Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/909cfc01-1f4a-3eaa-85c9-32b9b3433bbc.roa
File:                     909cfc01-1f4a-3eaa-85c9-32b9b3433bbc.roa (raw, json)
Hash identifier:          9zmXIV6rWd7DswOCIz+r7so1heqmOFjAVWOTvcTYVZA=
Subject key identifier:   62:F8:35:F9:42:A1:9E:EB:E1:63:9A:48:3E:2B:87:D7:5C:E8:99:54
Certificate issuer:       /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Certificate serial:       010D0C9F432858450EEAD6CECBE3B361C60B53F0
Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/909cfc01-1f4a-3eaa-85c9-32b9b3433bbc.roa
Signing time:             Fri 01 Mar 2024 02:00:27 +0000
ROA not before:           Fri 01 Mar 2024 02:00:27 +0000
ROA not after:            Thu 30 May 2024 01:00:27 +0000
asID:                     262287
IP address blocks:        45.59.17.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0e:ea:d6:ce:cb:e3:b3:61:c6:0b:53:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
        Validity
            Not Before: Mar  1 02:00:27 2024 GMT
            Not After : May 30 01:00:27 2024 GMT
        Subject: CN=fb5b516a-b952-4b46-8573-54c43f6a430d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1b:ea:1f:c7:ec:ea:f3:0c:d2:e1:87:ff:80:
                    6e:87:4e:05:7a:3b:60:21:5f:6b:b8:9e:a1:0e:89:
                    ba:61:b6:56:d8:a6:d4:aa:1b:a8:db:05:e0:9b:04:
                    ec:ed:36:c3:f9:a8:6a:88:59:2a:1f:86:3a:d2:6a:
                    3f:7b:7a:15:4c:a2:97:2e:39:77:50:ce:d9:21:d1:
                    49:78:bb:3c:96:0c:da:bf:1f:25:02:dd:dd:49:19:
                    ca:95:89:4c:96:bd:f7:b6:bf:d9:10:df:cf:d0:9c:
                    ab:41:c6:22:52:0b:7e:31:14:fc:dd:da:b1:e1:9a:
                    0a:e9:f8:62:d7:63:ea:75:5e:83:2f:78:ee:4a:6d:
                    33:f8:06:f4:58:05:76:a7:53:32:54:c6:1a:77:f6:
                    7c:63:d0:c6:2e:14:ff:f3:82:a1:44:51:80:06:af:
                    20:d8:c6:14:98:3d:b9:92:38:95:e9:1f:6d:e4:0b:
                    d9:08:27:c9:03:81:8e:fc:46:c0:b1:e6:7a:6f:c3:
                    1d:2a:9a:1a:f8:3d:79:da:be:f4:e0:66:ae:8f:69:
                    97:e2:c8:f0:59:a3:9f:56:e1:2e:a3:07:8c:7d:89:
                    27:c0:8e:a5:a3:e2:f4:2d:20:5c:6a:1c:8c:97:61:
                    ef:54:c4:a6:19:d6:83:55:75:62:05:5e:6e:17:5c:
                    d4:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:F8:35:F9:42:A1:9E:EB:E1:63:9A:48:3E:2B:87:D7:5C:E8:99:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/909cfc01-1f4a-3eaa-85c9-32b9b3433bbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:93:00:ae:c5:40:3c:f8:29:59:c6:ce:1f:91:00:1e:f7:9f:
         de:cd:cd:22:0c:18:0b:59:ea:b4:99:1c:0d:50:ad:4f:d3:59:
         af:ca:44:6a:39:24:83:b4:db:84:84:b3:88:0a:37:08:66:9d:
         7b:6a:b9:5e:cb:75:b2:65:90:71:95:e3:de:0f:7d:ae:a3:bd:
         c5:13:b4:9e:8a:b7:8a:50:ad:25:d5:af:f4:e2:4f:47:3e:25:
         89:b9:33:27:92:da:7a:f1:e3:46:eb:95:34:b0:2c:70:6d:25:
         20:25:c1:5c:bb:89:ed:01:5f:bf:c3:06:a9:c1:fe:eb:7a:d2:
         4f:40:b7:80:a4:c4:c3:b9:f6:1f:d6:a4:bb:e4:ad:ed:63:3c:
         51:1f:01:f3:5a:3f:0e:5b:93:25:14:7f:15:29:0a:0c:7c:cc:
         b4:32:cb:3f:b3:de:67:91:3e:1e:ee:e9:e5:0c:33:6b:13:b3:
         68:93:ef:5a:95:54:3c:21:3e:2b:70:bf:60:3b:3f:87:3c:6d:
         b9:0e:3d:b3:58:34:2e:f9:ca:d4:65:4b:3c:c3:f1:d0:c1:99:
         bb:12:a8:61:8e:f9:c1:cb:d3:5c:de:9b:26:08:25:60:9c:6d:
         fb:e5:9a:dd:ac:ac:2d:5b:3f:46:e3:c2:a8:20:fe:be:60:12:
         99:36:24:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:25:46 2024 by rpki-client on console-ams.rpki-client.org