Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9f9b5395-59f6-3dc1-9514-52dd7865a674.roa
File:                     9f9b5395-59f6-3dc1-9514-52dd7865a674.roa (raw, json)
Hash identifier:          DCwXZhOvZjwvq0OcmjeXrNPFT77M1KHxCFbRTcZM734=
Subject key identifier:   EE:0B:D0:52:A6:36:7F:52:AE:0E:2D:88:82:2D:99:AC:1B:77:61:30
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285844E93AA1E0E4B8C9B634C3A600
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9f9b5395-59f6-3dc1-9514-52dd7865a674.roa
Signing time:             Fri 16 Feb 2024 14:00:29 +0000
ROA not before:           Fri 16 Feb 2024 14:00:29 +0000
ROA not after:            Thu 16 May 2024 13:00:29 +0000
asID:                     51847
IP address blocks:        45.39.70.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e9:3a:a1:e0:e4:b8:c9:b6:34:c3:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 16 14:00:29 2024 GMT
            Not After : May 16 13:00:29 2024 GMT
        Subject: CN=4c5a2cbe-afc9-4550-b115-3d4e58faa45d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:00:55:7b:bb:76:13:0d:c9:08:29:3a:ce:fd:
                    0e:29:fe:cd:10:3c:62:6c:e3:09:a1:6a:22:8f:1a:
                    85:f9:8d:6b:3c:65:13:83:17:56:d3:20:c5:df:01:
                    2f:dc:76:9e:97:43:9f:7d:48:5b:12:7c:0b:e2:1b:
                    81:ef:f2:09:c7:e2:9d:2b:c3:1a:ca:4f:54:bc:1c:
                    66:35:2a:18:85:fa:9a:d3:4f:1e:a3:ff:84:1f:00:
                    46:65:4d:6c:da:4a:7b:6f:d7:21:b3:f2:47:8a:5a:
                    d0:b9:a9:ed:c0:bf:15:16:87:65:62:d2:ac:25:13:
                    02:50:b6:b2:dd:fe:fe:fc:ea:b9:5f:a3:9b:0f:ba:
                    0a:78:fb:94:94:b0:47:a9:98:40:bd:7d:82:3c:27:
                    33:19:ad:bb:71:bf:67:30:01:64:6f:aa:37:3d:fa:
                    1d:1e:18:32:ab:e9:d4:6e:9e:ae:05:ba:ec:57:26:
                    54:60:7b:56:38:5c:b3:2b:75:80:d1:2f:69:b0:9b:
                    07:19:1e:fe:59:51:a0:d4:99:bc:2b:86:ee:e3:20:
                    75:de:ff:3a:34:ba:f9:b2:57:ae:2f:28:24:87:f1:
                    6e:fe:fa:bb:78:aa:0a:fc:59:30:31:2f:a1:56:c2:
                    c0:d2:63:1c:8d:0c:66:de:d8:a0:82:6e:0f:6e:86:
                    88:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:0B:D0:52:A6:36:7F:52:AE:0E:2D:88:82:2D:99:AC:1B:77:61:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9f9b5395-59f6-3dc1-9514-52dd7865a674.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.70.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:da:54:e8:90:4f:6b:28:b8:5f:ff:93:99:da:55:7c:ff:9e:
         01:ea:8c:36:14:40:89:97:38:95:1a:83:d8:17:fc:23:41:c0:
         79:87:b5:4f:d5:4d:9e:fb:51:20:00:9f:d2:1a:cd:8b:3f:bc:
         29:cb:b3:da:d2:b9:ab:20:1d:20:14:d7:f4:73:72:ae:a5:0c:
         cf:8e:3f:83:b6:d4:45:26:79:e6:ad:ba:64:2b:19:6a:fd:0b:
         56:3f:64:79:e3:7c:ef:b2:58:06:df:16:0c:f5:ef:79:13:37:
         2a:ff:6a:45:98:80:27:e9:34:67:0e:0b:3a:ad:17:0c:4e:73:
         0b:54:da:61:bb:a2:9c:da:40:9c:9f:0a:65:05:a1:47:07:c1:
         29:d6:7f:f5:e7:fd:0c:f6:9f:6f:c8:47:5e:0f:90:bc:1c:63:
         9a:94:12:31:55:7f:57:f1:c3:77:55:ed:a6:4e:38:1e:ae:f3:
         ad:30:36:09:c6:27:1e:11:93:f0:00:1e:fe:ff:50:b5:eb:ae:
         19:fa:98:23:b6:a2:cd:64:1a:7d:04:34:21:3f:95:94:47:c9:
         7b:78:48:97:29:6f:7b:75:1e:3c:6f:8e:80:c1:3e:f2:72:72:
         7a:7d:99:07:88:d1:ae:27:58:55:1b:3b:e8:ca:d8:7a:2a:47:
         e5:ba:ed:ad
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETpOqHg5LjJtjTDpgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI0MDIxNjE0MDAyOVoXDTI0MDUxNjEzMDAyOVowLzEtMCsGA1UEAxMk
NGM1YTJjYmUtYWZjOS00NTUwLWIxMTUtM2Q0ZTU4ZmFhNDVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgBVe7t2Ew3JCCk6zv0OKf7NEDxibOMJoWoi
jxqF+Y1rPGUTgxdW0yDF3wEv3Hael0OffUhbEnwL4huB7/IJx+KdK8Mayk9UvBxm
NSoYhfqa008eo/+EHwBGZU1s2kp7b9chs/JHilrQuantwL8VFodlYtKsJRMCULay
3f7+/Oq5X6ObD7oKePuUlLBHqZhAvX2CPCczGa27cb9nMAFkb6o3PfodHhgyq+nU
bp6uBbrsVyZUYHtWOFyzK3WA0S9psJsHGR7+WVGg1Jm8K4bu4yB13v86NLr5sleu
Lygkh/Fu/vq7eKoK/FkwMS+hVsLA0mMcjQxm3tiggm4PboaIDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO4L0FKmNn9Srg4tiIItmawbd2EwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvOWY5YjUzOTUtNTlmNi0z
ZGMxLTk1MTQtNTJkZDc4NjVhNjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLSdGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADTaVOiQT2souF//k5naVXz/ngHqjDYUQImXOJUag9gX/CNBwHmHtU/V
TZ77USAAn9IazYs/vCnLs9rSuasgHSAU1/Rzcq6lDM+OP4O21EUmeeatumQrGWr9
C1Y/ZHnjfO+yWAbfFgz173kTNyr/akWYgCfpNGcOCzqtFwxOcwtU2mG7opzaQJyf
CmUFoUcHwSnWf/Xn/Qz2n2/IR14PkLwcY5qUEjFVf1fxw3dV7aZOOB6u860wNgnG
Jx4Rk/AAHv7/ULXrrhn6mCO2os1kGn0ENCE/lZRHyXt4SJcpb3t1HjxvjoDBPvJy
cnp9mQeI0a4nWFUbO+jK2HoqR+W67a0=
-----END CERTIFICATE-----
Generated at Sat May 4 06:57:35 2024 by rpki-client on console-fra.rpki-client.org