Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/8c1d8561-e377-394b-ad52-2f543980d885.roa
File:                     8c1d8561-e377-394b-ad52-2f543980d885.roa (raw, json)
Hash identifier:          /iRzKmjvTR9QsmL0u5l6IcmO/2FG9YL+EkDUp3I2YIQ=
Subject key identifier:   06:39:83:B7:32:79:3C:00:67:C2:2F:7F:F9:B7:B1:35:E5:26:BD:B7
Certificate issuer:       /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
Certificate serial:       010D0C9F43285845C87390C03FBED87421E62FC0
Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/8c1d8561-e377-394b-ad52-2f543980d885.roa
Signing time:             Mon 06 May 2024 13:00:34 +0000
ROA not before:           Mon 06 May 2024 13:00:34 +0000
ROA not after:            Sun 04 Aug 2024 13:00:34 +0000
asID:                     23154
IP address blocks:        148.164.48.0/24 maxlen: 24
                          148.164.49.0/24 maxlen: 24
                          148.164.48.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c8:73:90:c0:3f:be:d8:74:21:e6:2f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
        Validity
            Not Before: May  6 13:00:34 2024 GMT
            Not After : Aug  4 13:00:34 2024 GMT
        Subject: CN=9f1ff03f-3e37-4505-b215-46015c79671c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1a:f6:0f:72:1d:13:33:59:65:c3:cf:97:66:
                    07:71:93:42:cf:55:62:66:95:7e:7f:35:49:7a:25:
                    64:78:2a:38:14:fb:ff:0b:a6:a6:14:c4:be:34:ba:
                    ee:65:bb:d7:59:25:66:a4:20:e7:9b:8a:b8:19:68:
                    37:74:d4:a0:1f:09:12:49:f0:96:34:a6:34:52:b7:
                    cb:9d:fb:3f:af:cf:84:06:56:60:88:f5:2a:2f:0d:
                    0c:dd:dd:1c:e3:53:7e:f9:18:cd:65:a0:6a:08:5a:
                    b6:e2:04:97:5c:24:05:be:a6:2e:3a:fd:e1:a8:b5:
                    5c:21:9a:49:77:ff:09:da:88:45:75:3b:ce:cf:c7:
                    97:71:b9:f9:d0:1a:3b:52:6f:3d:4c:b7:a5:eb:3e:
                    49:19:9e:ea:50:3b:39:a7:bd:a4:ca:a4:19:d1:d9:
                    47:e8:9f:f0:c5:58:c1:4c:c7:d6:1d:01:a4:88:c9:
                    e3:47:cd:d8:6d:ca:01:6c:6a:2d:5c:5a:8f:8b:6f:
                    a0:6a:3e:73:07:ab:27:ce:a2:62:ae:02:44:b7:cd:
                    02:ac:44:bc:2b:a8:95:03:3d:62:bf:71:cc:95:87:
                    e5:f5:57:84:0d:ac:f1:a4:e9:c5:9b:be:56:f1:94:
                    63:74:8e:a3:96:5f:5d:51:f2:9d:34:0d:9a:8d:44:
                    d0:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:39:83:B7:32:79:3C:00:67:C2:2F:7F:F9:B7:B1:35:E5:26:BD:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/8c1d8561-e377-394b-ad52-2f543980d885.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl

            X509v3 Authority Key Identifier:
                keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.164.48.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:0b:e0:f1:f1:3a:78:ef:15:10:1a:65:97:4e:a9:90:6d:fd:
         36:ca:32:33:6b:45:5a:66:8d:f5:d8:e6:bc:ca:78:ed:37:5d:
         39:bf:46:d0:35:96:e0:23:d7:f4:ce:ac:96:01:58:59:e1:93:
         b9:98:40:f5:3f:eb:de:d3:cb:9a:84:69:02:51:e6:d5:6e:9e:
         e5:40:e6:51:fe:50:a0:d7:c2:ca:1c:15:08:cf:c7:d4:1f:2b:
         ab:12:71:89:1e:bb:69:65:a1:fb:92:98:42:da:da:6f:f1:be:
         79:ef:c4:fb:2b:a6:93:fa:9a:46:1a:11:e7:4b:42:fb:50:81:
         86:9d:9f:06:21:fe:67:99:d4:cf:22:1f:ca:f7:11:6c:77:12:
         09:8d:d4:ab:68:71:4f:47:50:2e:ab:3f:49:ec:41:6d:39:86:
         55:af:3e:9b:b0:d7:a6:c6:21:21:4e:bd:97:33:6f:2b:23:b3:
         99:1f:bf:a8:45:4c:4a:b0:ac:13:ba:03:f4:45:85:74:c6:53:
         59:72:5b:65:57:15:a8:81:75:b0:0f:ef:fc:be:08:20:21:84:
         86:50:20:c5:6a:5b:a5:30:de:0d:d2:fa:81:0c:f9:df:ae:33:
         e7:d9:ef:2b:39:81:10:18:6c:4b:71:a0:14:ff:fb:7f:60:1d:
         00:d2:44:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:00:38 2024 by rpki-client on console-ams.rpki-client.org