Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d4ce7de3-1548-38b3-b8d3-7bab5a8b0a8e.roa
File:                     d4ce7de3-1548-38b3-b8d3-7bab5a8b0a8e.roa (raw, json)
Hash identifier:          a75WBFdJ8QnR1+Yt9RdV5Mt0hlT4g/9zuOP3Zak7NjY=
Subject key identifier:   A0:EA:5E:5A:2E:87:8B:49:47:C9:1B:52:D0:64:D0:41:D2:4B:6E:1C
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285847F1120A5EBAB4A9510C59BB00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d4ce7de3-1548-38b3-b8d3-7bab5a8b0a8e.roa
Signing time:             Wed 20 Nov 2024 11:46:07 +0000
ROA not before:           Wed 20 Nov 2024 11:46:07 +0000
ROA not after:            Tue 18 Feb 2025 11:46:07 +0000
asID:                     44477
IP address blocks:        45.39.69.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f1:12:0a:5e:ba:b4:a9:51:0c:59:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Nov 20 11:46:07 2024 GMT
            Not After : Feb 18 11:46:07 2025 GMT
        Subject: CN=6b0e2df8-fe5d-43f0-9250-e14cbe8b53b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b4:7f:66:e6:ee:28:09:03:91:67:63:9d:9c:
                    a0:c9:0f:9b:d2:06:fe:1e:a4:fb:da:95:5e:83:40:
                    49:8a:61:18:81:76:56:67:c8:26:21:d0:23:29:94:
                    ac:6c:8c:c6:0e:9b:ae:b9:05:b5:8f:2a:2a:17:89:
                    82:6d:a4:3c:85:b2:b9:f9:a0:d6:ed:ab:35:aa:bf:
                    4f:f6:19:8c:f0:99:fc:83:e1:bc:82:93:62:a2:4c:
                    b2:5b:96:39:53:4f:df:ec:87:7a:4d:c4:d4:af:d0:
                    2a:9a:59:b2:b5:5d:c1:d5:ab:3a:94:d5:1d:51:0c:
                    c7:41:f8:e0:44:78:d8:cb:d1:a1:90:75:af:82:91:
                    26:06:bd:96:15:d0:8f:4d:13:f7:af:e8:ab:79:41:
                    00:51:54:0c:2c:c1:6f:ab:c4:24:ec:07:53:e4:46:
                    56:6e:7c:9b:e9:6f:48:cf:c3:de:ef:76:64:68:8c:
                    40:3d:48:27:e4:3a:84:74:8c:3f:66:20:9f:53:b4:
                    32:30:3d:d4:af:1f:d6:71:49:21:07:f8:f5:1f:65:
                    98:de:11:62:dd:40:33:75:09:20:9f:ab:64:ed:cc:
                    96:d4:41:2d:55:15:3e:08:27:4e:11:be:d1:5a:61:
                    9d:0a:cf:59:98:c3:d9:4d:e3:df:f9:21:cd:8c:79:
                    80:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:EA:5E:5A:2E:87:8B:49:47:C9:1B:52:D0:64:D0:41:D2:4B:6E:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d4ce7de3-1548-38b3-b8d3-7bab5a8b0a8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:90:d1:1c:c2:56:6b:29:3f:bd:10:6f:7d:f3:b2:3e:9c:30:
         e9:5b:c3:ea:d2:b9:20:77:64:f9:cf:58:90:20:24:92:d6:b1:
         00:bf:0a:09:19:c4:f3:9a:f3:68:1e:97:f0:13:41:70:c0:48:
         d1:fe:a4:65:3a:00:8d:f5:45:df:1d:eb:96:3d:a0:74:ec:de:
         64:fc:86:c3:44:b5:40:de:ce:1d:f8:bc:bc:02:8e:49:82:a2:
         d3:e8:f6:1e:6a:8a:b2:85:21:db:00:57:36:3c:64:0e:45:87:
         b8:43:f5:85:d8:52:90:50:ab:ea:1e:ab:fa:6e:ac:d1:dd:59:
         c8:b8:27:37:19:34:2b:9b:b1:ae:a5:d2:08:8a:ba:75:43:76:
         bf:97:b9:dd:6a:48:44:f8:8a:3d:af:2c:56:46:1b:5a:f7:32:
         b5:b5:e2:dc:f9:bb:68:85:5e:b1:c6:59:11:5e:1a:ca:39:09:
         87:98:51:df:18:ed:ec:2f:bf:e7:94:c9:69:c0:72:20:71:9e:
         f7:0b:f3:95:dc:3c:4e:5f:52:e6:7e:6e:8a:95:9a:da:1d:48:
         19:b0:52:c2:cd:79:f2:59:36:1b:52:3d:02:0e:42:0f:13:00:
         39:1b:f4:13:13:82:3f:70:19:09:8a:47:be:b1:58:cc:8e:47:
         a6:5d:3a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:26:01 2024 by rpki-client on console-fra.rpki-client.org