Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dbd6bd60-20b4-40eb-8504-81745a54a188/ad9bf542-20c9-3fc5-906d-19ac1d52975b.roa
File:                     ad9bf542-20c9-3fc5-906d-19ac1d52975b.roa (raw, json)
Hash identifier:          kaQRmAxd5Pl98PYhr7YsQGbufhjmyTNuT1YVed9L4C0=
Subject key identifier:   C6:25:0B:02:25:E1:34:C0:B1:44:D9:0B:00:15:50:5D:3E:CA:0F:32
Certificate issuer:       /CN=dbd6bd60-20b4-40eb-8504-81745a54a188
Certificate serial:       010D0C9F432858479AABEB0E040227811455A800
Authority key identifier: FD:EC:4C:94:07:B1:6F:EB:08:EE:BE:DF:60:11:7C:6C:80:39:A0:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dbd6bd60-20b4-40eb-8504-81745a54a188.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dbd6bd60-20b4-40eb-8504-81745a54a188/ad9bf542-20c9-3fc5-906d-19ac1d52975b.roa
Signing time:             Sun 20 Oct 2024 13:00:42 +0000
ROA not before:           Sun 20 Oct 2024 13:00:42 +0000
ROA not after:            Sat 18 Jan 2025 14:00:42 +0000
asID:                     20454
IP address blocks:        45.62.152.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dbd6bd60-20b4-40eb-8504-81745a54a188/dbd6bd60-20b4-40eb-8504-81745a54a188.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dbd6bd60-20b4-40eb-8504-81745a54a188/dbd6bd60-20b4-40eb-8504-81745a54a188.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dbd6bd60-20b4-40eb-8504-81745a54a188.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9a:ab:eb:0e:04:02:27:81:14:55:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbd6bd60-20b4-40eb-8504-81745a54a188
        Validity
            Not Before: Oct 20 13:00:42 2024 GMT
            Not After : Jan 18 14:00:42 2025 GMT
        Subject: CN=d74dfc92-2b09-4925-a481-2e933b3fcc0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cf:aa:9b:60:bf:06:6f:64:44:03:17:f8:2d:
                    da:94:a2:bb:e7:6f:37:3f:ed:15:15:84:d9:6a:4d:
                    30:31:aa:92:a4:0b:14:91:b9:a7:da:e1:8f:2f:55:
                    8d:10:47:54:8f:39:e9:bd:70:e7:c9:54:7b:eb:0e:
                    3b:b4:24:fa:6b:38:fb:b6:f2:68:9b:80:67:3d:35:
                    ac:ee:31:de:c0:a0:35:15:bb:f9:e4:66:5c:02:bd:
                    93:45:b7:95:f6:ed:d2:69:8a:c8:2a:72:b9:90:fc:
                    bd:1f:23:19:dc:c1:fb:2f:ee:41:40:eb:bd:e6:6c:
                    0b:16:9d:69:84:ad:24:1b:d2:d1:07:1b:9e:c9:59:
                    6d:9f:5f:7b:e0:29:99:5d:13:f5:67:09:44:90:d5:
                    b6:ed:f8:74:b8:ea:9d:56:27:85:93:fd:37:af:2f:
                    e0:47:7a:15:7a:6e:6e:8c:2d:2e:57:b2:69:7c:f1:
                    48:ea:51:82:0d:d8:93:50:20:84:08:55:39:37:f7:
                    83:a4:4c:10:2c:28:ce:17:55:19:0a:a8:5c:13:ed:
                    eb:e4:1e:61:df:44:4e:8a:9a:d1:27:5c:bd:3c:b8:
                    08:12:d2:e2:0f:5e:2d:1e:11:5f:59:dc:c8:5b:cb:
                    5e:f1:9a:22:33:e9:c2:06:14:1d:30:5a:cb:b0:ad:
                    8d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:25:0B:02:25:E1:34:C0:B1:44:D9:0B:00:15:50:5D:3E:CA:0F:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dbd6bd60-20b4-40eb-8504-81745a54a188/ad9bf542-20c9-3fc5-906d-19ac1d52975b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dbd6bd60-20b4-40eb-8504-81745a54a188/dbd6bd60-20b4-40eb-8504-81745a54a188.crl

            X509v3 Authority Key Identifier:
                keyid:FD:EC:4C:94:07:B1:6F:EB:08:EE:BE:DF:60:11:7C:6C:80:39:A0:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dbd6bd60-20b4-40eb-8504-81745a54a188.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.62.152.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:7d:d5:ac:2c:0c:88:11:c3:dd:58:11:98:48:f7:b5:2c:da:
         ab:3a:b7:c6:0e:6c:dc:fa:0b:a1:9b:1b:79:db:f5:ff:1e:8a:
         42:63:2d:a7:90:73:11:9a:4e:b4:9c:a0:56:d4:72:e1:48:f0:
         23:77:8c:ff:2b:b8:73:1b:0f:80:25:1d:2f:23:ed:63:cc:bb:
         88:8b:ec:57:59:4b:99:46:65:80:95:b7:56:4d:e6:f7:6f:67:
         ec:8c:75:17:c9:03:4a:11:05:49:c0:7d:81:db:9e:df:f2:f0:
         ff:33:ac:d5:24:9c:53:c7:18:71:02:2c:df:a4:e7:c5:bd:4e:
         12:3f:cc:91:2b:55:62:3b:d2:98:38:f8:28:40:8c:4f:29:28:
         00:fd:bd:77:d2:9c:82:f2:7d:87:da:f0:2b:93:f3:7c:60:8c:
         32:8a:c4:f7:0c:2a:03:f5:ca:2b:68:5f:8b:9a:d4:ca:0a:26:
         84:26:f1:d4:1e:0a:0a:07:d7:6e:29:be:ff:3e:be:95:43:61:
         43:65:27:7c:ab:d1:17:fe:b9:91:0f:cc:f7:61:ee:fd:11:eb:
         96:30:50:48:ba:4b:c0:41:0e:fd:e4:9e:0a:bb:02:30:01:85:
         cc:f4:97:8e:b2:ea:eb:b4:b3:d9:b2:53:10:72:d1:aa:ed:60:
         08:66:72:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:21 2024 by rpki-client on console-ams.rpki-client.org