Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156/a46225f6-f3ab-3e62-91c2-70b856047072.roa
File:                     a46225f6-f3ab-3e62-91c2-70b856047072.roa (raw, json)
Hash identifier:          jm6FqDCIA9sMEe8rhhSGlEBnEHUsk7OXcRyG5UEb6SQ=
Subject key identifier:   B5:80:15:8E:23:69:45:3A:67:A1:E0:32:BE:AE:55:63:2C:98:CE:83
Certificate issuer:       /CN=fccf3604-03c5-4074-aed5-6cf7161bf156
Certificate serial:       010D0C9F43285847B3CC18B2E9B9AE21A2F63500
Authority key identifier: BB:3A:1F:F8:92:62:5B:8E:16:42:C4:97:38:65:83:18:83:24:00:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156/a46225f6-f3ab-3e62-91c2-70b856047072.roa
Signing time:             Tue 29 Oct 2024 13:00:40 +0000
ROA not before:           Tue 29 Oct 2024 13:00:40 +0000
ROA not after:            Mon 27 Jan 2025 14:00:40 +0000
asID:                     399250
IP address blocks:        45.41.235.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156/fccf3604-03c5-4074-aed5-6cf7161bf156.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156/fccf3604-03c5-4074-aed5-6cf7161bf156.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b3:cc:18:b2:e9:b9:ae:21:a2:f6:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fccf3604-03c5-4074-aed5-6cf7161bf156
        Validity
            Not Before: Oct 29 13:00:40 2024 GMT
            Not After : Jan 27 14:00:40 2025 GMT
        Subject: CN=9a6910b0-2674-41f8-a7c3-dbe58e25b501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d4:58:29:2d:d8:13:ac:be:d3:a5:39:79:44:
                    8a:de:f3:28:6e:c9:fc:c8:3f:74:a4:25:5b:67:8a:
                    5f:82:27:e3:d8:5c:41:8a:36:f0:1d:42:b7:04:39:
                    e9:99:43:16:7f:85:b7:e9:ca:a2:89:cf:85:b2:aa:
                    4c:42:88:43:db:42:7b:34:0a:f9:09:c1:7d:4b:8b:
                    4b:d5:09:aa:0f:42:c6:3b:dd:f7:b7:f4:c7:ff:76:
                    d2:8e:d7:00:6e:b1:fa:1a:52:e8:44:e2:b0:5f:18:
                    9b:25:72:60:41:7e:81:d2:3b:6a:a5:34:cf:46:38:
                    b2:25:96:43:6b:35:fe:6f:06:ad:5e:18:b2:bd:f9:
                    67:94:b2:b2:f0:d0:8b:70:29:c1:f5:19:80:4e:ac:
                    3a:15:59:61:da:12:7b:9d:07:58:fc:80:97:f0:3f:
                    7f:5b:69:ca:a0:c9:c7:b9:82:da:51:e5:a8:be:54:
                    8b:d9:bc:39:cb:e7:9e:2c:ed:27:bc:5a:d3:a4:f9:
                    68:cf:73:b7:65:66:ed:5d:36:97:4d:ee:35:d3:a3:
                    d1:18:b4:68:fc:43:a9:36:fd:3f:9c:c3:36:8c:a4:
                    06:a8:2f:3a:ad:35:77:c6:14:bb:0b:ad:55:aa:73:
                    ca:f0:f2:92:6c:50:f1:17:85:3c:89:55:0b:e4:66:
                    ab:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:80:15:8E:23:69:45:3A:67:A1:E0:32:BE:AE:55:63:2C:98:CE:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156/a46225f6-f3ab-3e62-91c2-70b856047072.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156/fccf3604-03c5-4074-aed5-6cf7161bf156.crl

            X509v3 Authority Key Identifier:
                keyid:BB:3A:1F:F8:92:62:5B:8E:16:42:C4:97:38:65:83:18:83:24:00:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.41.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:b9:9a:57:2a:39:ca:ae:8a:74:60:55:18:bb:d1:02:5a:2b:
         39:80:f3:35:ff:b7:23:7d:35:23:94:75:64:c6:9c:f3:e2:a3:
         11:78:76:a2:bb:3c:2d:d7:cb:c6:9f:e9:3a:30:17:5a:57:a8:
         da:d4:57:c1:56:8f:c3:6f:5a:48:0d:f0:54:63:30:04:31:eb:
         87:f3:8c:d7:ab:b7:ff:b7:79:0f:69:90:77:84:5d:42:7f:b6:
         27:7e:b6:b9:71:01:69:28:a9:c9:5e:53:ba:99:05:f0:f5:6d:
         7a:24:99:b3:2f:4c:de:3e:38:a7:84:db:99:91:48:f4:e2:9f:
         63:d5:32:c9:8e:ed:24:e7:3a:c0:9f:34:a8:87:3c:ba:b6:c5:
         85:b5:e5:ae:65:36:14:e0:77:b0:05:ec:84:d2:70:24:23:c0:
         59:6c:1c:95:6f:ec:a7:ff:b9:58:61:e1:47:69:42:b1:d5:2c:
         8f:0c:bd:45:40:bd:8b:db:be:35:23:34:fd:7d:5f:bc:5b:8c:
         c3:5b:c7:0b:2b:b7:46:8e:01:e0:86:10:cf:76:ee:6c:0a:82:
         17:c4:04:c7:64:69:a2:b8:26:9a:66:6a:df:1d:1f:d9:fe:26:
         6c:84:a3:e0:2d:75:07:31:64:81:9b:be:c1:36:1c:75:a0:e9:
         24:8e:63:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:16 2024 by rpki-client on console-ams.rpki-client.org