Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494/cd9d4c82-aa04-35e5-91be-f9ec82b9df42.roa
File:                     cd9d4c82-aa04-35e5-91be-f9ec82b9df42.roa (raw, json)
Hash identifier:          rxYPlS0K8/sGAl54fIqErANRv6i9AJRA9usnH6TjOz0=
Subject key identifier:   7F:B6:9C:5A:19:27:11:D8:36:45:2C:26:9F:9C:45:6A:27:8E:DA:03
Certificate issuer:       /CN=e9e262d0-3a64-402e-81e7-5b0829596494
Certificate serial:       010D0C9F432858476E00F82D40DF00172B8A2420
Authority key identifier: D2:1C:79:BE:61:34:D6:A4:48:63:EB:DD:04:A5:92:67:EB:E8:17:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494/cd9d4c82-aa04-35e5-91be-f9ec82b9df42.roa
Signing time:             Fri 04 Oct 2024 13:00:42 +0000
ROA not before:           Fri 04 Oct 2024 13:00:42 +0000
ROA not after:            Thu 02 Jan 2025 14:00:42 +0000
asID:                     7018
IP address blocks:        45.45.208.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494/e9e262d0-3a64-402e-81e7-5b0829596494.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494/e9e262d0-3a64-402e-81e7-5b0829596494.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6e:00:f8:2d:40:df:00:17:2b:8a:24:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9e262d0-3a64-402e-81e7-5b0829596494
        Validity
            Not Before: Oct  4 13:00:42 2024 GMT
            Not After : Jan  2 14:00:42 2025 GMT
        Subject: CN=ff3e15c8-affb-4807-a70d-b3b06f1587fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:90:48:33:60:96:53:e5:52:e1:bb:14:70:11:
                    b4:1b:ca:d7:86:25:86:33:9e:1e:69:84:78:a9:97:
                    01:68:c6:f6:40:64:a8:71:44:0f:a2:24:6e:f4:e5:
                    64:5d:07:06:8c:1d:98:30:ce:cb:7d:50:33:08:60:
                    f7:38:91:0f:90:7d:4a:00:36:ab:0f:45:39:5e:9d:
                    b5:03:a3:16:77:a6:de:a8:d3:25:4f:36:6e:df:99:
                    c5:8a:5b:ae:08:74:49:51:3d:05:35:6a:cf:ae:af:
                    cc:12:1b:36:da:66:5e:53:bd:3c:fd:ae:19:82:68:
                    4f:dc:76:14:a3:d8:2a:a6:5b:f2:10:b7:0d:73:c2:
                    18:73:d7:d3:24:f4:e3:15:bd:ad:7f:a7:db:6f:2f:
                    93:ac:18:77:ab:d1:d2:ce:fc:9f:88:0b:a3:03:fe:
                    a5:d8:fc:22:9e:00:8b:1b:6e:f2:17:c1:01:ab:22:
                    32:9d:34:4b:c6:5a:b7:02:4e:68:92:54:04:ac:74:
                    0b:0a:c7:96:c8:91:39:8f:04:be:ee:c7:53:59:f8:
                    35:00:45:a7:89:a2:11:9b:a6:91:51:76:25:10:83:
                    1c:9c:e3:25:ba:6c:11:b3:ae:6c:2e:5e:0e:7f:c4:
                    ee:f5:a0:1f:8c:8c:a8:de:5f:bf:19:15:f0:86:a5:
                    a2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:B6:9C:5A:19:27:11:D8:36:45:2C:26:9F:9C:45:6A:27:8E:DA:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494/cd9d4c82-aa04-35e5-91be-f9ec82b9df42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494/e9e262d0-3a64-402e-81e7-5b0829596494.crl

            X509v3 Authority Key Identifier:
                keyid:D2:1C:79:BE:61:34:D6:A4:48:63:EB:DD:04:A5:92:67:EB:E8:17:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:e5:d1:38:e5:69:c8:5a:77:df:0c:02:af:b6:d0:50:21:de:
         f9:e5:8b:ff:b0:c9:2e:a5:bb:0e:7b:30:e5:f4:53:ec:f3:81:
         03:e4:59:73:1a:f5:f3:d0:01:b9:0d:e5:73:2b:37:58:4d:82:
         bd:83:a3:7a:6e:ba:7f:97:e6:72:ad:9e:76:59:45:5e:8e:22:
         c3:6f:2a:2f:27:55:58:ec:14:cc:c3:7c:4b:2f:3b:1d:7d:40:
         95:cf:ad:5d:6b:52:92:a4:fb:00:23:2b:cf:1e:45:79:35:62:
         ad:f3:9b:c9:8c:5e:47:ae:d5:ee:ca:9a:5b:96:3b:51:24:09:
         47:36:7c:61:6c:52:93:a9:1f:43:04:c1:a4:ca:8a:bd:1a:2d:
         d7:d6:eb:78:ec:4f:7d:e6:cb:ef:c6:b3:eb:29:6e:4d:4e:9c:
         4d:b4:66:11:c0:23:2e:6d:28:b2:83:52:03:f7:7f:81:33:be:
         d8:47:76:b9:b1:2b:c9:6f:d0:7b:5d:f7:0d:c8:2f:64:b5:b6:
         df:f5:33:ae:b2:ad:17:f2:2b:a7:09:e5:71:d9:e9:3b:72:e1:
         94:77:a9:5e:9e:f7:a1:bc:50:95:f9:ba:2e:41:82:e9:45:93:
         2c:22:0d:d5:08:e9:6e:55:18:fc:2d:12:df:45:42:e2:c8:aa:
         93:5a:5f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:14 2024 by rpki-client on console-ams.rpki-client.org