Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/85854aeb-4f2d-3134-a3ea-5b1335ff125f.roa
File:                     85854aeb-4f2d-3134-a3ea-5b1335ff125f.roa (raw, json)
Hash identifier:          B/LKLn68GwSQNG0jerl3sLFolfmSzQsPc2mJffdCl+4=
Subject key identifier:   48:EF:C3:2A:F3:02:12:2B:48:34:F7:5D:29:C9:8D:A0:00:5B:77:BA
Certificate issuer:       /CN=451e8d9f-d9ea-45cf-8fb9-2811e86b81b2
Certificate serial:       010D0C9F432858454D9D79AF54DE7E97984AF9E0
Authority key identifier: F2:B3:28:9C:11:A4:6A:18:99:01:CF:9B:8D:24:3E:97:D0:04:17:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/85854aeb-4f2d-3134-a3ea-5b1335ff125f.roa
Signing time:             Sat 23 Mar 2024 13:00:32 +0000
ROA not before:           Sat 23 Mar 2024 13:00:32 +0000
ROA not after:            Fri 21 Jun 2024 13:00:32 +0000
asID:                     206092
IP address blocks:        45.88.218.0/24 maxlen: 24
                          45.88.217.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4d:9d:79:af:54:de:7e:97:98:4a:f9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=451e8d9f-d9ea-45cf-8fb9-2811e86b81b2
        Validity
            Not Before: Mar 23 13:00:32 2024 GMT
            Not After : Jun 21 13:00:32 2024 GMT
        Subject: CN=e003f8f4-adb0-47c6-87ad-ab8f30cca6f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d3:8f:ea:b5:3b:75:6c:a3:ad:c5:9c:65:8b:
                    11:80:1d:81:79:e4:d3:23:5c:b5:12:7d:87:52:ae:
                    e3:d6:c2:ea:9f:10:f4:cc:d6:e0:53:7f:ad:13:61:
                    d7:8d:5f:ee:5a:b8:e2:ed:20:6a:8e:53:08:42:d3:
                    1d:85:d1:ae:d3:7f:dc:1a:0c:ea:a0:8d:27:56:38:
                    b7:9d:52:cc:20:a5:24:13:fd:c2:19:94:23:3c:3f:
                    0b:5b:87:b8:7b:7a:b8:33:7b:8e:55:42:d0:72:27:
                    33:eb:f8:c8:ff:c6:51:ce:71:ab:a6:60:58:65:4f:
                    4a:32:7f:8e:30:b7:ff:96:a0:75:23:be:ff:b9:6f:
                    31:6e:ed:03:d2:27:53:70:21:42:cc:3b:b7:ee:3f:
                    1d:15:7c:47:34:79:86:c9:ca:f0:5e:7f:39:d5:05:
                    42:7f:95:a6:c9:71:e0:0a:a5:78:b5:b2:13:88:b2:
                    6f:1c:83:4a:38:06:4c:ea:fc:8b:81:f0:16:62:71:
                    5f:e1:d9:08:3e:46:e3:b1:63:10:4b:8b:66:25:58:
                    0b:d3:b5:fc:b2:6f:58:73:42:73:fb:41:f8:86:9a:
                    e2:8f:27:68:00:9f:73:11:22:c1:de:a1:f2:82:52:
                    16:52:6e:2f:0d:a3:07:8d:fd:3f:41:34:63:54:8a:
                    d7:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:EF:C3:2A:F3:02:12:2B:48:34:F7:5D:29:C9:8D:A0:00:5B:77:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/85854aeb-4f2d-3134-a3ea-5b1335ff125f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.crl

            X509v3 Authority Key Identifier:
                keyid:F2:B3:28:9C:11:A4:6A:18:99:01:CF:9B:8D:24:3E:97:D0:04:17:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.88.217.0-45.88.218.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:34:15:56:43:bb:8e:ad:42:2a:e0:36:4f:cb:a5:4d:cc:9c:
         13:60:c7:d7:13:87:3c:cc:1f:0a:68:fa:cf:fa:fc:60:7c:fe:
         0c:44:2e:89:b4:a9:59:f4:87:3a:11:22:50:51:0f:21:80:db:
         96:d1:24:f9:4c:62:e0:69:7f:ac:4a:3e:b0:d8:bd:24:1a:85:
         41:44:c3:1b:25:9f:c8:d2:3b:90:82:c8:cf:0e:8e:9a:22:54:
         fd:6e:ca:36:ef:f6:b1:3c:aa:40:8b:f6:a7:0f:48:1f:e7:5f:
         9d:d5:8c:0b:4d:f4:26:8a:f1:18:0f:c9:0c:19:2b:3f:df:55:
         7f:f4:e2:59:37:3e:05:7b:2f:78:08:6d:d9:1e:ef:a3:3f:f0:
         76:cd:76:bb:ab:8d:18:68:b1:77:1b:5e:a2:6b:51:bd:3e:27:
         fa:db:23:ca:ec:14:6b:5b:b6:ae:02:81:fb:6a:1a:2f:4e:b7:
         94:88:57:2c:db:96:21:80:cf:58:ad:2b:79:62:21:b0:90:31:
         3d:45:42:a5:a4:d2:ce:f3:f2:15:1c:c9:ff:9f:3e:bf:77:53:
         4c:bd:24:2c:fe:e0:0c:57:5f:56:0f:7f:bf:f3:f8:bf:71:54:
         4d:fa:d6:88:b1:ea:87:44:b3:fa:ac:eb:6a:44:b4:a6:2c:2c:
         0a:92:57:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:26:26 2024 by rpki-client on console-ams.rpki-client.org