Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/02028355-5aa4-337e-9a00-24c0aa1e201f.roa
File:                     02028355-5aa4-337e-9a00-24c0aa1e201f.roa (raw, json)
Hash identifier:          G6/hbIkBKSoZH/KYlDF5mcYUq2mS9FAOVPMrZWYvDG8=
Subject key identifier:   9B:B0:38:52:55:E3:07:67:FB:18:1C:42:2F:BA:0D:06:47:F9:A3:A3
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D13DC7E5862C70B9E4EB40
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/02028355-5aa4-337e-9a00-24c0aa1e201f.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     11426
IP address blocks:        45.36.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:3d:c7:e5:86:2c:70:b9:e4:eb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=636df7e1-f479-4963-9a84-6a2bdcc67f78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c2:d4:fb:93:59:48:7a:ad:70:6f:ef:db:de:
                    18:57:3f:91:e4:3c:cc:f9:0e:5e:6a:7b:7f:87:ca:
                    3f:95:63:91:52:c7:a4:da:6c:f2:70:6a:ab:1b:78:
                    d2:2d:b0:99:59:b4:e8:59:40:e4:3c:36:c9:d1:68:
                    00:e1:9a:2b:39:f1:77:8d:92:04:ee:93:05:07:7a:
                    ab:53:bb:fb:21:e6:bd:c6:fc:5e:ca:7d:1f:dd:e2:
                    28:d5:11:d4:4b:de:9f:f8:bc:03:20:35:f7:e1:61:
                    f5:00:17:80:00:72:ba:89:58:7a:25:a6:89:0c:26:
                    81:c8:a5:58:d6:d0:ed:d5:a1:86:4c:8b:09:08:ae:
                    ab:7a:c3:20:f2:13:a6:24:ad:48:29:51:2e:76:88:
                    0e:34:1e:3f:a3:f6:85:33:97:6d:f3:36:99:86:ef:
                    36:a0:1f:5d:73:1c:f9:e9:34:85:ee:b3:30:c6:d6:
                    da:fc:ea:6c:3c:e8:16:d5:0c:33:9f:c0:c3:25:ab:
                    58:1d:fb:c3:31:5c:0e:34:65:e4:a3:3c:58:ea:93:
                    27:1f:a8:7e:90:e2:47:92:df:b7:77:9d:c8:d8:94:
                    3d:bf:f4:4c:d5:ca:df:bb:2f:5c:0f:dc:18:9b:69:
                    53:c6:c0:07:61:8b:fc:c0:70:a5:32:b4:e2:e0:34:
                    74:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:B0:38:52:55:E3:07:67:FB:18:1C:42:2F:BA:0D:06:47:F9:A3:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/02028355-5aa4-337e-9a00-24c0aa1e201f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.36.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:28:bb:b3:2b:1b:79:f7:23:c7:bf:ef:6d:d4:c3:9f:20:fe:
         8b:d6:36:4a:0c:8b:97:5d:77:53:45:7d:63:ac:a1:78:6e:b3:
         5b:62:8c:f1:2d:82:be:97:0a:ef:9f:c1:d8:fa:d9:bf:00:42:
         70:d0:e6:7f:62:16:fb:96:9a:2b:9e:19:ed:2f:8c:1d:58:cb:
         5f:7c:b9:84:10:0b:dc:bd:a6:a7:11:56:24:4f:ad:ba:ff:dc:
         20:7b:96:f1:5b:76:c8:2c:3d:cf:23:82:3f:ad:ca:07:6f:51:
         fc:cf:3b:7f:65:f5:70:73:0d:f2:d5:93:9d:6b:83:da:15:65:
         64:b5:bb:ac:7e:67:04:39:1f:d0:a5:95:e2:10:98:cc:02:b1:
         a0:1b:65:31:a4:0d:ba:a8:66:6a:89:3c:97:0b:fd:e7:6e:99:
         9c:d3:19:0c:c2:bd:d0:a3:47:87:41:ce:7b:fa:19:ef:76:81:
         a6:a7:98:04:dc:46:a5:5e:e7:c7:68:e7:0e:f6:25:93:f8:4a:
         6e:d8:da:1b:c7:39:7e:87:d9:ce:1f:15:cc:33:04:19:6b:b2:
         9e:03:32:09:47:e3:8a:df:85:96:f3:6b:5f:f5:28:b3:2d:59:
         6e:38:15:85:7d:89:be:dd:4b:8c:9a:52:b2:70:19:e3:8b:44:
         2f:56:09:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:05:42 2025 by rpki-client