Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/b9548b8f-2362-3eef-a269-234738e92d9e.roa
File:                     b9548b8f-2362-3eef-a269-234738e92d9e.roa (raw, json)
Hash identifier:          mDFB6bJ075MhhS+zw2xsn43XmB7MzeLcDipWgwaYgAE=
Subject key identifier:   27:F4:72:4F:28:E1:15:4C:86:D8:95:35:EE:5E:F6:18:67:BA:93:91
Certificate issuer:       /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Certificate serial:       010D0C9F432858456822E97C2725B724A99B9540
Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/b9548b8f-2362-3eef-a269-234738e92d9e.roa
Signing time:             Tue 02 Apr 2024 01:00:26 +0000
ROA not before:           Tue 02 Apr 2024 01:00:26 +0000
ROA not after:            Mon 01 Jul 2024 01:00:26 +0000
asID:                     23470
IP address blocks:        45.59.23.0/24 maxlen: 24
                          45.59.20.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Apr 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:68:22:e9:7c:27:25:b7:24:a9:9b:95:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
        Validity
            Not Before: Apr  2 01:00:26 2024 GMT
            Not After : Jul  1 01:00:26 2024 GMT
        Subject: CN=9300ce4d-239a-4e29-9f18-892e020a1cef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:2c:fd:45:22:09:f2:73:75:67:c4:33:45:46:
                    5f:79:ab:79:42:9c:79:8c:27:bf:77:90:20:48:66:
                    2d:e5:4a:f2:76:cf:51:90:aa:cb:25:46:9f:4b:9b:
                    20:3b:8c:45:64:ac:6c:b3:c6:f7:b7:bb:e6:af:53:
                    90:33:b0:68:cb:8f:f5:f6:2f:68:f6:f3:f8:ee:9a:
                    d1:81:08:5e:49:a4:df:7c:aa:b1:56:2f:32:14:50:
                    c5:88:22:10:1c:9f:c2:36:0e:8b:ee:3a:ce:a3:5b:
                    e1:27:bc:9d:87:c0:b6:6e:8c:34:78:5c:e3:7a:15:
                    93:57:49:66:d1:9b:b2:b6:ed:c1:3f:0d:72:b0:79:
                    e9:8b:d1:f0:95:31:a9:db:06:23:e3:fa:f2:cf:f8:
                    3a:0a:b7:48:4d:59:a6:24:0b:df:0a:a2:dc:d3:53:
                    78:78:09:54:25:00:84:6c:a8:5b:2e:9f:70:21:c4:
                    e8:ae:2e:30:36:ab:f7:b5:ff:81:d6:51:11:d9:8c:
                    be:6d:19:45:15:7a:5c:b6:bf:3a:68:a9:f2:be:47:
                    8d:fb:80:a2:2d:66:9a:fe:6b:04:3a:d8:12:42:da:
                    b7:06:a0:71:e5:b8:36:0e:5d:cc:41:da:89:8d:13:
                    22:6e:d4:b7:29:e5:f7:9e:04:41:da:61:c9:10:14:
                    21:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:F4:72:4F:28:E1:15:4C:86:D8:95:35:EE:5E:F6:18:67:BA:93:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/b9548b8f-2362-3eef-a269-234738e92d9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.20.0/24
                  45.59.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:34:e4:f3:1f:0a:c9:31:c9:7f:02:69:8c:e9:03:a0:d6:59:
         06:f0:d1:56:38:91:44:dd:dc:ca:9a:73:9f:82:67:e3:d3:89:
         3d:b7:57:42:7c:d0:38:c7:55:3a:dc:b0:fa:44:e9:78:45:c8:
         e7:ad:82:88:ec:45:7e:44:45:20:ef:18:6a:0e:b3:95:ed:71:
         d7:6b:da:39:84:c8:10:45:fd:7a:e1:d3:64:5a:75:6f:9b:fe:
         1d:ab:d4:03:50:d1:6b:62:08:88:e8:98:61:0c:b6:2d:b6:99:
         af:4d:2e:18:6d:a3:02:23:3e:df:ee:7b:3c:4c:f6:a7:12:00:
         43:ae:74:b7:da:75:0b:63:49:5a:42:19:39:7f:c5:91:29:96:
         f8:38:b2:0a:e7:0c:4d:8d:19:aa:2f:81:aa:36:d2:4a:e3:5d:
         d7:c1:18:66:b0:cf:57:4b:cb:8a:7c:0b:96:85:00:a7:df:49:
         cf:dc:d6:ff:f1:df:d2:e3:6d:33:ce:30:92:fe:ac:19:b7:70:
         9e:55:58:39:94:44:2c:50:9a:a4:66:ed:5d:b1:fc:f5:82:9e:
         1b:0a:91:58:ee:fb:22:f4:db:8a:53:8e:a5:20:20:52:55:f4:
         24:7e:ab:3d:4a:e8:ed:ed:e0:34:f8:d1:1f:0d:cf:3d:62:00:
         f0:6a:d9:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 03:38:37 2024 by rpki-client on console-fra.rpki-client.org