Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92/f9288161-5a04-3eb2-a7d4-9fdb78c58d1c.roa
File:                     f9288161-5a04-3eb2-a7d4-9fdb78c58d1c.roa (raw, json)
Hash identifier:          ngTOzgnre/u+LGEEt+HG+K39clDfIfJmyDAFF1MLqz8=
Subject key identifier:   F9:19:12:56:B8:30:3F:2A:9A:6F:2E:DF:61:80:8D:16:24:5E:6B:C8
Certificate issuer:       /CN=b05e76f8-7e37-4663-ae5f-9f03054cfe92
Certificate serial:       010D0C9F4328584593689565E03F486CF5DE3800
Authority key identifier: 34:D0:72:D6:CB:A5:9B:93:4E:96:2F:C0:50:7B:B3:F7:4A:A2:02:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92/f9288161-5a04-3eb2-a7d4-9fdb78c58d1c.roa
Signing time:             Wed 17 Apr 2024 13:00:34 +0000
ROA not before:           Wed 17 Apr 2024 13:00:34 +0000
ROA not after:            Tue 16 Jul 2024 13:00:34 +0000
asID:                     399871
IP address blocks:        45.45.184.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92/b05e76f8-7e37-4663-ae5f-9f03054cfe92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92/b05e76f8-7e37-4663-ae5f-9f03054cfe92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:68:95:65:e0:3f:48:6c:f5:de:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b05e76f8-7e37-4663-ae5f-9f03054cfe92
        Validity
            Not Before: Apr 17 13:00:34 2024 GMT
            Not After : Jul 16 13:00:34 2024 GMT
        Subject: CN=3b2d199f-2173-4798-bea4-ccc76277b7cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:37:7c:81:00:61:21:38:57:f9:42:6e:23:66:
                    41:22:6e:43:8f:c7:52:cd:be:25:d1:ca:80:c2:5d:
                    20:0b:87:39:ae:36:92:34:60:35:b8:3e:a3:06:ff:
                    5d:96:1b:00:3a:ad:18:5b:52:e8:41:3d:08:e8:be:
                    78:b8:e7:a6:ff:91:66:2d:36:7c:29:83:8d:d7:e1:
                    ef:0c:77:04:c9:7e:f4:7c:57:7b:14:fc:54:a0:51:
                    84:5e:c3:ac:65:33:ab:a7:e4:21:f4:2f:2a:95:44:
                    41:0d:a2:c2:bc:07:5f:c5:f9:cc:f9:75:b3:21:da:
                    0f:14:0f:a9:bb:08:8c:eb:38:2b:89:3c:4b:09:b6:
                    ea:5f:a0:4c:78:c8:04:45:b1:9e:c8:dd:5e:67:71:
                    45:51:14:a4:ea:94:d8:0b:8b:59:8e:15:ba:42:52:
                    63:bb:67:5c:3e:81:e7:87:bc:49:71:2b:25:2b:2b:
                    16:46:c2:ff:3b:2a:41:a5:81:94:b6:36:6f:9d:c6:
                    e5:87:e7:ab:c5:80:61:af:a6:2f:f3:b6:4d:33:09:
                    bd:7c:5b:43:27:0c:a0:97:a1:8f:73:35:59:5c:b5:
                    97:03:55:74:18:f8:01:a2:0f:41:22:d5:46:bc:8a:
                    fe:b3:db:ea:ff:c8:aa:7f:7a:28:a8:3d:bc:3a:f4:
                    85:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:19:12:56:B8:30:3F:2A:9A:6F:2E:DF:61:80:8D:16:24:5E:6B:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92/f9288161-5a04-3eb2-a7d4-9fdb78c58d1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92/b05e76f8-7e37-4663-ae5f-9f03054cfe92.crl

            X509v3 Authority Key Identifier:
                keyid:34:D0:72:D6:CB:A5:9B:93:4E:96:2F:C0:50:7B:B3:F7:4A:A2:02:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:26:a3:92:df:9b:2d:22:13:91:52:84:0d:34:1a:43:22:c6:
         5a:c2:43:fc:76:a4:f3:54:7e:a0:f1:d9:8c:ae:56:62:31:44:
         a3:8f:a5:dc:7b:06:db:8c:b0:8d:27:87:d0:c4:2f:a4:e2:cb:
         c5:36:71:60:b2:5b:8d:10:50:1a:98:21:52:f3:a4:00:9a:a8:
         21:e4:f8:f6:80:af:6d:46:f8:0a:5b:4d:7b:fe:d2:e7:25:e9:
         a6:c7:b2:de:c1:c6:3a:9d:d5:a1:fd:08:2f:53:ad:ce:9f:d2:
         3e:33:c1:b1:f8:0d:1d:82:af:58:d9:49:95:4c:6a:ca:35:4f:
         99:18:d3:67:f9:d7:c6:0f:ae:c5:97:0c:a3:ac:12:3e:fc:e9:
         5f:64:81:9e:dd:5c:48:5c:bf:e3:2e:87:bf:b2:20:df:ae:c8:
         bd:ed:99:24:f9:d0:e8:57:aa:d4:7f:d9:0d:73:ad:1f:0a:77:
         74:ac:e4:4a:b6:69:a5:2e:2d:30:f1:cc:eb:cf:af:31:31:0d:
         d5:e2:41:e4:c9:50:53:05:2a:50:39:04:27:40:03:82:17:4c:
         6a:4d:1c:8a:a7:99:4f:13:d3:ad:3d:ec:39:a3:e7:8a:65:6b:
         30:d4:e8:90:45:aa:dc:f9:d7:ef:4b:28:7f:0b:32:c2:b5:13:
         1c:31:b5:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:57:32 2024 by rpki-client on console-ams.rpki-client.org