Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/5a3a0e4f-4839-3877-86b8-ec3ff681e3f1.roa
File:                     5a3a0e4f-4839-3877-86b8-ec3ff681e3f1.roa (raw, json)
Hash identifier:          /EXugD3GTbqrkdcB3yafUz+FbmBOAF7FPWxF4ZUgFpU=
Subject key identifier:   97:63:FF:06:13:F2:51:39:4E:70:74:0F:98:2D:63:52:96:C7:6E:3E
Certificate issuer:       /CN=0c772b4b-15fb-4b38-b505-dfe915dae9cd
Certificate serial:       010D0C9F43285845295296AEDEC40BFCA8BC3900
Authority key identifier: F1:45:52:CC:E6:22:4E:29:4E:15:2D:5C:E4:BD:DD:05:3A:08:B5:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/5a3a0e4f-4839-3877-86b8-ec3ff681e3f1.roa
Signing time:             Sun 10 Mar 2024 13:00:31 +0000
ROA not before:           Sun 10 Mar 2024 13:00:31 +0000
ROA not after:            Sat 08 Jun 2024 13:00:31 +0000
asID:                     34553
IP address blocks:        45.59.141.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/0c772b4b-15fb-4b38-b505-dfe915dae9cd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/0c772b4b-15fb-4b38-b505-dfe915dae9cd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:29:52:96:ae:de:c4:0b:fc:a8:bc:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c772b4b-15fb-4b38-b505-dfe915dae9cd
        Validity
            Not Before: Mar 10 13:00:31 2024 GMT
            Not After : Jun  8 13:00:31 2024 GMT
        Subject: CN=7a45ba37-8e28-4b49-a009-a4daf5a0338f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:56:70:56:87:db:b4:98:36:36:19:78:2e:e3:
                    2b:35:0e:a3:9f:bc:37:85:dd:e2:95:3c:88:87:5a:
                    d8:58:3c:6c:af:70:90:fe:93:ba:e7:be:b6:4e:eb:
                    86:78:ec:db:fc:fc:57:2d:1b:e1:8e:c9:ca:da:83:
                    0b:b2:c7:b7:21:68:91:e8:c1:3e:d8:50:60:f9:10:
                    6e:97:2a:3e:81:92:64:ca:bd:c4:f6:94:15:cc:a1:
                    76:5e:fd:bd:b6:dd:df:e5:9a:14:a9:4c:26:51:a5:
                    6a:e1:7b:63:5c:39:0f:d5:14:b3:3d:94:b4:79:c8:
                    0a:50:58:93:f3:74:9e:74:ab:da:f9:d7:24:fa:f0:
                    55:e9:71:c6:42:dd:9f:97:d7:97:c9:51:06:68:b7:
                    26:36:34:68:91:46:e6:7b:1a:1d:7a:02:b6:19:e2:
                    40:27:59:8d:40:73:c9:1f:2f:e7:60:10:37:0a:58:
                    3b:16:81:5b:bc:82:c5:90:c7:8d:a9:6f:b0:4b:06:
                    e5:4f:67:64:8a:a7:81:0a:32:f4:05:28:f6:6f:f6:
                    60:05:b6:72:24:b3:97:65:a0:b7:09:e6:3d:93:5b:
                    2b:39:d8:f4:b3:ad:96:5b:f3:42:90:fc:12:d0:63:
                    6f:c5:23:f3:85:3c:6c:56:c4:e1:8f:52:0e:b2:f2:
                    30:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:63:FF:06:13:F2:51:39:4E:70:74:0F:98:2D:63:52:96:C7:6E:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/5a3a0e4f-4839-3877-86b8-ec3ff681e3f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/0c772b4b-15fb-4b38-b505-dfe915dae9cd.crl

            X509v3 Authority Key Identifier:
                keyid:F1:45:52:CC:E6:22:4E:29:4E:15:2D:5C:E4:BD:DD:05:3A:08:B5:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:dc:49:ab:b0:67:ad:40:4a:f0:87:1c:60:dc:11:98:47:72:
         8c:ff:68:15:3d:51:ac:41:d9:e1:02:06:35:69:4a:3a:25:c5:
         d7:d2:fc:a6:1d:b2:1d:a6:72:ff:dc:cd:6b:8c:ec:5c:fd:98:
         82:1c:f6:44:3d:c5:e0:58:b8:55:3a:ab:56:f0:f0:1f:cb:27:
         5f:35:02:25:57:3e:e9:65:62:a8:97:ef:a5:86:ee:25:5c:09:
         53:7a:30:b8:17:88:02:0f:8f:2d:55:4a:fb:02:ac:24:7f:76:
         6d:96:41:48:a7:f6:08:0f:84:38:95:9f:17:25:7a:d0:b0:2b:
         2b:09:af:7c:7d:66:7c:d9:44:05:f4:2a:b6:01:19:27:63:a9:
         0c:07:10:12:6f:6a:8a:f6:75:be:c3:64:74:db:a4:82:7c:b6:
         23:74:60:e7:c1:58:c8:77:95:fb:2e:c6:dc:f3:27:f8:51:3f:
         ab:8a:10:06:b1:4c:be:a2:dd:2a:05:19:70:c0:72:e2:99:af:
         2e:a2:fa:7f:98:2e:cb:86:80:23:78:ad:cc:ab:76:02:52:56:
         09:3f:ae:a6:b9:aa:10:41:e0:ab:e1:14:b0:00:7e:d7:e1:77:
         d1:2d:0f:cc:be:47:dd:2b:b5:61:a2:e2:24:fb:23:99:eb:dd:
         00:58:b3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:55:24 2024 by rpki-client on console-fra.rpki-client.org