Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/9a249e6e-47df-3766-a58c-3846de9693e3.roa
File:                     9a249e6e-47df-3766-a58c-3846de9693e3.roa (raw, json)
Hash identifier:          9o51xwacgXNJInzSybLM3oGKqCLmqNCQ53aApQxOd/A=
Subject key identifier:   66:A8:58:0D:15:40:56:13:C2:2D:D9:92:50:B2:7E:73:C2:84:0B:FA
Certificate issuer:       /CN=22f3c152-12b6-441e-b4d6-66feab870c4d
Certificate serial:       010D0C9F43285845D933AFE16D608C6DE64C19C0
Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/9a249e6e-47df-3766-a58c-3846de9693e3.roa
Signing time:             Sun 12 May 2024 13:00:34 +0000
ROA not before:           Sun 12 May 2024 13:00:34 +0000
ROA not after:            Sat 10 Aug 2024 13:00:34 +0000
asID:                     12212
IP address blocks:        45.59.71.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d9:33:af:e1:6d:60:8c:6d:e6:4c:19:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d
        Validity
            Not Before: May 12 13:00:34 2024 GMT
            Not After : Aug 10 13:00:34 2024 GMT
        Subject: CN=359076b7-7217-47f9-9eea-57b5c52c9c8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:04:3f:b8:ce:b2:c6:6e:6b:a5:1a:30:8a:ce:
                    24:bc:a9:f1:8a:54:ac:e4:26:37:d3:21:ec:e1:d8:
                    c6:ca:98:1c:01:8f:be:f6:22:40:22:68:34:55:93:
                    5c:46:1b:2f:f3:f4:ee:88:7b:19:68:ff:90:32:ee:
                    c3:71:da:51:70:6b:41:37:72:1e:15:64:6b:bb:6b:
                    71:d8:4d:ab:98:99:4b:14:74:1c:dc:6d:b3:49:47:
                    11:08:07:92:5a:e7:72:9b:7f:97:38:6b:ea:11:c4:
                    2d:54:e5:1f:77:ae:45:f2:2d:b7:ab:b5:74:ed:44:
                    93:aa:19:97:e0:66:dd:47:ed:3c:ff:e4:96:b5:3c:
                    4a:35:99:1b:01:04:e2:5e:53:2a:d7:59:9b:61:34:
                    37:2a:6a:7b:bf:e3:01:04:06:87:6b:48:9a:00:f6:
                    2e:29:1c:79:04:10:44:ae:37:3c:be:14:97:b1:28:
                    c5:cd:df:a1:ea:dd:1c:64:73:1d:b9:1b:ba:8c:ba:
                    26:56:8c:76:e4:cd:fc:fe:c5:82:b3:d2:ac:8f:f6:
                    76:cd:7a:81:e7:bd:99:26:be:48:c6:f9:30:9d:06:
                    cd:f1:c3:36:74:3d:e0:49:1d:3a:45:ef:04:98:63:
                    0e:f7:1e:2b:55:d6:ad:4b:1b:54:3e:64:12:d0:c3:
                    1b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:A8:58:0D:15:40:56:13:C2:2D:D9:92:50:B2:7E:73:C2:84:0B:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/9a249e6e-47df-3766-a58c-3846de9693e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl

            X509v3 Authority Key Identifier:
                keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:7e:ea:50:cc:9b:9d:27:b3:d8:88:03:4d:ea:0a:8c:af:b7:
         d1:dc:49:ea:04:8f:fa:59:e6:5f:c5:74:ac:0f:65:73:3b:e7:
         48:5d:50:ca:82:5f:c4:99:a4:53:92:f6:99:25:c6:cd:ec:96:
         05:4d:47:09:64:11:e3:02:57:66:b4:13:f8:5f:3e:e1:b3:9d:
         c5:ed:e5:54:eb:eb:82:d8:b8:11:76:89:b9:36:bb:1f:54:62:
         50:17:90:86:40:b0:27:70:6c:56:21:fa:ea:a7:6f:bd:1e:19:
         2c:85:99:08:b3:1e:0d:38:15:af:67:ee:3d:38:49:01:dd:e1:
         17:bb:81:71:a6:18:3d:76:b9:6e:ac:87:f3:b5:1d:2e:3e:08:
         f8:d7:37:5c:66:91:97:f6:eb:cc:0f:18:e3:c5:b1:40:06:26:
         49:3a:a9:d2:b4:29:41:ce:c5:02:d0:f9:fe:33:55:64:c9:6f:
         98:1e:a9:0d:0a:42:af:1c:99:6d:81:cd:fc:ea:bb:1c:0e:cc:
         57:92:cd:af:09:43:e9:c1:87:9d:dc:44:69:35:bc:06:97:ef:
         f3:e4:74:49:c1:63:c8:4f:69:d4:04:fb:4f:b3:a5:ed:be:08:
         22:cc:1e:d9:0f:0b:7a:ec:74:a7:c9:ce:28:e6:eb:67:48:c7:
         83:b2:b2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 02:57:43 2024 by rpki-client on console-ams.rpki-client.org