Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/c7deab7e-d3b7-33fb-a2a6-fb8f6f91d319.roa
File:                     c7deab7e-d3b7-33fb-a2a6-fb8f6f91d319.roa (raw, json)
Hash identifier:          K+3i1npbl7WymuVt6c7xGCHzNJeG3UOSVwn+FF0oowQ=
Subject key identifier:   B6:54:23:9B:FC:03:26:64:6A:77:CE:40:7B:44:5C:12:5A:E7:5F:02
Certificate issuer:       /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Certificate serial:       010D0C9F4328584774FB92BFBE1FDC6064DBC580
Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/c7deab7e-d3b7-33fb-a2a6-fb8f6f91d319.roa
Signing time:             Mon 07 Oct 2024 01:00:31 +0000
ROA not before:           Mon 07 Oct 2024 01:00:31 +0000
ROA not after:            Sun 05 Jan 2025 02:00:31 +0000
asID:                     10747
IP address blocks:        45.42.32.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:74:fb:92:bf:be:1f:dc:60:64:db:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
        Validity
            Not Before: Oct  7 01:00:31 2024 GMT
            Not After : Jan  5 02:00:31 2025 GMT
        Subject: CN=ff1e731f-4dbf-4059-94c0-9adba326e3e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e3:d6:cb:be:90:6b:7e:75:fd:d8:d2:0e:d1:
                    72:a6:80:85:13:3a:d7:ff:be:09:14:7f:8d:c2:ea:
                    3c:83:c9:5a:26:31:18:8e:30:f2:f7:74:49:ad:0d:
                    f3:86:45:87:3e:0d:88:ae:ed:45:31:f6:1c:c5:47:
                    f8:b9:e6:f0:29:6f:e0:9b:79:91:20:ba:75:64:0f:
                    da:dc:86:6c:d7:e0:4e:f5:0e:4a:70:67:d6:01:ca:
                    a9:25:d5:33:b0:24:b4:e9:71:97:30:ea:a9:59:e2:
                    f8:5c:30:63:63:05:53:44:bc:f2:e2:98:d6:f5:29:
                    cc:bb:a3:70:53:11:33:f9:c3:e4:28:31:9c:bb:44:
                    0a:8b:0f:c9:d8:7e:3b:ff:5c:43:9a:95:f4:e5:87:
                    7c:c3:0f:70:c7:a1:6e:af:51:36:5c:d9:5e:04:bb:
                    bd:84:8e:b4:ec:91:eb:e3:aa:48:05:4d:61:ff:33:
                    bb:21:ec:5f:4e:df:af:da:49:34:cd:5d:75:c6:42:
                    2c:8b:97:74:f0:11:52:29:35:f3:32:98:f5:c5:be:
                    38:91:c4:1c:7a:57:5c:c4:6a:8f:67:69:d5:78:28:
                    51:0c:b2:9f:d5:8c:b8:8b:76:68:6a:4b:4b:ef:f7:
                    89:f6:c1:e9:9e:23:f1:41:a6:e1:af:5c:a9:00:9f:
                    36:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:54:23:9B:FC:03:26:64:6A:77:CE:40:7B:44:5C:12:5A:E7:5F:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/c7deab7e-d3b7-33fb-a2a6-fb8f6f91d319.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:1a:4b:17:c6:4a:57:40:f7:2e:9f:30:9e:b3:19:6e:71:91:
         91:44:ad:72:87:33:91:6a:cf:66:37:6d:d5:2b:2f:48:d9:95:
         88:ea:7e:15:e4:41:bd:19:67:2d:53:54:76:ad:0f:96:36:8f:
         4b:ed:4d:c7:55:5e:c8:5b:ef:41:5e:6d:89:20:3b:50:58:90:
         96:c3:3f:07:80:dd:d4:31:22:e8:47:3b:a0:17:13:e7:9c:06:
         23:a4:31:aa:37:ca:5e:04:6a:12:c8:d1:e2:1d:ca:36:4b:5e:
         c2:d9:b5:e3:fe:00:e4:0c:a6:7c:cf:e7:ed:6e:6a:84:17:7e:
         d6:ed:8a:4b:0f:4b:ff:e7:c1:35:a8:1f:bc:09:6c:2e:c9:d1:
         e7:29:7b:e7:58:24:c7:e5:be:5d:af:ac:dd:84:63:8d:41:8d:
         e3:1d:72:2b:d5:d8:60:80:86:bc:30:5a:82:0f:27:11:4d:23:
         ab:6c:7d:b3:97:c3:69:07:d9:ed:d7:00:f7:9b:57:b2:56:00:
         da:94:96:87:59:17:52:eb:a9:b0:ad:ea:6f:e0:61:40:f3:6e:
         37:1c:39:f4:ec:d5:9d:01:94:14:a6:f6:2a:db:7a:6c:1c:da:
         73:1d:a2:f7:e5:ab:05:3e:1c:17:d6:8c:db:12:b3:ae:2b:11:
         81:eb:20:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:29:22 2024 by rpki-client on console-ams.rpki-client.org