Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3/13c134c1-3dbc-33de-aa95-3cfbfa9a9be1.roa
File:                     13c134c1-3dbc-33de-aa95-3cfbfa9a9be1.roa (raw, json)
Hash identifier:          +pOEh0Veqn/5N6Xl+ZDeXY9BHBzftMYE4rKEYdhfyGE=
Subject key identifier:   5F:3F:55:B0:49:8B:4D:97:EA:3F:FD:B4:F1:B4:14:8B:F0:AD:C8:43
Certificate issuer:       /CN=b50a2dec-1d8f-47d7-b523-5a2ca365f5c3
Certificate serial:       010D0C9F43285845883DE6DE944222E58D171F40
Authority key identifier: 35:60:12:FD:7A:D5:B1:82:94:7A:A1:8E:8C:62:72:51:0E:7D:25:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3/13c134c1-3dbc-33de-aa95-3cfbfa9a9be1.roa
Signing time:             Sat 13 Apr 2024 13:00:34 +0000
ROA not before:           Sat 13 Apr 2024 13:00:34 +0000
ROA not after:            Fri 12 Jul 2024 13:00:34 +0000
asID:                     47027
IP address blocks:        45.41.200.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 02 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:88:3d:e6:de:94:42:22:e5:8d:17:1f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b50a2dec-1d8f-47d7-b523-5a2ca365f5c3
        Validity
            Not Before: Apr 13 13:00:34 2024 GMT
            Not After : Jul 12 13:00:34 2024 GMT
        Subject: CN=ca7c9cd3-2f1f-49e0-8321-cfd9e0bdecf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:21:5a:25:3c:bd:f7:1c:3d:1e:94:b4:3b:bb:
                    ff:0c:d4:c8:b3:01:d4:3d:da:29:79:1d:47:7a:20:
                    97:84:6f:cd:eb:75:af:19:b3:61:79:65:71:75:a3:
                    0f:41:a6:fb:70:23:bd:7d:5a:0d:9d:b5:7b:aa:70:
                    d6:0a:a0:b7:25:c2:76:65:ee:2d:03:bf:51:cc:83:
                    17:45:b4:19:eb:1f:a6:20:15:c0:45:c9:30:d4:5a:
                    ac:4d:c6:9b:ce:22:d9:2a:41:02:d0:86:b0:17:ea:
                    e8:bd:19:05:36:73:ae:bd:c4:f6:69:b3:d6:29:6c:
                    c5:06:7e:c4:05:a9:93:23:ab:a1:9b:79:f2:cb:ae:
                    93:9e:cd:ef:17:69:45:f4:f0:86:25:0e:32:3a:11:
                    e1:95:2d:13:b1:15:83:ad:e6:90:23:bc:d9:41:7d:
                    f1:70:40:d7:e7:cc:42:cd:36:83:2a:a1:ca:d7:03:
                    ea:08:da:c6:d6:8c:4c:a2:da:ae:4c:63:dd:a0:17:
                    34:64:4c:eb:c6:96:b0:59:3c:38:6d:ba:35:fb:74:
                    77:11:67:7c:ca:93:11:0e:d6:f3:74:ec:38:3c:ac:
                    ab:7b:5e:e5:1b:ee:dc:92:15:f8:75:81:7f:cd:96:
                    ea:b1:6e:51:fd:4a:74:f9:3e:6c:a8:98:c1:e5:ad:
                    b4:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:3F:55:B0:49:8B:4D:97:EA:3F:FD:B4:F1:B4:14:8B:F0:AD:C8:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3/13c134c1-3dbc-33de-aa95-3cfbfa9a9be1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3.crl

            X509v3 Authority Key Identifier:
                keyid:35:60:12:FD:7A:D5:B1:82:94:7A:A1:8E:8C:62:72:51:0E:7D:25:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.41.200.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:fb:ed:04:84:b6:52:30:c9:d2:c7:08:1d:ce:54:1e:5b:a5:
         a0:02:ad:a5:cb:0a:2a:35:1a:7c:a7:89:05:62:21:f0:53:4f:
         70:25:00:1a:fb:9e:f2:d0:73:70:07:2b:0a:80:48:48:39:5f:
         2b:3a:a7:b1:ce:73:16:f6:74:2f:4f:b0:82:c9:23:f7:ff:71:
         be:e1:37:85:73:00:bc:01:52:7b:3a:fe:db:f5:66:43:dd:40:
         7b:69:5f:44:e7:2f:42:cc:48:c7:6a:59:dc:51:f9:57:be:86:
         80:aa:cd:a9:e4:6f:d8:d6:2e:93:15:99:df:c3:b8:fa:69:de:
         4b:1a:49:97:5b:09:fe:a2:e3:25:d3:6e:3c:63:bb:98:2b:79:
         a4:c0:9a:54:f2:f3:3b:5c:4f:fc:c5:00:f1:aa:ff:d0:d9:9a:
         e2:5e:7b:4e:e6:87:dc:b0:8f:3c:92:d9:12:96:9c:6c:da:1f:
         c8:62:96:3c:52:94:75:ec:ca:1f:1c:6d:87:48:34:2d:a8:32:
         53:75:df:4c:b7:7e:57:77:db:9f:14:6e:7e:6f:10:a0:07:e8:
         a0:c9:4a:d4:54:7c:1c:54:86:2a:bc:64:e8:44:9d:9f:62:9a:
         43:da:c5:86:8d:94:81:f0:ae:6f:e2:62:52:6e:d2:fc:49:28:
         7d:53:36:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 21:41:13 2024 by rpki-client on console-fra.rpki-client.org