Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/e08544b9-0f1a-3ba9-90f2-f0bf38ca082f.roa
File:                     e08544b9-0f1a-3ba9-90f2-f0bf38ca082f.roa (raw, json)
Hash identifier:          de67dRdqABz9olA8nVS/HW548kR68g5gc5C+0pCTqM4=
Subject key identifier:   DF:7D:A0:A8:9E:CC:26:52:07:86:B2:1C:B0:9D:02:C3:80:AB:01:A6
Certificate issuer:       /CN=fdea7099-d2e5-45e1-8c1e-a8206f549539
Certificate serial:       010D0C9F43285845734DAC83824E2E64009D6FC0
Authority key identifier: 53:19:5B:43:E3:45:6A:E0:13:B2:4D:A8:F8:55:36:67:FC:01:F5:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/e08544b9-0f1a-3ba9-90f2-f0bf38ca082f.roa
Signing time:             Sat 06 Apr 2024 01:00:26 +0000
ROA not before:           Sat 06 Apr 2024 01:00:26 +0000
ROA not after:            Fri 05 Jul 2024 01:00:26 +0000
asID:                     14618
IP address blocks:        205.201.45.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/fdea7099-d2e5-45e1-8c1e-a8206f549539.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/fdea7099-d2e5-45e1-8c1e-a8206f549539.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:73:4d:ac:83:82:4e:2e:64:00:9d:6f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdea7099-d2e5-45e1-8c1e-a8206f549539
        Validity
            Not Before: Apr  6 01:00:26 2024 GMT
            Not After : Jul  5 01:00:26 2024 GMT
        Subject: CN=9a5ed632-6001-46cc-af49-dee39415e3c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:60:4e:5c:4f:8c:76:33:1e:94:7d:95:54:8b:
                    a1:f4:8e:da:c1:0e:39:3b:47:83:66:49:6a:ab:d7:
                    c5:e8:31:98:ba:3a:79:d2:2f:4e:a6:7f:9c:c9:26:
                    bc:3e:28:3d:a9:62:d7:d3:4f:1b:c3:ff:c0:b6:41:
                    de:9f:29:f7:23:ff:1e:4f:da:71:99:99:df:6a:23:
                    ab:8c:d7:39:1b:e0:1c:62:0c:1e:f5:68:8a:4b:8b:
                    7a:49:78:e7:44:a1:da:19:81:f4:97:22:b1:a5:f3:
                    84:5b:ef:11:75:01:f4:27:f3:cb:84:14:1f:51:2c:
                    d4:31:a9:b0:18:62:09:a6:27:53:d4:da:2e:f9:4a:
                    11:bc:b6:06:8f:f1:d8:af:a8:a8:e1:36:db:0e:97:
                    e2:33:57:dd:fa:3e:e6:17:83:f5:69:ab:dd:81:91:
                    4f:33:b6:fc:ad:57:31:fa:6f:ab:07:e8:fb:d2:f0:
                    bf:c9:50:ea:b2:32:28:8a:08:4c:97:5f:b9:b2:11:
                    ae:52:41:e7:01:fd:d3:d0:4a:ff:07:ef:1e:65:1b:
                    3a:f2:cd:da:a8:13:47:ef:9c:73:15:a9:a9:59:bf:
                    59:05:0a:71:2c:e4:d3:72:be:90:4b:92:ba:76:ca:
                    fe:ae:32:86:89:01:a8:d1:33:49:db:e4:2c:f9:de:
                    c5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:7D:A0:A8:9E:CC:26:52:07:86:B2:1C:B0:9D:02:C3:80:AB:01:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/e08544b9-0f1a-3ba9-90f2-f0bf38ca082f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/fdea7099-d2e5-45e1-8c1e-a8206f549539.crl

            X509v3 Authority Key Identifier:
                keyid:53:19:5B:43:E3:45:6A:E0:13:B2:4D:A8:F8:55:36:67:FC:01:F5:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.201.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:2a:fb:a5:e5:51:d4:c6:9a:01:02:f2:89:c3:38:0a:e6:5c:
         7f:d2:7b:36:28:22:0d:14:8c:49:4b:97:cc:64:8b:e4:28:d3:
         cc:c7:fc:49:9f:bc:d2:9d:6a:cf:40:be:b4:3e:35:9d:b9:90:
         5d:d4:47:82:b0:d1:3b:e9:63:2b:af:bd:4a:72:72:c9:dd:79:
         8a:de:bb:f4:c6:d1:37:d2:17:a9:22:5d:5e:6e:0a:d5:c2:60:
         d0:33:84:34:48:3e:5b:f5:a7:67:a5:73:4f:48:ed:fd:b4:4b:
         bb:d1:b2:bd:a1:77:ec:8e:ca:8a:9a:24:24:fb:79:29:13:88:
         58:78:73:09:e2:91:ff:fd:0c:0c:89:15:ed:c5:2b:35:fa:47:
         90:e3:f1:91:88:81:10:fb:56:6e:a8:12:8c:5e:42:f3:12:ed:
         09:cf:c6:d0:59:c8:e6:f9:13:1c:ad:1e:cc:ec:39:9d:31:98:
         db:3c:72:94:7d:43:fb:af:86:b8:35:ed:2c:fc:bb:a0:15:6d:
         91:22:b6:51:4e:58:b7:bb:b0:e3:3f:11:67:27:da:97:96:5e:
         88:31:8c:48:8d:0f:f5:68:83:e6:6b:c1:47:a6:06:e7:1c:c4:
         33:96:4d:69:70:18:b0:aa:5d:1d:38:09:ae:00:51:03:0c:c0:
         2d:61:1e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:45:23 2024 by rpki-client on console-fra.rpki-client.org