Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/c97cfd85-f6c2-37b6-832a-66719ff09d85.roa
File:                     c97cfd85-f6c2-37b6-832a-66719ff09d85.roa (raw, json)
Hash identifier:          DypTQZgtm4jbw1LkDny9k/NIfZeOdxe5jt8eO42NH8I=
Subject key identifier:   05:56:27:7D:A3:B8:9E:30:C3:E4:B6:7B:8E:DD:85:99:00:31:78:1F
Certificate issuer:       /CN=5742dde3-84a3-4488-a01c-525734c4d81b
Certificate serial:       010D0C9F432858478A78D3AA334FC3D70921DD00
Authority key identifier: 80:F4:AF:44:45:DA:5F:FA:59:CE:9C:A8:4F:96:82:FF:39:43:C6:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/c97cfd85-f6c2-37b6-832a-66719ff09d85.roa
Signing time:             Mon 14 Oct 2024 17:44:57 +0000
ROA not before:           Mon 14 Oct 2024 17:44:57 +0000
ROA not after:            Sun 12 Jan 2025 18:44:57 +0000
asID:                     399924
IP address blocks:        45.41.33.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/5742dde3-84a3-4488-a01c-525734c4d81b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/5742dde3-84a3-4488-a01c-525734c4d81b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Oct 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8a:78:d3:aa:33:4f:c3:d7:09:21:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5742dde3-84a3-4488-a01c-525734c4d81b
        Validity
            Not Before: Oct 14 17:44:57 2024 GMT
            Not After : Jan 12 18:44:57 2025 GMT
        Subject: CN=5fa6f65b-795a-4024-960f-1150370c6841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1b:91:54:32:4f:0c:04:85:e0:0d:1a:8f:2d:
                    de:97:6c:9d:8b:60:9a:80:9f:e2:0b:3f:a2:05:8e:
                    a9:b1:84:c9:c2:5c:5d:21:98:05:43:a0:64:23:84:
                    ad:cf:e2:73:8f:91:db:10:ae:72:d5:2d:c6:fb:58:
                    78:ce:f5:78:3e:0a:39:ba:11:e2:4a:aa:41:a3:62:
                    dc:98:bb:35:c3:8f:53:6f:20:0b:84:7d:1d:bb:ca:
                    de:e2:8e:c7:b8:6c:0d:0c:22:b3:0c:9d:54:b6:ec:
                    18:53:1b:ef:c3:40:db:c2:81:d5:df:ef:c8:83:e0:
                    c3:62:c2:67:a7:9d:c8:71:61:1a:27:36:c1:23:98:
                    fc:52:96:f3:a5:95:8c:e1:41:3e:1d:62:7d:51:f0:
                    c1:43:82:b2:67:a0:3b:2b:bc:c5:0d:74:80:50:1c:
                    b1:e9:85:e3:75:20:75:26:2e:b1:8b:bb:0d:c8:d1:
                    f1:6a:02:08:40:a6:54:e5:0d:34:c3:35:e4:06:89:
                    45:af:39:bc:93:d9:d9:7a:59:9c:45:2b:f7:2a:a8:
                    b4:bd:9e:89:0c:54:07:0f:58:7a:19:c7:ea:e6:c7:
                    4b:84:fd:06:3d:e6:70:99:66:f0:4c:2c:6d:d1:a6:
                    65:97:4c:49:46:3e:22:db:0a:c2:f2:35:17:46:d9:
                    0d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:56:27:7D:A3:B8:9E:30:C3:E4:B6:7B:8E:DD:85:99:00:31:78:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/c97cfd85-f6c2-37b6-832a-66719ff09d85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/5742dde3-84a3-4488-a01c-525734c4d81b.crl

            X509v3 Authority Key Identifier:
                keyid:80:F4:AF:44:45:DA:5F:FA:59:CE:9C:A8:4F:96:82:FF:39:43:C6:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.41.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:b7:18:6b:98:00:e2:13:99:cb:b0:0d:e1:56:d8:b2:95:f7:
         6e:b0:15:a5:0a:a7:0a:51:ae:d6:de:a0:42:75:84:62:29:36:
         ec:3c:aa:71:1c:ed:79:4b:a2:85:b3:1c:0e:02:ee:62:90:b3:
         b8:74:7d:bf:dd:9e:bc:7a:98:c3:3e:d6:11:60:e0:16:05:e2:
         0f:42:58:04:98:f2:cc:9d:58:09:bb:91:79:6c:03:ff:a1:7e:
         27:82:51:2c:8f:31:e7:92:1a:f5:18:4d:97:12:23:e6:fb:df:
         88:bb:90:a5:fd:93:a3:81:d3:1a:c3:3a:ff:ea:20:ef:29:9e:
         da:a9:eb:74:78:39:2a:47:da:d9:ca:4c:6a:1c:6f:cd:55:d2:
         f7:e8:fe:64:a0:44:8a:02:fe:e7:52:f0:ff:09:a0:37:29:fc:
         6b:e8:71:e2:1c:fb:0a:53:42:89:01:19:ef:98:c6:d8:32:df:
         33:ae:87:de:99:f8:b2:cd:7a:48:8f:d0:bc:f2:44:cf:49:1c:
         66:9c:1e:96:e4:f6:41:08:a3:57:68:1f:47:3d:ca:4a:44:5c:
         4f:4e:08:9d:30:51:0d:ae:57:7c:94:78:34:29:a9:35:05:03:
         b4:52:43:6f:26:b1:64:02:c9:ea:d7:46:f8:e0:cb:96:98:e3:
         db:9c:3c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 18:46:33 2024 by rpki-client on console-fra.rpki-client.org