Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/59b957d5-094c-3127-88af-9c2da0773434.roa
File:                     59b957d5-094c-3127-88af-9c2da0773434.roa (raw, json)
Hash identifier:          40KoEndVp3xCw2x0gNzVBXQCXlSX6KdPozCT34SMp7Y=
Subject key identifier:   07:A1:AA:43:18:1B:FA:D3:DD:C3:56:27:3E:FC:32:D9:29:12:DD:36
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285847F163A63D0B88B500C5933240
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/59b957d5-094c-3127-88af-9c2da0773434.roa
Signing time:             Wed 20 Nov 2024 14:30:33 +0000
ROA not before:           Wed 20 Nov 2024 14:30:33 +0000
ROA not after:            Tue 18 Feb 2025 14:30:33 +0000
asID:                     48031
IP address blocks:        45.39.111.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f1:63:a6:3d:0b:88:b5:00:c5:93:32:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Nov 20 14:30:33 2024 GMT
            Not After : Feb 18 14:30:33 2025 GMT
        Subject: CN=e99cfd21-0862-41b8-8fdc-c0feff359e53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:61:5f:c0:e7:14:82:2e:25:52:58:9f:10:34:
                    dc:d8:e6:50:0c:3e:9d:2c:91:19:6b:cc:67:1d:4b:
                    e0:14:7c:a0:92:7c:45:94:0c:55:f4:3c:d3:82:31:
                    fc:10:cf:1d:50:94:7d:70:4a:07:de:65:31:38:c8:
                    00:08:c6:6f:0e:40:4f:70:3b:19:e0:e4:01:90:55:
                    19:a8:13:e0:96:0c:a8:f3:b4:6b:91:50:3b:07:e7:
                    e1:80:5d:6a:2e:af:96:bf:5d:69:6e:43:5d:cc:1b:
                    cd:3d:1d:f8:82:e7:ca:af:72:53:b5:fd:c4:64:e3:
                    01:28:7a:a8:69:a7:80:94:b3:ed:75:08:4d:b8:a4:
                    d2:7b:39:d9:99:83:98:f1:e3:57:3f:af:84:fd:47:
                    b3:e4:09:df:f1:e4:50:78:69:aa:6e:c8:2e:bc:37:
                    35:19:03:3a:5d:3b:31:4c:c3:a6:43:bf:d4:1d:6e:
                    11:1a:05:e4:35:38:b8:a6:ca:48:6f:74:d7:95:39:
                    b0:33:d3:68:d2:38:b5:0e:51:48:12:fe:c1:d6:b6:
                    c3:07:cd:3a:18:e8:c3:d7:5e:fc:22:d4:be:89:68:
                    d7:43:ee:e1:1f:99:b2:6f:33:66:e3:27:3b:0e:0a:
                    9a:86:f5:fe:c2:d7:e4:b0:71:31:8a:7c:93:c8:87:
                    c8:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:A1:AA:43:18:1B:FA:D3:DD:C3:56:27:3E:FC:32:D9:29:12:DD:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/59b957d5-094c-3127-88af-9c2da0773434.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:a9:9a:a1:8e:81:0e:9f:68:ad:21:71:a2:e8:47:93:7b:13:
         21:7c:51:11:cd:cf:95:be:bb:9f:55:6b:ce:e7:90:f6:4d:46:
         73:67:59:f2:56:35:72:2b:cb:2d:19:ad:da:0b:cd:2d:63:a5:
         bc:f9:b6:a6:f5:de:7c:c4:d9:00:69:07:8d:15:94:4d:ba:40:
         2f:93:2a:7a:5f:23:eb:63:b8:cc:0e:13:0c:a7:11:f5:1d:75:
         dc:b7:45:1b:62:9b:3a:a6:31:03:d7:b7:c3:20:cb:5a:92:28:
         68:25:f8:b0:dc:e8:e4:6d:d2:99:9e:4a:69:6a:42:e6:6b:c6:
         ca:dc:85:eb:32:b7:19:bd:75:c0:0b:b0:4a:5c:d7:59:31:42:
         ad:61:8e:eb:89:3b:84:4f:80:b2:b5:eb:6d:fa:50:04:c5:86:
         20:74:60:47:11:14:53:f3:0e:d6:ae:af:fb:15:b7:c7:e7:67:
         d5:d7:dd:1b:c1:e2:09:5d:e9:60:00:ca:b1:fb:8f:5e:d5:cc:
         98:93:ac:86:07:cc:5f:7c:fc:1c:76:11:30:f9:53:01:96:0d:
         2a:36:cd:4e:38:6b:b5:25:15:57:8b:bd:95:61:95:28:8c:be:
         ff:f3:95:16:ed:73:e4:8b:01:e8:45:9a:cc:75:f6:aa:f2:ca:
         1d:7f:a5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:25:58 2024 by rpki-client on console-fra.rpki-client.org