Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/9da75916-e40b-3dbe-bdbe-77d991c6fbda.roa
File:                     9da75916-e40b-3dbe-bdbe-77d991c6fbda.roa (raw, json)
Hash identifier:          gbLeOUMzVhvewQsjUhQeWo7Iuwxhxe+UWT+utTr6YQM=
Subject key identifier:   83:BA:4E:41:83:EE:FE:AC:A5:01:AA:CE:37:EF:F7:5F:CC:A4:2B:5B
Certificate issuer:       /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df
Certificate serial:       010D0C9F43285845AF536E2B53B2AB53CD7B7780
Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/9da75916-e40b-3dbe-bdbe-77d991c6fbda.roa
Signing time:             Sat 27 Apr 2024 13:00:34 +0000
ROA not before:           Sat 27 Apr 2024 13:00:34 +0000
ROA not after:            Fri 26 Jul 2024 13:00:34 +0000
asID:                     38001
IP address blocks:        45.42.143.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 May 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:af:53:6e:2b:53:b2:ab:53:cd:7b:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df
        Validity
            Not Before: Apr 27 13:00:34 2024 GMT
            Not After : Jul 26 13:00:34 2024 GMT
        Subject: CN=eded8ef0-b1e0-46f6-8886-d0834ed6d649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ac:d6:85:5e:82:74:2a:8c:0a:a3:4e:de:0c:
                    58:61:3f:95:74:12:c0:9a:d3:6a:db:17:2e:65:93:
                    ac:80:6d:22:c0:1a:87:e1:7c:b5:53:32:4b:7b:9d:
                    3b:77:2c:58:40:2e:bb:6b:b1:28:5a:7f:71:b5:c1:
                    39:6f:05:d0:96:ce:1e:b6:d0:16:7f:82:2f:11:7a:
                    fc:62:ef:df:5d:7e:83:54:97:c0:89:d2:5c:33:a0:
                    8e:8c:8a:20:7a:c3:bd:58:68:06:a4:73:70:b4:44:
                    2e:bd:83:8f:a0:47:65:0b:f8:52:85:ff:65:07:07:
                    43:35:be:2b:c4:1b:48:c9:62:a6:af:54:2b:f6:3e:
                    d0:01:fd:53:cb:d1:c3:4c:d0:7f:9d:25:89:d0:91:
                    7e:1a:60:8b:4e:bf:1d:4b:1a:5d:c3:47:41:4f:c7:
                    0d:d1:e1:b1:13:92:cc:48:98:b1:2e:8a:38:b1:20:
                    64:56:9c:f6:5e:18:bf:d6:2a:13:56:36:84:b4:b9:
                    de:01:d2:49:2d:5d:da:a5:6a:57:6d:24:15:05:ab:
                    7b:e4:9a:82:f2:2c:b0:ac:55:a3:2e:95:43:29:5c:
                    eb:06:92:20:ab:17:08:8f:1e:27:90:cd:3a:ac:3c:
                    90:6a:94:db:b2:89:8c:6d:a9:10:34:2d:cb:65:8b:
                    e2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:BA:4E:41:83:EE:FE:AC:A5:01:AA:CE:37:EF:F7:5F:CC:A4:2B:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/9da75916-e40b-3dbe-bdbe-77d991c6fbda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl

            X509v3 Authority Key Identifier:
                keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:34:a2:18:2f:83:6b:1b:fe:ed:e8:fb:cf:5b:57:40:62:3b:
         7e:0c:97:f3:ca:f6:e1:ef:76:2f:fa:dc:55:d4:0d:98:f2:72:
         dc:66:a5:a8:c8:c2:a3:eb:6c:d1:dc:3b:6b:ca:56:d7:5e:3b:
         35:06:e4:eb:61:ed:57:91:63:a4:64:60:e5:00:07:50:02:c1:
         c0:7b:2f:28:e3:ac:b0:b7:29:5e:c9:4b:39:78:f8:2f:a5:b3:
         64:1a:72:16:0f:a9:77:cb:25:fb:bc:47:2c:80:2f:eb:9e:53:
         a5:20:d0:87:f8:7e:2a:23:60:fc:bd:54:c9:c5:31:ba:f6:d0:
         d2:89:81:84:33:0b:f8:62:b5:83:9d:05:9e:7f:92:95:07:37:
         9d:0c:d3:21:5e:f4:9c:5c:74:9b:25:57:b6:fe:9a:78:a2:6e:
         79:d2:57:ee:1c:cd:12:8f:28:ef:ac:40:9a:af:27:70:9b:5d:
         cf:07:e8:12:6b:a7:8c:6b:12:7d:6c:7f:dd:c7:bf:a5:8d:e2:
         d7:19:99:6d:1f:81:7f:34:5b:01:96:e9:f0:5e:d5:6a:1d:bb:
         d2:2d:90:5e:ca:cc:bb:3c:f5:ae:0a:26:3c:61:0e:66:47:84:
         7c:5c:71:f9:e8:6a:99:d6:9e:a9:55:2d:f9:67:11:ed:c9:0d:
         42:62:31:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 17:06:04 2024 by rpki-client on console-ams.rpki-client.org