Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/06795594-14f2-3170-ac2b-0540310f2214.roa
File:                     06795594-14f2-3170-ac2b-0540310f2214.roa (raw, json)
Hash identifier:          mbOLPYzGAMNWd8Mvgj8ipYCiMfNBu9gaHbjftaEtxTo=
Subject key identifier:   70:99:09:AA:8E:54:01:7B:7E:FB:C1:E6:75:A4:C6:FA:19:E4:0A:15
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584565F4936AD48EE5EAE69AA420
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/06795594-14f2-3170-ac2b-0540310f2214.roa
Signing time:             Mon 01 Apr 2024 06:15:30 +0000
ROA not before:           Mon 01 Apr 2024 06:15:30 +0000
ROA not after:            Sun 30 Jun 2024 06:15:30 +0000
asID:                     400866
IP address blocks:        45.40.116.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Apr 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:65:f4:93:6a:d4:8e:e5:ea:e6:9a:a4:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Apr  1 06:15:30 2024 GMT
            Not After : Jun 30 06:15:30 2024 GMT
        Subject: CN=2e5314ed-a578-4419-8af0-6963ad1e1362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:fa:41:cf:0c:48:04:dd:17:dc:09:92:d0:c7:
                    07:77:7c:b5:87:08:43:e0:6b:67:7b:1c:05:21:2a:
                    b0:e2:8e:28:d2:d3:50:4d:53:5b:29:11:3f:c7:c2:
                    26:89:a0:ca:dd:6d:d8:7b:55:b9:e4:60:f7:20:75:
                    bb:81:4c:29:c2:8a:f9:04:84:02:7e:0b:3d:d5:6f:
                    1a:28:e1:bd:26:21:fa:c8:a6:5c:67:10:46:27:20:
                    fa:93:2f:89:7f:3b:0d:e4:d8:87:4b:0f:df:d5:e6:
                    d6:bd:2c:f4:9d:92:b2:0c:5c:ca:ef:37:49:03:f4:
                    c0:d8:85:28:d0:8b:8e:00:de:cc:67:9f:b8:0b:ec:
                    c5:7b:07:ef:fb:66:9d:e6:fa:31:74:99:90:d9:e7:
                    97:4d:f6:44:0d:7f:c0:8e:03:b5:2c:5f:31:78:22:
                    46:79:d1:af:ce:25:e9:76:dd:77:2e:d8:b0:20:dc:
                    61:aa:e0:48:51:41:b0:94:a5:cf:50:39:e2:c4:15:
                    be:f7:7b:0a:d0:35:cb:81:eb:1f:68:5f:b6:92:7e:
                    38:9c:e2:47:3a:e6:6d:b5:aa:af:e0:5f:e5:0f:bb:
                    7d:01:e7:fe:46:71:27:61:7d:4d:63:06:b5:59:fe:
                    42:99:be:b7:6a:ba:99:f4:c5:b1:69:f5:68:d2:40:
                    a1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:99:09:AA:8E:54:01:7B:7E:FB:C1:E6:75:A4:C6:FA:19:E4:0A:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/06795594-14f2-3170-ac2b-0540310f2214.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.40.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:1e:cd:a0:25:84:40:9d:5e:28:e7:c2:3c:f0:26:eb:6b:10:
         d6:83:f9:83:f5:4f:40:aa:f1:fb:9b:c9:f6:d9:ba:1b:de:78:
         75:36:90:98:5b:6c:20:f8:91:fa:f4:2e:49:cd:46:79:29:9e:
         27:8b:f6:88:90:4b:7f:a3:d3:d7:a0:64:1d:04:ba:f4:d4:61:
         fa:d8:d9:0d:46:66:ea:8f:f4:e6:06:33:bc:db:ef:4a:10:91:
         f3:1f:87:ec:23:a8:60:d7:27:12:4a:08:c8:1d:df:ad:6b:df:
         5a:43:ac:bd:39:02:a6:9c:38:93:d1:f9:68:f9:ef:ff:f3:f2:
         64:6c:b0:e9:3b:42:01:fe:1d:de:bf:f8:40:c5:01:97:5d:40:
         43:66:18:3b:54:9c:7d:7f:0a:cd:3f:65:e8:d3:22:bb:29:ac:
         f7:99:db:62:1c:d9:8f:75:ce:eb:c7:be:6f:c2:c5:1e:72:d4:
         b8:60:fd:c8:00:de:ca:52:a2:4d:8c:af:22:fb:68:f6:c9:38:
         b5:f5:8c:5d:f5:c2:0e:eb:51:3e:68:9b:4d:b7:fc:d9:78:60:
         05:6b:b0:37:72:4a:d4:31:85:b9:bd:48:de:dc:da:13:bd:ce:
         ce:55:f2:26:d5:f6:27:67:5f:1c:34:07:c7:ac:f9:d2:0a:02:
         a0:11:6c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 13:09:13 2024 by rpki-client on console-ams.rpki-client.org