:2e:94:4a:
         e1:c8:23:61:a6:f4:d1:f2:0b:63:13:8f:35:13:cb:32:5d:09:
         f2:1d:79:36:0a:7f:74:24:88:09:29:3d:cd:f9:c6:0f:64:5f:
         59:8f:24:49:9c:59:3f:0b:07:e2:b4:d4:74:fc:b1:ee:40:33:
         9a:2a:0d:34:28:e2:f2:a1:f7:7a:0d:71:16:02:dd:82:3b:50:
         cf:3c:ac:2f:46:f3:d5:b2:61:81:69:7d:28:bf:54:01:cd:64:
         ec:65:bd:b6:d7:aa:f2:27:ba:3e:2c:d7:58:c2:9d:10:6d:00:
         08:9f:e8:48:a2:8a:14:e3:8b:ec:84:2e:4c:85:a2:b8:7d:c5:
         ae:c1:b0:26:05:ed:89:4c:7a:34:80:ba:25:a3:18:5f:3c:0f:
         37:06:79:c3:1a:a3:48:01:fc:1c:46:dd:44:86:60:4c:46:41:
         0f:a3:aa:54:53:00:d8:48:01:17:cb:a7:e1:fd:ad:d9:e1:28:
         0b:f2:b0:6c:1e:ce:8c:af:d9:d6:4a:32:47:af:7e:15:b9:26:
         0d:dd:73:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:00 2024 by rpki-client on console-ams.rpki-client.org