Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5de51b16-a11d-3993-ade0-ae17cf4a7afc.roa
File:                     5de51b16-a11d-3993-ade0-ae17cf4a7afc.roa (raw, json)
Hash identifier:          aDDEdKklGncUz/r5DpW7l8pDjgJke3lne9YTXuxY+QA=
Subject key identifier:   8C:A6:C7:81:D6:0E:17:D3:06:97:1E:A1:CF:F6:C3:8A:0D:B3:0A:0A
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858477EC111CA48098186792AB1C0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5de51b16-a11d-3993-ade0-ae17cf4a7afc.roa
Signing time:             Thu 10 Oct 2024 13:00:41 +0000
ROA not before:           Thu 10 Oct 2024 13:00:41 +0000
ROA not after:            Wed 08 Jan 2025 14:00:41 +0000
asID:                     270764
IP address blocks:        45.40.99.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7e:c1:11:ca:48:09:81:86:79:2a:b1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Oct 10 13:00:41 2024 GMT
            Not After : Jan  8 14:00:41 2025 GMT
        Subject: CN=f92bf929-e725-409d-a5f8-e487eb676e66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:23:bc:3d:63:93:5b:68:41:f8:a5:0a:80:1b:
                    21:4a:c0:fa:c2:a3:3f:0c:b8:2c:09:f9:4b:07:18:
                    54:06:47:04:de:92:8c:61:38:b6:34:3e:ab:50:76:
                    32:04:5f:66:e1:29:8e:4f:7e:a9:09:b2:28:36:0a:
                    16:73:36:17:f2:58:6c:a3:b8:ab:6a:36:e4:73:1f:
                    e8:62:51:99:36:bc:2c:78:01:36:f7:b9:4f:96:82:
                    24:f2:c2:29:a7:88:a6:82:18:f3:aa:27:51:59:1d:
                    dd:af:bb:ac:8b:2f:ea:c1:a8:c9:6a:91:5e:eb:77:
                    d2:40:ef:6b:47:70:5f:05:c8:d9:f2:0d:81:37:bb:
                    1c:80:fe:8d:9b:c0:80:10:94:6d:3c:d5:ee:c4:13:
                    ac:c2:50:19:5e:61:1a:1b:54:ef:78:7f:67:b9:ea:
                    70:5a:bc:9e:42:b6:a7:74:eb:33:65:67:22:a6:82:
                    15:19:df:0d:32:ac:a0:8c:41:9a:8b:00:00:bd:8d:
                    62:05:f0:19:f5:5d:cc:c4:44:62:4d:72:e5:ec:01:
                    52:f5:5b:42:38:e4:a1:b1:55:12:70:0f:a3:5f:35:
                    bc:fc:a3:a6:50:41:ae:b2:38:d8:31:c5:e1:eb:7f:
                    18:35:a4:62:51:cd:4e:d4:42:df:75:e5:78:88:05:
                    d6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:A6:C7:81:D6:0E:17:D3:06:97:1E:A1:CF:F6:C3:8A:0D:B3:0A:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5de51b16-a11d-3993-ade0-ae17cf4a7afc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.40.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d8:d3:ba:78:3d:71:21:1f:b4:70:4c:eb:d0:1c:92:dc:64:f3:
         62:c5:37:9f:45:c4:6f:c5:5b:c4:13:e1:57:79:c5:6e:49:2d:
         2f:0e:ad:94:15:01:3e:7c:77:b8:e2:6a:cc:26:9e:d7:df:69:
         d4:23:68:33:6d:a5:4f:f6:b8:ef:9a:6e:e2:e9:b5:95:cd:56:
         9b:fd:b9:ea:63:d5:4a:cb:60:c5:23:17:03:9d:03:8c:f1:41:
         13:71:02:d3:e0:16:e5:63:a5:ea:62:28:75:21:66:73:c7:a9:
         bf:a7:d5:a9:05:fa:9c:1a:48:4a:da:55:a7:10:ce:f2:89:5b:
         fc:f4:69:6a:16:b1:8e:76:78:b5:72:39:3e:a8:b3:98:e4:7c:
         e4:c8:c2:42:24:4e:e3:37:40:5c:33:98:5e:b8:b4:eb:1a:a2:
         e9:45:f4:04:d7:e4:9e:58:50:35:73:0c:61:15:0c:3b:4c:1e:
         53:43:03:81:19:80:40:e6:5d:59:ab:79:df:83:9e:b1:24:f9:
         bd:14:37:9d:62:99:ea:9d:53:7e:03:ff:73:1e:81:dc:fe:6d:
         28:bc:7b:51:2b:08:9c:75:3e:95:60:b0:fe:46:bf:b7:da:95:
         36:15:75:c2:2e:30:cb:15:9d:8e:8a:60:47:2c:aa:6c:d3:e3:
         3a:60:4a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:29 2024 by rpki-client on console-fra.rpki-client.org