Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e2bc6f16-053a-3a92-8d30-51e4c4f96b16.roa
File:                     e2bc6f16-053a-3a92-8d30-51e4c4f96b16.roa (raw, json)
Hash identifier:          Ac/QOzJ1hbEprReAMSL5wAcj2/s71H+7jlQqlkSIAJY=
Subject key identifier:   75:BD:6C:04:63:61:B5:53:4B:17:96:DF:1C:F5:11:F4:F6:C0:E4:8B
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285845A7C46A2220C632AEA93E8480
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e2bc6f16-053a-3a92-8d30-51e4c4f96b16.roa
Signing time:             Wed 24 Apr 2024 20:01:49 +0000
ROA not before:           Wed 24 Apr 2024 20:01:49 +0000
ROA not after:            Tue 23 Jul 2024 20:01:49 +0000
asID:                     12271
IP address blocks:        45.39.52.0/24 maxlen: 24
                          45.39.87.0/24 maxlen: 24
                          45.39.171.0/24 maxlen: 24
                          45.39.178.0/24 maxlen: 24
                          45.39.185.0/24 maxlen: 24
                          45.39.188.0/24 maxlen: 24
                          45.39.239.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a7:c4:6a:22:20:c6:32:ae:a9:3e:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 24 20:01:49 2024 GMT
            Not After : Jul 23 20:01:49 2024 GMT
        Subject: CN=e4214a52-4162-4fde-9e45-097e816610af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:30:bc:56:5a:b4:12:8c:45:ce:ce:29:6b:80:
                    71:30:f1:68:64:e4:65:80:50:6a:7a:9f:3d:6f:16:
                    6f:25:ef:92:8a:28:de:3c:8c:bb:52:19:4a:5b:2d:
                    cb:5e:58:70:ce:d2:bc:df:7a:19:ad:e0:ce:7c:0f:
                    df:85:3d:f0:1d:c4:06:0d:bd:57:d0:b6:b6:a3:2f:
                    08:02:15:95:90:90:c8:42:c4:c6:56:33:0a:16:a7:
                    8e:46:05:e1:3e:c8:b2:dc:75:c6:24:6d:4f:fd:9f:
                    2d:c4:13:53:47:79:c9:85:83:c8:b9:57:6f:27:81:
                    a2:8f:12:6d:dd:6b:2f:07:42:1d:96:e9:19:c2:09:
                    82:1f:93:94:ae:ef:46:30:5a:ad:10:35:07:07:53:
                    cf:1c:30:0b:04:fe:44:2d:89:74:64:50:52:b4:39:
                    df:bc:38:15:89:b5:bb:5b:19:60:78:45:f5:ac:fc:
                    f9:7c:1d:88:e3:c3:58:d7:d5:62:d2:62:89:de:c2:
                    dd:7d:44:77:56:fb:fb:8c:e6:9c:cf:37:12:6a:cb:
                    b0:04:9b:b9:60:4d:25:27:9f:ef:85:7d:06:7e:cc:
                    d2:1d:04:be:51:f6:c3:c2:35:f3:58:5a:44:5f:d8:
                    98:eb:19:7f:df:71:25:3b:d9:bf:34:6d:5e:be:a5:
                    08:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:BD:6C:04:63:61:B5:53:4B:17:96:DF:1C:F5:11:F4:F6:C0:E4:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e2bc6f16-053a-3a92-8d30-51e4c4f96b16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.52.0/24
