Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea05ab9a-d4fc-4641-a614-4f664f460fa5/c5e7d673-2631-32f8-b9e6-39bb07a293a0.roa
File:                     c5e7d673-2631-32f8-b9e6-39bb07a293a0.roa (raw, json)
Hash identifier:          ylcgPhc/jdZWwPOLI+m1Brq3HyucCNL3NVATgGV6Q4E=
Subject key identifier:   99:73:22:ED:59:F4:21:9D:EE:A1:22:F8:84:E9:B9:11:35:CA:EA:9B
Certificate issuer:       /CN=ea05ab9a-d4fc-4641-a614-4f664f460fa5
Certificate serial:       010D0C9F432858477230EC14511552D7339B56C0
Authority key identifier: CE:14:08:DA:A9:44:7B:7A:F9:F3:F4:DE:6E:11:8E:E3:D1:12:82:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea05ab9a-d4fc-4641-a614-4f664f460fa5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea05ab9a-d4fc-4641-a614-4f664f460fa5/c5e7d673-2631-32f8-b9e6-39bb07a293a0.roa
Signing time:             Sun 06 Oct 2024 01:00:31 +0000
ROA not before:           Sun 06 Oct 2024 01:00:31 +0000
ROA not after:            Sat 04 Jan 2025 02:00:31 +0000
asID:                     7311
IP address blocks:        45.2.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea05ab9a-d4fc-4641-a614-4f664f460fa5/ea05ab9a-d4fc-4641-a614-4f664f460fa5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea05ab9a-d4fc-4641-a614-4f664f460fa5/ea05ab9a-d4fc-4641-a614-4f664f460fa5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea05ab9a-d4fc-4641-a614-4f664f460fa5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:72:30:ec:14:51:15:52:d7:33:9b:56:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea05ab9a-d4fc-4641-a614-4f664f460fa5
        Validity
            Not Before: Oct  6 01:00:31 2024 GMT
            Not After : Jan  4 02:00:31 2025 GMT
        Subject: CN=feb6a128-31e0-4e00-826b-5d64bc3d3d11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:02:a9:61:a5:01:3d:f1:72:d6:cb:19:9d:56:
                    4a:ff:80:a5:4c:fe:db:90:9e:66:d2:a3:f1:1d:ed:
                    d3:c9:68:12:30:e5:48:03:b8:8e:de:93:7e:07:f5:
                    2d:29:40:d2:8f:3f:28:0e:f3:76:58:91:6d:95:33:
                    cc:84:62:92:01:fa:47:85:db:ac:90:95:30:e5:d1:
                    11:6e:63:58:60:9e:76:58:d7:19:c6:42:fb:8e:1d:
                    c6:cd:55:54:82:24:fa:bd:4d:9f:3b:e6:d3:64:06:
                    9a:c3:10:3e:4b:31:46:f8:48:49:3d:2e:d5:09:48:
                    ab:58:77:4f:cf:07:32:b6:41:87:c8:e7:8c:4d:99:
                    93:03:c3:54:7f:b8:12:04:8e:dd:47:1a:0f:87:b1:
                    11:a0:ae:21:96:5c:4e:86:6a:b2:af:aa:8a:8e:25:
                    58:63:51:9b:47:b9:6c:be:84:5d:5e:98:8f:cc:cc:
                    70:89:54:27:ac:96:f1:2f:7a:6a:6a:af:9b:08:a4:
                    9c:fa:8a:2c:dc:97:83:76:73:53:48:b4:67:3f:be:
                    d9:b5:89:70:8b:a7:aa:6a:4f:87:36:08:4c:0f:83:
                    92:32:75:c0:2b:ea:11:72:41:53:7c:14:25:6f:f5:
                    a1:3f:5a:f7:dc:15:54:35:33:a2:13:8c:63:79:8d:
                    36:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:73:22:ED:59:F4:21:9D:EE:A1:22:F8:84:E9:B9:11:35:CA:EA:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea05ab9a-d4fc-4641-a614-4f664f460fa5/c5e7d673-2631-32f8-b9e6-39bb07a293a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea05ab9a-d4fc-4641-a614-4f664f460fa5/ea05ab9a-d4fc-4641-a614-4f664f460fa5.crl

            X509v3 Authority Key Identifier:
                keyid:CE:14:08:DA:A9:44:7B:7A:F9:F3:F4:DE:6E:11:8E:E3:D1:12:82:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea05ab9a-d4fc-4641-a614-4f664f460fa5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.2.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:c7:df:44:12:24:c5:4f:41:5a:2b:a8:57:d8:6f:3b:95:e6:
         93:54:0b:4d:4f:e5:75:83:5e:33:39:09:84:76:47:48:8f:3e:
         55:f1:d5:25:be:08:b8:6d:21:b1:72:52:4e:26:dd:06:13:65:
         4f:58:e4:05:0a:4b:f7:f3:05:45:8d:ea:e2:e1:7c:74:a6:2d:
         5d:1e:8a:a9:f1:52:cb:e3:fd:36:46:7c:6d:83:be:13:7c:4c:
         6e:08:1d:43:c8:40:3b:ec:48:24:d3:e6:07:56:98:51:11:0f:
         e8:b4:9c:ec:1e:e4:99:21:f4:86:e3:c6:80:89:1d:34:ec:a5:
         ca:af:70:ea:fa:19:e4:94:b2:62:bf:2b:49:9a:c6:fe:fa:09:
         f3:9d:af:13:28:50:90:b1:1e:bf:5e:8a:41:2c:3d:cd:59:d1:
         93:7c:83:7d:2e:72:81:3f:0a:ae:74:38:27:60:da:1d:0b:a8:
         59:33:67:d8:45:61:1c:94:ea:d2:ff:04:a7:a5:53:7b:b2:28:
         9e:29:db:2e:fc:ac:7b:b1:06:c5:9e:98:b0:c0:98:05:47:f8:
         8c:09:c3:f0:08:eb:77:36:c9:81:7b:6a:1d:63:4d:70:98:2e:
         64:86:1e:47:de:95:ff:2a:51:e6:8c:cb:ce:23:ce:6c:23:b2:
         21:81:5f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:03:25 2024 by rpki-client on console-ams.rpki-client.org