Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/abed2747-44df-31bb-b5c4-71ee2ca51ccc.roa
File:                     abed2747-44df-31bb-b5c4-71ee2ca51ccc.roa (raw, json)
Hash identifier:          lwWra5Xr8BV0u3iwByTXN6kfBAEboq34EFn8JY7fWA8=
Subject key identifier:   E2:96:DB:17:28:AF:D8:3B:D7:26:DE:EC:9F:FD:CC:F6:5A:7F:7D:45
Certificate issuer:       /CN=52fbdac8-20c0-4da4-8654-27b4bf592930
Certificate serial:       010D0C9F43285847DF2F58093D17DA0146951580
Authority key identifier: 83:F5:A6:59:FF:1E:96:96:C8:E5:B4:B9:DF:F6:3D:37:29:30:A4:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/abed2747-44df-31bb-b5c4-71ee2ca51ccc.roa
Signing time:             Thu 14 Nov 2024 02:00:27 +0000
ROA not before:           Thu 14 Nov 2024 02:00:27 +0000
ROA not after:            Wed 12 Feb 2025 02:00:27 +0000
asID:                     394491
IP address blocks:        45.45.253.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/52fbdac8-20c0-4da4-8654-27b4bf592930.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/52fbdac8-20c0-4da4-8654-27b4bf592930.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:df:2f:58:09:3d:17:da:01:46:95:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52fbdac8-20c0-4da4-8654-27b4bf592930
        Validity
            Not Before: Nov 14 02:00:27 2024 GMT
            Not After : Feb 12 02:00:27 2025 GMT
        Subject: CN=2cefad01-9455-4039-b393-c45fd1620e82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:04:c9:b4:ac:b5:51:fe:da:c3:cb:0b:74:23:
                    c4:5b:5c:a1:fa:cc:60:01:7f:04:c1:39:3f:8e:05:
                    58:3f:85:34:ad:b3:24:ac:65:0d:c3:49:4d:00:c9:
                    9e:e0:4c:7a:8f:7e:ac:08:8c:06:7b:3d:03:bf:2c:
                    0a:cd:c0:70:43:44:17:0d:c8:24:55:4c:24:a7:7b:
                    23:de:21:80:39:d6:3d:6e:de:fc:1a:47:2b:23:6a:
                    01:e9:a7:a3:fa:95:62:90:e7:34:e7:06:97:cb:26:
                    e3:46:fb:f7:dd:1a:b8:22:93:6b:22:12:9d:98:8f:
                    ce:64:d1:cb:84:d8:b3:b4:f8:ba:d7:23:2d:1b:7d:
                    f0:7c:53:47:bc:71:f8:e0:74:44:84:9e:b2:7d:49:
                    c3:47:c7:2f:45:de:e0:fa:df:0c:9c:c8:e5:55:49:
                    60:8d:f6:44:22:d6:5b:3b:e3:b2:95:aa:36:e1:fa:
                    5c:19:f6:df:29:f8:e4:7c:5c:fa:91:ac:2d:38:5d:
                    ed:58:a8:d4:9e:84:30:b4:04:d8:4d:1e:f9:9e:48:
                    64:fc:86:9e:8b:32:42:6b:88:e7:7d:3f:97:f8:f5:
                    1a:24:73:00:18:80:c3:1f:c0:bb:ef:8a:dd:00:fa:
                    24:e0:34:b5:a9:e4:ef:0d:5d:90:46:22:b3:c6:be:
                    06:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:96:DB:17:28:AF:D8:3B:D7:26:DE:EC:9F:FD:CC:F6:5A:7F:7D:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/abed2747-44df-31bb-b5c4-71ee2ca51ccc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/52fbdac8-20c0-4da4-8654-27b4bf592930.crl

            X509v3 Authority Key Identifier:
                keyid:83:F5:A6:59:FF:1E:96:96:C8:E5:B4:B9:DF:F6:3D:37:29:30:A4:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:63:b8:6f:40:24:cd:04:20:39:28:53:d8:36:6c:8b:fc:dc:
         8a:77:a0:4c:64:41:bb:60:d1:d8:31:6a:96:34:4a:7a:f5:28:
         cd:a2:be:3e:98:48:01:c3:10:c3:5e:9a:53:c1:55:bb:08:e2:
         2c:b5:d9:eb:98:20:5e:4f:13:78:78:2d:88:34:03:c4:b2:ab:
         59:22:cf:bc:08:b5:0c:78:48:0a:67:49:fe:b9:ea:56:b9:c3:
         e8:d4:52:6a:e2:46:45:27:ab:07:e0:7a:db:b5:5b:b3:73:9b:
         d5:56:75:29:35:26:a1:a8:e7:aa:2f:f3:97:ad:b4:c5:38:50:
         7d:40:24:28:f7:0b:e1:cd:25:f6:f0:1b:51:fa:60:05:38:38:
         4b:33:b3:80:af:49:64:eb:3d:05:27:09:c9:69:ce:d2:be:94:
         20:17:3d:1d:a1:6c:ba:92:52:f8:e8:ec:2b:eb:af:aa:96:3c:
         22:08:38:fc:68:60:90:c8:57:76:ad:a2:2a:cd:55:33:d9:73:
         1f:4d:f3:2f:1b:0f:f6:ec:a4:8a:97:79:7f:d8:20:c6:a9:76:
         31:5e:20:bd:b3:1e:d7:c2:7a:a3:d8:7d:29:11:4d:c1:f2:97:
         69:f1:54:cd:a7:48:e6:18:9f:1c:82:b7:c1:8b:76:4d:1f:3f:
         48:a4:b4:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:49:09 2024 by rpki-client on console-ams.rpki-client.org