Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c95ce3d-c60a-4a89-8fef-bc6c44d54f54/108f695e-beb6-3f8c-917a-4c9a702aff9d.roa
File:                     108f695e-beb6-3f8c-917a-4c9a702aff9d.roa (raw, json)
Hash identifier:          PwLpcmcBcUm0GdM6oPxV68j+4EEx28U9CP/V1n6YKDA=
Subject key identifier:   A3:36:C6:8D:90:04:F1:38:AE:CB:EF:F8:50:A2:E5:AC:92:90:1D:45
Certificate issuer:       /CN=5c95ce3d-c60a-4a89-8fef-bc6c44d54f54
Certificate serial:       010D0C9F43285846ED43B460231E7A32310BDB00
Authority key identifier: B2:93:8C:DF:4E:61:AC:DE:34:BC:B0:1F:BB:7C:32:EE:04:26:A1:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c95ce3d-c60a-4a89-8fef-bc6c44d54f54.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c95ce3d-c60a-4a89-8fef-bc6c44d54f54/108f695e-beb6-3f8c-917a-4c9a702aff9d.roa
Signing time:             Mon 19 Aug 2024 10:16:00 +0000
ROA not before:           Mon 19 Aug 2024 10:16:00 +0000
ROA not after:            Sun 17 Nov 2024 11:16:00 +0000
asID:                     16509
IP address blocks:        45.45.136.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c95ce3d-c60a-4a89-8fef-bc6c44d54f54/5c95ce3d-c60a-4a89-8fef-bc6c44d54f54.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c95ce3d-c60a-4a89-8fef-bc6c44d54f54/5c95ce3d-c60a-4a89-8fef-bc6c44d54f54.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c95ce3d-c60a-4a89-8fef-bc6c44d54f54.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Oct 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:ed:43:b4:60:23:1e:7a:32:31:0b:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c95ce3d-c60a-4a89-8fef-bc6c44d54f54
        Validity
            Not Before: Aug 19 10:16:00 2024 GMT
            Not After : Nov 17 11:16:00 2024 GMT
        Subject: CN=7af8ac91-38c3-4da4-b48a-d403e0f528a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:13:46:66:0c:5b:ca:9a:71:b7:1f:d9:00:c2:
                    0f:7c:5e:54:85:ec:85:69:79:33:b9:1a:e6:b1:d3:
                    29:66:72:b7:f7:b4:20:ff:1c:cd:e8:5b:76:3d:16:
                    16:09:8f:cb:53:85:66:84:75:c6:64:74:63:55:05:
                    c9:42:7c:60:9c:8a:a9:7d:27:ec:be:11:3a:6e:e3:
                    3b:12:78:7f:87:8e:32:5d:49:c1:d4:c0:07:e7:25:
                    29:52:4d:5c:fc:af:90:ef:fa:28:fd:48:ef:93:05:
                    e4:92:12:51:ba:ec:1f:90:b2:fa:70:77:3b:2a:b7:
                    49:74:3e:cc:69:54:79:ec:db:e7:d9:59:60:6a:d3:
                    1c:c9:9f:6b:24:1e:f4:4b:68:e2:2b:7a:0b:8c:cc:
                    2c:e7:7a:8f:a7:bc:55:de:f7:62:d1:aa:dc:98:7b:
                    a3:a1:9d:b3:78:1c:6c:c2:d3:27:62:4f:c7:27:57:
                    30:fe:e8:d9:fd:93:84:21:e1:71:20:2d:6c:66:35:
                    ce:50:de:60:d2:30:af:84:78:5f:1e:08:ee:db:da:
                    c6:0a:05:28:2d:6c:8f:e5:e5:8b:94:57:3a:8c:1c:
                    3a:56:bd:1e:6e:9e:f0:51:5a:2b:b5:57:22:c0:6e:
                    c2:08:72:37:75:2c:d3:bd:8d:cd:97:15:90:e3:0c:
                    59:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:36:C6:8D:90:04:F1:38:AE:CB:EF:F8:50:A2:E5:AC:92:90:1D:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c95ce3d-c60a-4a89-8fef-bc6c44d54f54/108f695e-beb6-3f8c-917a-4c9a702aff9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c95ce3d-c60a-4a89-8fef-bc6c44d54f54/5c95ce3d-c60a-4a89-8fef-bc6c44d54f54.crl

            X509v3 Authority Key Identifier:
                keyid:B2:93:8C:DF:4E:61:AC:DE:34:BC:B0:1F:BB:7C:32:EE:04:26:A1:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c95ce3d-c60a-4a89-8fef-bc6c44d54f54.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:87:d5:d4:1d:b2:6a:d4:19:69:fd:d4:ad:51:ee:6e:71:f1:
         22:a3:2b:56:4b:65:d5:5b:74:38:f9:aa:d9:b1:a3:3e:43:9d:
         38:cd:69:42:c9:9d:61:f9:d6:7f:ce:24:e8:47:13:09:65:25:
         69:50:38:41:ca:1e:ba:75:76:cf:75:a4:30:46:b3:4f:f8:38:
         91:54:92:96:d8:93:32:91:37:fd:0f:0f:29:0a:8b:57:5b:8d:
         85:96:6c:e6:d4:bb:d4:88:f3:97:c5:0b:de:80:b3:a6:ff:48:
         47:3b:22:22:50:28:9c:61:dc:0c:d2:dc:2b:a9:76:17:0a:a8:
         15:e5:3c:f6:79:dd:e2:91:5e:da:b3:b5:39:35:79:a4:84:b1:
         b9:6e:d9:77:83:ff:54:1b:0e:28:1c:cb:57:eb:16:23:60:97:
         1b:21:cc:37:dd:f2:28:b9:b3:ca:d3:4e:32:53:8c:1c:07:af:
         ec:3d:b4:72:a9:2a:02:a9:6d:3d:15:f6:28:61:0f:b2:74:56:
         f1:26:ed:3d:a3:75:3f:1a:06:ff:31:5a:ec:28:c2:1e:4f:24:
         39:82:21:db:1f:13:50:e8:4f:91:f2:0a:c3:42:60:6c:e7:57:
         d1:1e:7d:78:aa:7a:55:52:09:82:e5:b3:a0:70:75:23:26:a6:
         95:b9:c4:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 18:48:50 2024 by rpki-client on console-ams.rpki-client.org