Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2/3eff272e-6bc6-30e8-9e99-720a86cff086.roa
File:                     3eff272e-6bc6-30e8-9e99-720a86cff086.roa (raw, json)
Hash identifier:          en3FRS2oKxul31o1zySGsP/3TYEI5pql9SOlUhc25k0=
Subject key identifier:   5C:89:85:C9:63:BC:A2:FC:3C:A0:89:B2:80:53:7A:DA:5A:BD:EA:68
Certificate issuer:       /CN=2dd18d53-59c8-427f-9c2f-1f62eab97cb2
Certificate serial:       010D0C9F4328584574B32040B7549E8591286C80
Authority key identifier: 09:BA:D3:03:4B:6A:2C:C1:74:41:89:81:CB:15:5B:65:64:42:FF:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2/3eff272e-6bc6-30e8-9e99-720a86cff086.roa
Signing time:             Sat 06 Apr 2024 13:00:35 +0000
ROA not before:           Sat 06 Apr 2024 13:00:35 +0000
ROA not after:            Fri 05 Jul 2024 13:00:35 +0000
asID:                     1239
IP address blocks:        45.41.54.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2/2dd18d53-59c8-427f-9c2f-1f62eab97cb2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2/2dd18d53-59c8-427f-9c2f-1f62eab97cb2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:74:b3:20:40:b7:54:9e:85:91:28:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dd18d53-59c8-427f-9c2f-1f62eab97cb2
        Validity
            Not Before: Apr  6 13:00:35 2024 GMT
            Not After : Jul  5 13:00:35 2024 GMT
        Subject: CN=41f5097a-c1fb-4125-8fc5-6e902c2409b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:97:dd:72:38:ee:95:d3:50:03:66:6a:c4:10:
                    04:90:3f:8c:4f:05:08:a6:82:29:eb:43:8a:21:97:
                    f2:f7:2c:85:79:ad:5e:e1:0f:6d:ad:3b:c5:7e:84:
                    ee:eb:8c:77:6c:40:9c:c4:b8:b7:2e:ff:17:b5:e8:
                    c3:51:e3:41:4b:33:f9:53:76:ee:73:52:09:0f:ef:
                    dc:1f:52:7a:4a:7b:c1:15:d8:62:ad:33:9d:96:0b:
                    ff:2c:fb:ea:b3:d0:89:54:c5:52:7d:3a:10:35:b2:
                    12:a0:03:07:54:c1:7d:4d:32:72:6f:d5:27:79:47:
                    8e:ef:cb:60:f1:b0:e2:79:81:7e:88:25:ca:d0:aa:
                    59:ee:78:70:fd:34:01:72:a9:e5:ba:6d:a9:86:19:
                    49:71:78:3d:5c:1c:ff:ea:e0:76:ce:89:34:05:e7:
                    6c:27:92:49:34:96:62:9e:dc:12:b6:b0:22:64:2b:
                    f4:f3:bb:78:82:c7:3b:6b:da:48:84:66:76:5e:ad:
                    5e:c5:c1:96:1a:cc:e6:6f:0d:47:a3:a7:52:1f:f0:
                    30:73:f6:e0:a9:b5:c2:45:f0:83:a3:3e:d2:a1:e3:
                    d3:65:b6:77:59:f8:ea:86:15:85:da:1f:b8:c7:89:
                    86:fe:40:12:0d:4d:04:82:a9:02:3c:c0:e6:5d:3f:
                    ec:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:89:85:C9:63:BC:A2:FC:3C:A0:89:B2:80:53:7A:DA:5A:BD:EA:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2/3eff272e-6bc6-30e8-9e99-720a86cff086.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2/2dd18d53-59c8-427f-9c2f-1f62eab97cb2.crl

