Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/e77d29e5-04e6-3da9-adc6-715e5a5f01b4.roa
File:                     e77d29e5-04e6-3da9-adc6-715e5a5f01b4.roa (raw, json)
Hash identifier:          OpjiqXnBXftYqoDBetAI4kY01uxNzSN9hm3N3U2XBkQ=
Subject key identifier:   68:A3:F6:B9:29:35:8E:BC:4A:6E:B6:EC:E2:C2:B7:47:D6:B6:F7:0B
Certificate issuer:       /CN=48f8534f-57cd-45ba-bfa4-ce60842463a4
Certificate serial:       010D0C9F43285847E35F6A99E95AD7FF96C04440
Authority key identifier: E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/e77d29e5-04e6-3da9-adc6-715e5a5f01b4.roa
Signing time:             Fri 15 Nov 2024 14:00:39 +0000
ROA not before:           Fri 15 Nov 2024 14:00:39 +0000
ROA not after:            Thu 13 Feb 2025 14:00:39 +0000
asID:                     23470
IP address blocks:        45.59.170.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e3:5f:6a:99:e9:5a:d7:ff:96:c0:44:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48f8534f-57cd-45ba-bfa4-ce60842463a4
        Validity
            Not Before: Nov 15 14:00:39 2024 GMT
            Not After : Feb 13 14:00:39 2025 GMT
        Subject: CN=2b1ef2c7-18fc-4cde-9fbe-925609d7a830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b1:ce:45:1e:b4:d5:50:8f:91:26:5e:22:5d:
                    c2:62:93:7c:eb:6c:00:7a:5a:c3:19:04:7f:cd:aa:
                    cd:b9:5e:20:c8:4d:91:a7:9d:6f:38:49:62:0e:4c:
                    79:53:33:c1:03:dd:ef:94:e7:2b:2f:c0:47:dd:74:
                    0d:7b:c3:25:4d:b3:ed:b8:77:34:20:c4:fc:ca:42:
                    b5:2f:e9:3a:c7:df:73:40:cb:6d:8d:5b:5d:22:d4:
                    53:e4:6a:08:a0:7d:49:12:ea:d5:85:a6:94:cf:d1:
                    fa:2c:35:ad:7c:4f:b2:68:44:ec:7f:94:81:e8:ff:
                    0a:16:4f:f8:ca:5b:95:de:ef:05:a0:f0:d9:51:25:
                    80:9b:aa:b0:da:83:be:05:d1:82:a3:71:4b:04:ee:
                    64:0d:33:f5:12:96:e0:c4:0f:a4:a5:8d:b7:cf:3f:
                    2d:79:ce:78:cb:6f:de:4b:3f:db:86:1b:cf:92:74:
                    40:19:d2:86:23:a1:f2:84:91:a3:96:52:de:8b:b1:
                    ae:7b:35:af:d5:0f:70:68:6c:64:e0:64:bb:cb:08:
                    50:bb:fa:b4:05:61:61:99:4c:b0:27:fb:6b:2c:6d:
                    f7:96:53:b7:9e:3b:01:b1:87:79:48:df:7a:2c:e2:
                    17:1b:80:db:61:5e:ff:48:98:f8:79:96:24:60:ea:
                    c7:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:A3:F6:B9:29:35:8E:BC:4A:6E:B6:EC:E2:C2:B7:47:D6:B6:F7:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/e77d29e5-04e6-3da9-adc6-715e5a5f01b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.crl

            X509v3 Authority Key Identifier:
                keyid:E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:e4:c5:c0:de:0e:f5:09:74:10:65:79:81:9d:a2:e5:25:a8:
         62:23:68:a3:f2:5e:4b:89:55:58:90:ca:fb:68:17:8b:23:f8:
         1a:ed:75:e9:44:e5:69:24:52:ea:74:e5:32:3e:68:e0:74:30:
         bb:cb:84:72:d8:7f:2b:97:1c:01:22:bb:4c:8e:7f:ab:08:1a:
         48:ca:0e:41:d7:30:fb:91:1c:7d:12:44:c9:93:83:44:f3:a0:
         6a:45:dc:38:ed:d4:46:1d:9b:83:fd:3b:e8:27:4e:4f:e0:b2:
         a0:26:6c:72:07:f3:8f:19:5e:77:59:c1:42:ec:5a:40:37:8d:
         b3:34:47:36:48:90:8c:73:2e:a9:07:2f:db:6e:11:09:df:5a:
         1b:66:dc:4c:96:77:05:f0:e4:b3:4f:0a:16:e1:e4:d4:a8:ef:
         95:6f:1e:3d:39:c5:2d:ae:8d:00:7c:ff:ae:f6:7e:2c:a6:40:
         6e:c9:b9:e8:de:67:dc:2b:af:2c:12:a5:8a:a8:c1:11:4e:80:
         97:5c:b4:84:04:d5:c2:61:ce:0b:ba:46:fc:1d:22:38:a1:fa:
         33:94:f1:4a:77:b4:cc:9b:69:d3:ad:d5:8d:79:5b:9d:55:c1:
         ae:c9:5d:d7:58:9a:c6:53:b7:35:ac:50:91:bb:6a:87:25:6c:
         0f:c1:ee:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:38 2024 by rpki-client on console-fra.rpki-client.org