Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2/2230beeb-2996-34ed-a68e-dd8539349931.roa
File:                     2230beeb-2996-34ed-a68e-dd8539349931.roa (raw, json)
Hash identifier:          /RfD+Sy5UTs85kWlyXMQIZsvh3cPWLdKmu0zhY7TfaU=
Subject key identifier:   86:96:96:C6:D2:ED:3E:4E:D7:91:DC:A4:B2:C8:FB:BE:60:60:6B:03
Certificate issuer:       /CN=2dd18d53-59c8-427f-9c2f-1f62eab97cb2
Certificate serial:       010D0C9F4328584574B320566A9234E83EEACA40
Authority key identifier: 09:BA:D3:03:4B:6A:2C:C1:74:41:89:81:CB:15:5B:65:64:42:FF:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2/2230beeb-2996-34ed-a68e-dd8539349931.roa
Signing time:             Sat 06 Apr 2024 13:00:35 +0000
ROA not before:           Sat 06 Apr 2024 13:00:35 +0000
ROA not after:            Fri 05 Jul 2024 13:00:35 +0000
asID:                     174
IP address blocks:        45.41.54.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2/2dd18d53-59c8-427f-9c2f-1f62eab97cb2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2/2dd18d53-59c8-427f-9c2f-1f62eab97cb2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:74:b3:20:56:6a:92:34:e8:3e:ea:ca:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dd18d53-59c8-427f-9c2f-1f62eab97cb2
        Validity
            Not Before: Apr  6 13:00:35 2024 GMT
            Not After : Jul  5 13:00:35 2024 GMT
        Subject: CN=0f2af79a-bbe3-454e-80f4-d13b938a9bf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:98:71:17:f1:23:6a:5b:4b:e9:05:0c:05:0e:
                    d1:1d:44:18:e4:cc:6e:63:63:2f:5f:d5:27:2b:b9:
                    07:c2:46:2a:c2:b7:c8:7a:c6:72:09:71:4d:35:bc:
                    ff:fd:ce:7b:b8:e6:6e:27:7a:d5:16:e3:53:00:21:
                    39:29:22:c5:5e:3c:21:b3:57:dc:2f:d5:8f:28:be:
                    8e:e9:46:3b:18:7a:0f:59:b5:3e:0c:db:7d:3a:91:
                    4d:2f:63:f5:74:e5:15:08:e6:92:2b:46:df:c3:4d:
                    16:6b:7c:0a:cc:6d:b1:53:f5:b1:d4:b2:40:0a:9f:
                    33:72:06:38:0e:0a:81:4d:37:09:fb:ce:de:9a:c6:
                    26:38:f7:19:2b:a9:df:b7:a4:7c:3d:77:ba:5f:70:
                    52:42:f5:73:e4:62:77:30:eb:82:08:ef:f8:2f:59:
                    b3:31:3c:ca:15:96:74:e3:98:f0:3d:de:7b:42:15:
                    82:67:64:66:ee:24:ed:99:d3:ff:f3:1f:9b:42:c7:
                    23:dd:d2:89:bd:e9:cc:c8:e5:16:bd:21:3d:7c:33:
                    1d:d9:b3:38:9d:dd:a1:7a:ae:2a:6f:55:0d:ed:7c:
                    9d:b5:ee:56:e4:2f:ce:e0:4f:65:9b:fb:57:aa:fc:
                    42:39:66:a4:8d:2f:e4:9a:c9:ea:81:27:e5:be:18:
                    b9:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:96:96:C6:D2:ED:3E:4E:D7:91:DC:A4:B2:C8:FB:BE:60:60:6B:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2/2230beeb-2996-34ed-a68e-dd8539349931.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2/2dd18d53-59c8-427f-9c2f-1f62eab97cb2.crl