                  45.39.87.0/24
                  45.39.171.0/24
                  45.39.178.0/24
                  45.39.185.0/24
                  45.39.188.0/24
                  45.39.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:e9:96:59:35:be:89:41:b3:d8:bb:e8:50:a5:7c:dd:5e:41:
         fe:26:a5:91:b8:62:a9:ad:a5:39:1f:30:98:b5:1f:f9:f2:74:
         75:82:a1:a1:eb:85:43:6e:49:90:a4:da:e9:35:41:b0:a7:40:
         cf:fb:a4:b2:b2:01:9c:d7:31:b5:9c:1e:07:60:86:f8:f4:fa:
         21:52:71:a4:fd:4d:75:ba:e9:cc:2b:f0:f0:6a:16:1a:43:d8:
         c0:0a:9e:74:b6:28:27:de:6f:33:98:ec:c1:0d:78:90:fa:d4:
         8a:33:ff:83:44:90:dd:79:87:41:2e:e6:92:5f:7b:b8:9f:91:
         a6:eb:a6:f0:1f:f1:6c:c8:06:4b:fb:93:83:58:d2:2c:e7:58:
         40:78:79:1d:5f:c6:73:56:67:14:3f:07:e0:9c:27:d5:2c:f5:
         82:27:02:a2:e5:25:45:b2:4a:d9:99:cb:a2:08:55:ca:81:c7:
         6d:3c:e9:70:36:64:60:2f:46:1b:ca:37:f3:0a:8b:da:df:e0:
         eb:8c:5b:e2:7f:66:72:d2:bf:db:53:8f:23:71:8a:0e:9d:6e:
         2e:c8:c4:4e:bb:2e:fe:7a:76:8f:46:9b:7d:2f:75:04:d9:ac:
         b4:cd:76:94:49:df:15:7c:60:e8:3c:23:e7:50:35:9d:31:ac:
         fd:39:17:2b
-----BEGIN CERTIFICATE-----
MIIGZzCCBU+gAwIBAgIUAQ0Mn0MoWEWnxGoiIMYyrqk+hIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI0MDQyNDIwMDE0OVoXDTI0MDcyMzIwMDE0OVowLzEtMCsGA1UEAxMk
ZTQyMTRhNTItNDE2Mi00ZmRlLTllNDUtMDk3ZTgxNjYxMGFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTC8Vlq0EoxFzs4pa4BxMPFoZORlgFBqep89
bxZvJe+SiijePIy7UhlKWy3LXlhwztK833oZreDOfA/fhT3wHcQGDb1X0La2oy8I
AhWVkJDIQsTGVjMKFqeORgXhPsiy3HXGJG1P/Z8txBNTR3nJhYPIuVdvJ4GijxJt
3WsvB0IdlukZwgmCH5OUru9GMFqtEDUHB1PPHDALBP5ELYl0ZFBStDnfvDgVibW7
WxlgeEX1rPz5fB2I48NY19Vi0mKJ3sLdfUR3Vvv7jOaczzcSasuwBJu5YE0lJ5/v
hX0GfszSHQS+UfbDwjXzWFpEX9iY6xl/33ElO9m/NG1evqUI0wIDAQABo4IDeTCC
A3UwHQYDVR0OBBYEFHW9bARjYbVTSxeW3xz1EfT2wOSLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZTJiYzZmMTYtMDUzYS0z
YTkyLThkMzAtNTFlNGM0Zjk2YjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQALSc0AwQA
LSdXAwQALSerAwQALSeyAwQALSe5AwQALSe8AwQALSfvMFQGA1UdIAEB/wRKMEgw
RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv
cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADLpllk1
volBs9i76FClfN1eQf4mpZG4YqmtpTkfMJi1H/nydHWCoaHrhUNuSZCk2uk1QbCn
QM/7pLKyAZzXMbWcHgdghvj0+iFScaT9TXW66cwr8PBqFhpD2MAKnnS2KCfebzOY
7MENeJD61Ioz/4NEkN15h0Eu5pJfe7ifkabrpvAf8WzIBkv7k4NY0iznWEB4eR1f
xnNWZxQ/B+CcJ9Us9YInAqLlJUWyStmZy6IIVcqBx2086XA2ZGAvRhvKN/MKi9rf
4OuMW+J/ZnLSv9tTjyNxig6dbi7IxE67Lv56do9Gm30vdQTZrLTNdpRJ3xV8YOg8
I+dQNZ0xrP05Fys=
-----END CERTIFICATE-----
Generated at Sat May 4 15:02:29 2024 by rpki-client on console-fra.rpki-client.org