Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3bdd83d7-6ccf-3505-b172-2ad631645909.roa
File:                     3bdd83d7-6ccf-3505-b172-2ad631645909.roa (raw, json)
Hash identifier:          XqE0XCjuJcbSGAAMudrkJ0MXC/1AQNqZDcOjKWHCRa4=
Subject key identifier:   F7:74:5B:2E:51:45:B5:45:49:24:E8:09:EF:7C:B4:91:99:8F:02:E1
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A0B330FE80A8917E6C2580
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3bdd83d7-6ccf-3505-b172-2ad631645909.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     20001
IP address blocks:        45.59.192.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:b3:30:fe:80:a8:91:7e:6c:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=4ef4c9b0-0b31-46cc-a5c0-d47e05db7632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:90:3c:6d:e4:43:f9:b7:54:af:6e:95:8f:f7:
                    f9:cb:96:de:69:56:cd:06:23:15:e2:c5:f9:71:88:
                    f9:7b:ce:4e:b4:83:5e:84:cf:33:14:d4:6c:0f:ff:
                    35:f5:ed:1d:ac:d1:a3:88:c8:85:66:2b:2b:3e:c9:
                    72:fa:c1:e7:cf:bd:a9:a2:7d:80:2a:8c:97:56:1c:
                    ad:7e:db:66:0e:5e:04:18:2a:84:bb:f2:4b:7e:6e:
                    06:0f:3b:f7:5e:ae:b8:a6:d5:a2:79:c1:c6:02:f6:
                    fa:91:2b:e9:b4:cc:dd:36:e7:4c:dc:9f:13:ec:ab:
                    06:6a:fd:0e:cd:4f:d7:54:a5:d4:28:db:e4:6e:4e:
                    c7:a0:e0:51:69:e7:2a:f3:9b:20:13:d5:4e:e3:e2:
                    5c:f2:ae:b5:1d:7c:e0:c0:6e:16:e6:e4:44:54:03:
                    85:d4:92:dd:14:af:f3:68:e5:ce:24:3e:97:f9:79:
                    2f:d2:65:9d:d5:b5:81:63:f0:75:37:c4:5e:18:38:
                    86:4c:86:fb:a5:37:75:a9:71:50:0b:1b:9b:ea:fe:
                    79:a3:61:96:a5:5f:da:7a:77:2f:90:f9:71:86:e5:
                    9e:67:3b:c5:53:64:2d:ab:6d:7a:3b:65:c5:14:ed:
                    8b:73:9b:89:bc:9c:ab:f7:aa:48:7d:80:70:c3:08:
                    36:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:74:5B:2E:51:45:B5:45:49:24:E8:09:EF:7C:B4:91:99:8F:02:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3bdd83d7-6ccf-3505-b172-2ad631645909.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:92:d3:f5:71:87:fb:0d:46:29:00:0d:1f:24:a1:f0:16:a3:
         93:20:d8:08:58:f2:b7:48:52:e9:3f:db:5b:88:1e:1c:3c:bb:
         10:6d:c0:92:2f:8d:96:f8:94:05:35:5c:2e:86:49:17:47:da:
         8b:c7:0c:14:1f:e1:41:e3:e8:ea:01:f7:12:70:88:ef:10:9e:
         ea:b6:3e:fa:d4:65:05:a8:05:12:1e:a0:49:47:31:52:94:84:
         11:a4:a4:32:05:cf:d7:71:b2:ff:8f:53:46:e0:c7:c5:e7:c4:
         81:06:9c:60:97:a0:65:2b:a5:b5:ee:5d:0f:c8:b8:95:34:1d:
         99:ac:2e:1a:b2:bf:37:a5:34:da:bd:31:4d:e9:52:4a:cd:d3:
         4e:5f:8c:59:74:9d:ad:69:0e:5e:e9:f5:c9:07:09:cd:13:2b:
         ad:d9:0c:83:19:d0:b8:d3:3e:1d:aa:02:86:13:d9:ad:3b:d9:
         69:0c:b7:fd:b8:82:14:60:ee:02:d9:7a:4f:62:de:da:73:ef:
         51:c4:58:ef:12:58:e3:cc:c4:21:ab:9e:94:ed:73:9a:f5:41:
         38:86:3a:09:e3:1a:d0:bb:30:2b:ed:a6:cd:62:5a:4a:18:f5:
         1c:96:dd:25:ee:f8:56:a7:a6:77:e5:e4:05:db:7f:a5:3e:c1:
         31:ac:f8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:24 2024 by rpki-client on console-fra.rpki-client.org