            X509v3 Authority Key Identifier:
                keyid:09:BA:D3:03:4B:6A:2C:C1:74:41:89:81:CB:15:5B:65:64:42:FF:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.41.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:4f:32:27:ba:17:93:f7:98:01:42:fc:2b:a9:0d:c8:2a:62:
         94:01:f9:1a:e8:3d:61:59:84:17:88:56:96:31:d5:fc:6a:a8:
         b1:52:22:b5:82:3a:e9:bb:1c:39:3c:f6:54:60:31:ab:b6:a3:
         ca:02:29:11:9f:cb:88:f8:25:61:d5:1e:bc:d9:cb:92:3a:f3:
         79:3d:2d:08:66:d3:02:fb:f1:7a:1f:25:ef:d2:63:c6:15:67:
         05:8e:f5:11:89:e0:88:87:e8:67:65:2d:98:2c:2d:7b:91:b9:
         e5:d6:2e:b9:bf:d5:da:db:d1:00:8d:da:7a:8e:9b:f7:43:4b:
         d0:94:fd:22:df:14:6b:a6:f3:52:3b:2a:b2:cd:ff:95:0f:44:
         e1:30:a7:a7:b5:d7:36:6b:7b:55:be:ed:4b:02:22:df:9e:1f:
         ff:a8:32:9f:9e:bf:45:a4:ad:46:d8:2f:68:35:fa:d0:cd:90:
         b3:ee:3b:7d:85:e9:f0:f0:60:4b:10:ac:67:83:f6:e2:02:99:
         86:dd:62:81:1d:fd:95:c4:2c:4d:cf:b4:d6:5d:4f:38:77:ed:
         95:0d:11:e7:a0:78:32:2d:7d:20:61:02:b4:fd:12:1e:99:7d:
         bc:12:9a:13:5a:1d:85:fe:ec:30:0d:39:63:14:ec:c3:5c:b7:
         09:03:02:59
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEV0syBWapI06D7qykAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmRkMThkNTMtNTljOC00MjdmLTljMmYtMWY2MmVhYjk3
Y2IyMB4XDTI0MDQwNjEzMDAzNVoXDTI0MDcwNTEzMDAzNVowLzEtMCsGA1UEAxMk
MGYyYWY3OWEtYmJlMy00NTRlLTgwZjQtZDEzYjkzOGE5YmY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JhxF/EjaltL6QUMBQ7RHUQY5MxuY2MvX9Un
K7kHwkYqwrfIesZyCXFNNbz//c57uOZuJ3rVFuNTACE5KSLFXjwhs1fcL9WPKL6O
6UY7GHoPWbU+DNt9OpFNL2P1dOUVCOaSK0bfw00Wa3wKzG2xU/Wx1LJACp8zcgY4
DgqBTTcJ+87emsYmOPcZK6nft6R8PXe6X3BSQvVz5GJ3MOuCCO/4L1mzMTzKFZZ0
45jwPd57QhWCZ2Rm7iTtmdP/8x+bQscj3dKJvenMyOUWvSE9fDMd2bM4nd2heq4q
b1UN7Xydte5W5C/O4E9lm/tXqvxCOWakjS/kmsnqgSflvhi5gQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIaWlsbS7T5O15HcpLLI+75gYGsDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yZGQx
OGQ1My01OWM4LTQyN2YtOWMyZi0xZjYyZWFiOTdjYjIvMjIzMGJlZWItMjk5Ni0z
NGVkLWE2OGUtZGQ4NTM5MzQ5OTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMmRkMThkNTMtNTljOC00MjdmLTlj
MmYtMWY2MmVhYjk3Y2IyLzJkZDE4ZDUzLTU5YzgtNDI3Zi05YzJmLTFmNjJlYWI5
N2NiMi5jcmwwHwYDVR0jBBgwFoAUCbrTA0tqLMF0QYmByxVbZWRC/80wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8yZGQxOGQ1My01OWM4LTQyN2YtOWMyZi0xZjYy
ZWFiOTdjYjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSk2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIJPMie6F5P3mAFC/CupDcgqYpQB+RroPWFZhBeIVpYx1fxqqLFSIrWC
Oum7HDk89lRgMau2o8oCKRGfy4j4JWHVHrzZy5I683k9LQhm0wL78XofJe/SY8YV
ZwWO9RGJ4IiH6GdlLZgsLXuRueXWLrm/1drb0QCN2nqOm/dDS9CU/SLfFGum81I7
KrLN/5UPROEwp6e11zZre1W+7UsCIt+eH/+oMp+ev0WkrUbYL2g1+tDNkLPuO32F
6fDwYEsQrGeD9uICmYbdYoEd/ZXELE3PtNZdTzh37ZUNEeegeDItfSBhArT9Eh6Z
fbwSmhNaHYX+7DANOWMU7MNctwkDAlk=
-----END CERTIFICATE-----
Generated at Sat Apr 27 15:34:23 2024 by rpki-client on console-ams.rpki-client.org