Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3ba89c64-ce17-33a0-ae77-d6aeb2794818.roa
File:                     3ba89c64-ce17-33a0-ae77-d6aeb2794818.roa (raw, json)
Hash identifier:          Ohe9RehUiWCLV5AxW4l8JY6pSnbl6aZ+zyBGayD8saQ=
Subject key identifier:   0F:2E:EC:1B:C7:87:69:03:FA:9A:31:53:15:F0:A4:40:67:BD:AB:E0
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285845C5A8E8AA324C17F06A859280
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3ba89c64-ce17-33a0-ae77-d6aeb2794818.roa
Signing time:             Sun 05 May 2024 13:00:34 +0000
ROA not before:           Sun 05 May 2024 13:00:34 +0000
ROA not after:            Sat 03 Aug 2024 13:00:34 +0000
asID:                     3223
IP address blocks:        45.74.48.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c5:a8:e8:aa:32:4c:17:f0:6a:85:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: May  5 13:00:34 2024 GMT
            Not After : Aug  3 13:00:34 2024 GMT
        Subject: CN=68399530-cf7d-48ee-b35e-b85543367b6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:55:45:98:e0:24:47:be:0c:e4:9f:af:42:3b:
                    fc:d4:35:17:8d:e6:1a:6b:2e:e3:73:83:63:c5:32:
                    f7:7a:e6:34:e0:19:3b:5a:49:9a:d2:cc:4d:f1:39:
                    05:ad:c2:87:3b:6b:2a:d6:5e:a5:f0:34:c0:d5:09:
                    76:7a:e6:20:48:cf:56:10:90:1e:18:3f:1a:ae:2a:
                    be:6c:2c:57:7e:5d:a5:5b:db:8d:69:91:47:92:b0:
                    a1:54:3c:26:a8:ff:78:c5:d1:c2:79:a4:ae:7b:4a:
                    82:cd:1f:ea:4a:60:dc:e9:d2:61:15:b2:31:16:50:
                    ae:4d:c1:26:0d:1b:50:cc:6c:17:6c:20:13:0b:5d:
                    46:26:b4:bc:48:9e:b9:e2:41:63:82:97:40:3b:27:
                    17:94:9c:0f:76:6e:69:79:05:07:56:9c:e7:19:d4:
                    1f:26:96:03:74:e7:c7:bf:3a:9c:78:50:2a:6a:13:
                    d7:76:b0:b5:db:78:af:34:4a:e0:fe:61:a5:46:f4:
                    78:d7:d8:3c:fb:66:3c:0a:2a:1f:b9:0c:d8:a9:22:
                    f3:07:fc:08:2f:61:21:ea:77:5e:51:ff:f7:81:c4:
                    ab:a2:0f:aa:1e:ff:b6:eb:c2:5a:0a:0c:36:32:e7:
                    e7:ff:ca:f0:40:23:10:1b:94:a1:9a:00:65:d1:1a:
                    57:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:2E:EC:1B:C7:87:69:03:FA:9A:31:53:15:F0:A4:40:67:BD:AB:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3ba89c64-ce17-33a0-ae77-d6aeb2794818.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.74.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:e6:90:fb:91:a5:fe:0e:46:6f:ad:6e:67:a9:19:5e:8b:f0:
         0c:89:63:26:f8:3c:0a:d4:3e:02:1e:7a:41:fa:0c:f4:64:ab:
         11:fe:12:73:e1:1b:63:1e:fc:aa:45:96:cf:f2:48:7d:0e:78:
         c3:20:b2:c8:6d:37:b3:b7:47:c4:d5:e5:0f:6b:a4:da:80:03:
         6d:19:4e:e7:1d:4f:0c:9b:90:2b:e3:f5:2e:b2:c9:d8:d8:ad:
         f3:76:31:59:0b:6d:be:6a:21:11:dd:0d:d1:1a:7e:93:ef:c7:
         49:c3:71:a3:64:6d:1a:45:68:9c:c4:a3:f3:84:13:20:c1:e0:
         6c:66:c4:b9:12:c7:c6:e1:44:43:32:82:5d:2d:c0:e4:ad:a8:
         39:56:c8:87:05:a5:e7:c4:2f:84:20:7a:2f:d6:4a:88:4b:78:
         02:95:03:51:d4:35:b5:7d:fe:1f:d8:3c:0e:48:32:48:a7:8a:
         73:49:66:b7:52:53:8e:d8:91:ea:60:65:43:46:0f:e6:9c:5e:
         40:5d:ac:f0:41:b5:e6:76:e9:01:4f:77:12:96:8e:91:cc:f8:
         85:ec:dd:4c:5c:21:d7:e8:3c:79:0e:f4:3f:13:6f:2e:7f:5a:
         aa:6e:0a:9a:73:08:8c:60:ba:56:4b:b7:3b:da:4a:a0:d0:17:
         83:22:36:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 13:31:02 2024 by rpki-client on console-fra.rpki-client.org