Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92/f9288161-5a04-3eb2-a7d4-9fdb78c58d1c.roa
File:                     f9288161-5a04-3eb2-a7d4-9fdb78c58d1c.roa (raw, json)
Hash identifier:          zNnMD6dxe888eY4L1JmWuJYVGAM/40VkS+/yevaufgQ=
Subject key identifier:   CC:55:FD:AD:5E:7D:94:E1:FA:C5:DD:52:54:75:DE:86:A4:F9:8A:82
Certificate issuer:       /CN=b05e76f8-7e37-4663-ae5f-9f03054cfe92
Certificate serial:       010D0C9F4328584832F02AB8569144F1C04B3D94
Authority key identifier: 34:D0:72:D6:CB:A5:9B:93:4E:96:2F:C0:50:7B:B3:F7:4A:A2:02:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92/f9288161-5a04-3eb2-a7d4-9fdb78c58d1c.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     399871
IP address blocks:        45.45.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92/b05e76f8-7e37-4663-ae5f-9f03054cfe92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92/b05e76f8-7e37-4663-ae5f-9f03054cfe92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:2a:b8:56:91:44:f1:c0:4b:3d:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b05e76f8-7e37-4663-ae5f-9f03054cfe92
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=60621231-5c2c-45b0-9bc4-4c4346995b79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:17:3c:0b:d3:ff:12:49:2d:e9:a9:ab:a1:81:
                    3d:84:3a:58:e3:61:42:8c:d9:77:7d:68:ca:39:1b:
                    a9:25:d0:76:3a:de:a1:65:0f:23:d2:77:49:a7:e9:
                    7e:eb:54:e6:a0:da:eb:d6:15:dc:4a:77:3e:d6:cb:
                    b9:c6:72:2c:9d:27:57:d8:ba:b2:fe:50:9e:06:c5:
                    5f:3c:75:db:87:75:bd:e3:1e:ce:0d:d8:c3:5f:c9:
                    22:10:56:11:9c:1c:68:03:10:6e:9b:8a:c5:d2:6a:
                    42:f0:61:ab:f2:b3:4f:7c:9f:b7:b2:5f:ff:44:02:
                    f1:39:b1:1b:af:3a:1e:df:99:2d:11:d9:d7:ae:ac:
                    34:6d:a0:3a:45:2c:7f:71:51:45:bd:49:0d:3f:bc:
                    f5:ea:2f:c3:30:16:a5:91:8b:73:04:fb:7e:66:b1:
                    57:91:d9:10:e9:41:c7:d3:9d:63:f4:e7:fd:97:b3:
                    6b:18:9c:b1:6a:de:e3:b7:36:77:dc:84:80:24:ce:
                    d5:ef:70:7a:ad:e0:3a:d5:d3:e5:3b:a4:c1:db:b1:
                    80:67:0c:07:5c:5f:9d:d4:1f:a1:80:c9:56:12:b7:
                    96:17:bb:df:9c:d5:bf:b5:24:32:4d:1f:97:13:32:
                    b1:4a:e1:3e:d1:bd:17:d3:9a:5a:79:37:fc:89:85:
                    d6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:55:FD:AD:5E:7D:94:E1:FA:C5:DD:52:54:75:DE:86:A4:F9:8A:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92/f9288161-5a04-3eb2-a7d4-9fdb78c58d1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92/b05e76f8-7e37-4663-ae5f-9f03054cfe92.crl

            X509v3 Authority Key Identifier:
                keyid:34:D0:72:D6:CB:A5:9B:93:4E:96:2F:C0:50:7B:B3:F7:4A:A2:02:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:14:c1:c7:2d:ab:c5:6b:49:fb:57:ac:6d:54:10:c2:53:7b:
         3f:90:52:84:aa:4a:62:62:58:6d:b9:1f:5d:be:9b:b4:1d:aa:
         84:f2:47:d1:8a:29:fc:a5:32:cc:b8:e9:83:b0:e4:1c:87:ac:
         88:5d:e9:6d:3a:0d:17:f3:6e:9f:56:ae:0e:07:15:7d:1f:3b:
         8c:89:c3:b0:a0:7c:92:45:7b:72:76:97:fb:ff:0b:f5:16:57:
         db:54:12:b7:02:f5:93:0f:12:e5:92:35:54:72:1d:0a:7d:2c:
         8c:02:82:b5:70:99:66:ad:96:5e:5f:4e:a2:7a:38:e1:5c:bc:
         e7:69:a2:fa:2b:2a:3e:c5:5a:4d:d4:33:ca:9d:8a:70:d2:98:
         9d:10:2f:5b:38:f5:7c:86:76:1d:cf:5e:46:14:4c:d2:5d:c1:
         b0:88:f9:fe:0c:59:4f:e3:35:33:53:df:a1:c7:8d:09:c4:3f:
         8f:04:d0:14:17:b1:b3:9e:a4:fc:b4:76:5f:02:8c:ea:13:98:
         bf:a9:91:40:b8:79:a0:c1:1e:fe:75:91:4b:b4:31:d9:c8:16:
         24:05:d8:d0:11:f2:d3:32:10:64:79:b0:01:49:5b:96:7c:34:
         1b:63:f6:b6:5b:ab:eb:7e:18:3f:ae:c1:b7:90:60:da:fa:ee:
         40:c8:04:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:40:49 2025 by rpki-client