Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9238286d-0a5b-35db-96a0-edeae741f757.roa
File:                     9238286d-0a5b-35db-96a0-edeae741f757.roa (raw, json)
Hash identifier:          +257f79bLkgSxI926Nw6v6TZ8h4DjGUcS4MwIr7fQew=
Subject key identifier:   98:80:41:17:91:DF:33:68:0D:70:45:33:4E:37:84:7C:C0:6A:A3:28
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F432858481A3DC6B01DC917F9AEB0FAA0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9238286d-0a5b-35db-96a0-edeae741f757.roa
Signing time:             Thu 05 Dec 2024 05:42:23 +0000
ROA not before:           Thu 05 Dec 2024 05:42:23 +0000
ROA not after:            Wed 05 Mar 2025 05:42:23 +0000
asID:                     9009
IP address blocks:        45.74.43.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Dec 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1a:3d:c6:b0:1d:c9:17:f9:ae:b0:fa:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Dec  5 05:42:23 2024 GMT
            Not After : Mar  5 05:42:23 2025 GMT
        Subject: CN=fd413dc8-c775-446a-a1d1-1d4196d2f722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:33:8b:55:c4:b7:f8:46:a8:dc:3b:27:83:5a:
                    5c:35:32:70:6c:9a:4a:d6:61:32:d5:76:e2:c8:6c:
                    3a:d5:d5:4b:87:0e:20:b5:72:b1:bd:54:4f:1f:e0:
                    e0:aa:00:e7:fb:c1:9f:b2:85:80:e8:df:18:ac:9c:
                    09:cb:87:51:ee:39:9c:f2:44:d4:a7:b1:1e:98:f8:
                    4b:b1:70:0d:56:a1:49:a3:da:94:e0:2c:1b:89:92:
                    ee:83:14:a2:b1:f6:94:36:8d:79:c5:46:51:43:04:
                    71:e5:75:e4:68:3e:96:9d:88:4e:f9:7c:1a:4f:dd:
                    8a:4a:5a:56:21:29:3a:0f:9c:5b:c0:e4:d1:19:f0:
                    38:c1:98:4d:63:e4:b9:5f:b1:04:ef:b3:bb:6c:e0:
                    ce:e3:7f:d3:17:46:9e:f5:3f:66:f9:fc:86:1b:f6:
                    ba:ca:a0:06:11:ff:72:d3:68:ab:29:15:dd:57:ed:
                    12:93:ea:e4:8d:09:b4:8e:d7:b6:54:57:3a:f8:9a:
                    42:40:1a:42:70:11:c8:57:0c:d8:0e:e9:a8:00:b3:
                    ae:fc:e1:4b:88:7a:b0:01:40:09:8e:8b:90:04:fe:
                    4c:4c:23:a7:4f:77:46:26:11:d1:47:c4:1d:06:3e:
                    e5:38:ad:a0:3f:aa:17:bb:bb:a8:4f:13:8f:14:70:
                    c8:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:80:41:17:91:DF:33:68:0D:70:45:33:4E:37:84:7C:C0:6A:A3:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9238286d-0a5b-35db-96a0-edeae741f757.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.74.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:46:3b:cd:14:4f:28:47:1a:01:e8:8b:19:b6:40:3c:bd:01:
         9c:f5:b5:24:e8:bd:41:c7:3e:c0:dc:13:c7:b2:32:25:cb:e4:
         a2:ec:fd:7e:f0:04:f3:3b:d6:9a:e3:27:6d:b2:a4:b8:51:fd:
         ba:9f:d6:39:7d:38:f6:ae:25:2a:c0:ec:f9:a5:97:5f:e3:8f:
         27:a3:93:8e:f4:3e:d2:58:3d:a8:60:9e:15:b2:2c:17:9c:ed:
         ea:2a:c9:01:d3:df:a9:72:b5:89:f9:4e:52:48:f9:14:90:22:
         b9:71:00:63:6d:ce:cd:04:28:9c:82:99:85:3c:3f:e3:e9:73:
         1f:a8:77:84:25:75:01:39:5d:4b:94:19:18:6c:0a:c6:76:52:
         2e:bd:6b:d7:d2:8d:8b:e8:58:7c:38:a5:6e:41:52:e4:a9:c7:
         94:ac:bd:a3:67:be:ac:64:05:f5:b3:94:39:82:ed:f4:48:2b:
         6e:24:0d:a8:14:19:39:91:79:53:cc:8b:3d:e3:5e:52:80:e0:
         b4:e7:31:77:b7:11:a4:99:b0:62:15:42:8a:af:40:ec:91:86:
         e8:01:18:e9:3a:47:06:42:b7:fc:05:69:28:47:d7:51:f4:02:
         3f:ce:ed:a7:45:fb:0e:68:ad:b4:a8:28:c9:26:ba:fb:89:a2:
         2e:e8:c0:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 08:30:14 2024 by rpki-client on console-fra.rpki-client.org