Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/bbef93dd-8e76-38f0-9543-b554a222aa98.roa
File:                     bbef93dd-8e76-38f0-9543-b554a222aa98.roa (raw, json)
Hash identifier:          JSN+I/wJt3f95dDz/i1rT97GVUAe7HYZXDS+KBydTsw=
Subject key identifier:   82:B3:5E:3A:18:2A:8D:FE:9A:8D:72:D7:7D:18:EB:81:E4:EE:C1:28
Certificate issuer:       /CN=51772dd7-991f-47b2-b40b-d92a8497234e
Certificate serial:       010D0C9F43285847E4C4ADF5BBA41CC286A352C0
Authority key identifier: D7:BC:A9:71:3D:2E:8C:BE:A8:BC:77:2E:30:C3:3D:60:09:04:02:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/bbef93dd-8e76-38f0-9543-b554a222aa98.roa
Signing time:             Sat 16 Nov 2024 02:00:28 +0000
ROA not before:           Sat 16 Nov 2024 02:00:28 +0000
ROA not after:            Fri 14 Feb 2025 02:00:28 +0000
asID:                     14618
IP address blocks:        45.10.57.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e4:c4:ad:f5:bb:a4:1c:c2:86:a3:52:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51772dd7-991f-47b2-b40b-d92a8497234e
        Validity
            Not Before: Nov 16 02:00:28 2024 GMT
            Not After : Feb 14 02:00:28 2025 GMT
        Subject: CN=caec4e65-1d30-4c30-bd5f-ffa8f6aa393e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:df:2d:b1:e5:07:8f:1b:c4:28:71:3e:ad:c7:
                    2f:f7:89:7c:bc:9c:82:9a:85:74:4b:01:a2:8d:8c:
                    9d:6a:ca:c5:f8:4c:01:aa:14:2b:9e:30:d5:ac:36:
                    a7:59:0e:ec:8e:21:75:fa:3e:f3:33:01:be:36:08:
                    ca:aa:08:34:a3:97:76:99:86:65:ea:38:f1:64:b8:
                    54:24:d8:23:77:cb:66:d5:91:d2:fd:dd:82:62:c0:
                    da:45:fc:dd:da:e3:b0:5a:87:27:91:55:5c:2f:62:
                    ef:32:ee:ce:96:d0:45:6b:d5:4a:19:99:02:5f:31:
                    53:c7:95:3e:56:a8:59:f3:88:e8:87:34:77:bd:8b:
                    16:a8:76:52:d6:22:f8:35:1c:71:52:8a:79:7f:18:
                    b1:d7:ff:f2:a6:84:09:85:b4:39:3e:73:53:6d:65:
                    a6:48:9d:6c:7f:42:19:ea:e8:c7:c4:cc:6a:80:0d:
                    ec:d2:48:6a:33:b4:fc:17:0a:4d:da:2e:d6:76:61:
                    92:31:8b:30:d8:b3:f9:8f:57:92:a8:c9:34:c8:14:
                    0e:0a:36:6d:c8:2d:9c:6c:98:ae:6c:12:34:c7:57:
                    c7:8f:12:6a:b3:65:f8:69:72:48:02:1c:2e:8c:88:
                    90:bd:ce:e3:3c:f5:d6:a2:84:68:20:54:24:27:d8:
                    5e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:B3:5E:3A:18:2A:8D:FE:9A:8D:72:D7:7D:18:EB:81:E4:EE:C1:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/bbef93dd-8e76-38f0-9543-b554a222aa98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.crl

            X509v3 Authority Key Identifier:
                keyid:D7:BC:A9:71:3D:2E:8C:BE:A8:BC:77:2E:30:C3:3D:60:09:04:02:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.10.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:48:58:03:c1:30:51:c4:b2:c9:f9:c2:28:93:39:e7:ea:72:
         f5:89:c9:72:47:ee:3b:84:da:05:b9:e7:b1:75:3b:00:94:4c:
         41:d9:89:f2:fd:8c:ab:eb:69:76:1f:c4:75:e3:8f:2e:16:46:
         6e:1f:5b:5e:b3:ad:4b:93:b3:24:0b:26:02:c9:bf:98:8b:6c:
         95:6d:33:4f:4e:ff:de:95:86:32:2a:02:0b:aa:58:d7:ec:49:
         e7:61:e7:54:32:dc:62:d8:9a:42:27:a3:91:42:0e:ca:11:38:
         a8:16:19:35:8f:4d:93:b1:9c:a9:aa:d2:e0:65:54:42:07:24:
         6b:c7:58:5d:42:6e:85:3a:c1:b7:ef:19:be:5a:92:16:31:97:
         2b:0e:4f:93:84:9a:17:cf:32:41:59:0f:a1:24:3c:f3:e7:1b:
         dc:c6:2b:54:2d:0f:e9:dd:7a:03:e5:ac:11:2f:2f:99:55:c8:
         ea:c9:5f:f8:7f:1e:41:79:ac:ed:65:7d:4c:56:b7:cb:bd:f7:
         27:1b:7d:6b:e1:a1:99:0e:bf:43:54:ec:ee:78:6f:e8:25:0a:
         77:83:17:99:25:1e:a3:06:1e:9d:60:86:12:9f:8f:2c:64:db:
         1e:f1:6f:1f:de:cd:a7:65:f4:24:ab:76:3d:96:f7:14:b3:26:
         80:a5:f9:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:13:33 2024 by rpki-client on console-ams.rpki-client.org