            X509v3 Authority Key Identifier:
                keyid:09:BA:D3:03:4B:6A:2C:C1:74:41:89:81:CB:15:5B:65:64:42:FF:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.41.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:b3:90:1d:5d:75:69:4d:e1:e2:29:7d:42:06:13:90:e2:07:
         03:e6:0e:af:77:b5:b0:42:d6:24:de:bc:92:83:ea:f0:00:c4:
         ef:f9:30:2e:06:cd:6d:d8:54:a0:4d:4c:85:46:6a:c1:70:d5:
         cc:d6:f1:bb:9c:0f:4f:99:77:71:15:49:6d:08:c7:2a:a0:e6:
         f8:e3:cc:73:cf:21:4e:d4:f0:6f:61:40:e1:10:d6:d3:c3:db:
         a9:31:7a:b9:cc:32:76:74:3b:d8:9f:62:0e:18:be:1d:67:33:
         8e:c6:be:87:c5:29:78:a4:66:a5:87:a6:89:da:4d:80:82:4a:
         21:4f:71:00:04:d1:ca:61:71:12:2c:9f:cb:07:c9:3c:71:0c:
         fa:78:8b:6f:9d:71:23:3b:9f:8e:1b:50:ff:c2:b4:8c:59:62:
         09:47:b3:33:ff:27:f7:1c:1b:35:d0:e0:cb:f6:27:03:df:d3:
         6d:6f:40:c1:bd:71:a4:db:20:b1:6d:34:d5:f3:de:fe:47:92:
         93:07:e4:74:7e:ae:c7:31:43:d0:34:7f:a8:af:b7:87:95:29:
         09:ba:02:86:02:1e:ce:10:64:8e:09:ce:6b:b3:a0:ee:42:1e:
         2d:1c:23:87:ad:9f:f2:50:4d:2c:91:c2:f3:6c:8a:81:65:1c:
         e7:ff:d5:ea
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEV0syBAt1SehZEobIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmRkMThkNTMtNTljOC00MjdmLTljMmYtMWY2MmVhYjk3
Y2IyMB4XDTI0MDQwNjEzMDAzNVoXDTI0MDcwNTEzMDAzNVowLzEtMCsGA1UEAxMk
NDFmNTA5N2EtYzFmYi00MTI1LThmYzUtNmU5MDJjMjQwOWIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpfdcjjuldNQA2ZqxBAEkD+MTwUIpoIp60OK
IZfy9yyFea1e4Q9trTvFfoTu64x3bECcxLi3Lv8XtejDUeNBSzP5U3buc1IJD+/c
H1J6SnvBFdhirTOdlgv/LPvqs9CJVMVSfToQNbISoAMHVMF9TTJyb9UneUeO78tg
8bDieYF+iCXK0KpZ7nhw/TQBcqnlum2phhlJcXg9XBz/6uB2zok0BedsJ5JJNJZi
ntwStrAiZCv087t4gsc7a9pIhGZ2Xq1excGWGszmbw1Ho6dSH/Awc/bgqbXCRfCD
oz7SoePTZbZ3WfjqhhWF2h+4x4mG/kASDU0EgqkCPMDmXT/sqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFyJhcljvKL8PKCJsoBTetpavepoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yZGQx
OGQ1My01OWM4LTQyN2YtOWMyZi0xZjYyZWFiOTdjYjIvM2VmZjI3MmUtNmJjNi0z
MGU4LTllOTktNzIwYTg2Y2ZmMDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMmRkMThkNTMtNTljOC00MjdmLTlj
MmYtMWY2MmVhYjk3Y2IyLzJkZDE4ZDUzLTU5YzgtNDI3Zi05YzJmLTFmNjJlYWI5
N2NiMi5jcmwwHwYDVR0jBBgwFoAUCbrTA0tqLMF0QYmByxVbZWRC/80wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8yZGQxOGQ1My01OWM4LTQyN2YtOWMyZi0xZjYy
ZWFiOTdjYjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSk2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEizkB1ddWlN4eIpfUIGE5DiBwPmDq93tbBC1iTevJKD6vAAxO/5MC4G
zW3YVKBNTIVGasFw1czW8bucD0+Zd3EVSW0Ixyqg5vjjzHPPIU7U8G9hQOEQ1tPD
26kxernMMnZ0O9ifYg4Yvh1nM47GvofFKXikZqWHponaTYCCSiFPcQAE0cphcRIs
n8sHyTxxDPp4i2+dcSM7n44bUP/CtIxZYglHszP/J/ccGzXQ4Mv2JwPf021vQMG9
caTbILFtNNXz3v5HkpMH5HR+rscxQ9A0f6ivt4eVKQm6AoYCHs4QZI4JzmuzoO5C
Hi0cI4etn/JQTSyRwvNsioFlHOf/1eo=
-----END CERTIFICATE-----
Generated at Thu May 2 14:59:46 2024 by rpki-client on console-ams.rpki-client.org