Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/6920015b-bb01-392a-9c4a-9c1d6c1833ed.roa
File:                     6920015b-bb01-392a-9c4a-9c1d6c1833ed.roa (raw, json)
Hash identifier:          4Qhv/DI7j1Cszb7k6h3aPnx52aVzdE3Or3Rol3+3PIs=
Subject key identifier:   19:8F:A9:8F:E9:F6:3C:E9:1D:99:17:68:CA:74:5E:3C:F0:AA:8A:26
Certificate issuer:       /CN=22f3c152-12b6-441e-b4d6-66feab870c4d
Certificate serial:       010D0C9F4328584527954450C61F93E76E2A3700
Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/6920015b-bb01-392a-9c4a-9c1d6c1833ed.roa
Signing time:             Sat 09 Mar 2024 22:03:21 +0000
ROA not before:           Sat 09 Mar 2024 22:03:21 +0000
ROA not after:            Fri 07 Jun 2024 21:03:21 +0000
asID:                     3800
IP address blocks:        45.59.64.0/21 maxlen: 24
                          199.180.248.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Apr 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:27:95:44:50:c6:1f:93:e7:6e:2a:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d
        Validity
            Not Before: Mar  9 22:03:21 2024 GMT
            Not After : Jun  7 21:03:21 2024 GMT
        Subject: CN=4cc58a30-4196-4fd1-bf60-b0954a2605ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7b:78:23:7f:7f:71:92:2e:0b:f6:c8:53:ae:
                    ca:e1:45:9c:e8:3f:e9:9a:6e:f5:0f:34:ba:a1:fc:
                    5b:b4:aa:a6:38:e5:b7:0a:13:3b:6a:97:7c:be:f8:
                    6d:c5:8d:43:db:a7:bd:07:48:37:81:54:54:8b:3e:
                    32:23:d8:59:6f:78:ab:f4:0d:ea:9c:f3:12:99:40:
                    b6:0e:be:f8:18:b3:bb:90:d2:4b:25:bc:2e:09:52:
                    c7:ea:1e:f8:a9:a6:8c:50:13:55:33:6e:2f:a6:89:
                    5d:b8:4c:cd:13:a6:72:48:87:44:b4:ec:32:87:5c:
                    74:1a:74:88:dd:e3:a7:75:df:53:33:19:4d:5b:34:
                    93:c0:78:41:4e:48:f6:1e:4d:2c:c1:80:bc:81:76:
                    69:e2:d9:ea:2b:8c:31:48:f8:7f:f8:86:ea:cf:ea:
                    53:5a:e6:3a:66:76:56:19:e7:c7:96:31:ce:8c:df:
                    ad:89:08:92:66:5f:40:51:d9:f5:3f:aa:38:3a:2c:
                    4b:93:30:ad:61:11:da:3a:56:61:47:e4:e3:9a:98:
                    0f:5f:85:21:b5:b3:b0:80:15:7b:58:b9:29:7d:eb:
                    ef:57:71:7a:71:10:79:3d:b2:0e:91:73:f5:8e:9f:
                    6d:77:b7:e1:94:cb:e7:18:de:72:64:b3:31:8d:42:
                    3a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:8F:A9:8F:E9:F6:3C:E9:1D:99:17:68:CA:74:5E:3C:F0:AA:8A:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/6920015b-bb01-392a-9c4a-9c1d6c1833ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl

            X509v3 Authority Key Identifier:
                keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.64.0/21
                  199.180.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:c5:1e:f1:fb:8c:a3:2b:a2:f0:4b:1b:32:d5:1b:34:d3:00:
         9a:eb:f1:6f:e3:52:69:d2:7d:8a:38:17:d3:ef:41:65:e3:25:
         eb:dc:e4:73:6a:c6:33:10:a4:e4:b7:d0:5d:b6:b3:c5:8d:a0:
         ec:b9:30:56:93:a4:5f:6b:ba:8a:85:ec:2f:0b:ca:25:b5:7a:
         a7:2e:3b:b6:13:93:14:7e:49:60:e6:c1:81:26:05:87:d7:f3:
         78:18:1a:9b:c4:29:40:98:2e:8c:77:44:35:f7:f6:b0:d0:4a:
         11:ce:1e:ea:ea:92:86:6a:93:0a:d1:a1:e1:70:de:ca:f4:33:
         33:1d:53:31:33:a7:83:17:64:34:b6:d4:f6:45:c3:f9:51:e8:
         6c:05:b4:9c:77:7b:d5:29:94:fa:28:cf:e2:87:95:ac:f4:e9:
         60:0e:08:ed:a7:50:0a:e7:e9:a7:1e:61:78:c0:88:63:c0:03:
         28:3d:9c:f1:31:37:a6:28:12:89:89:44:ce:bb:44:36:45:f6:
         dd:90:8b:6a:e7:5b:1e:7a:50:a8:0f:36:40:4d:31:f2:88:25:
         38:cf:0b:0a:d0:50:49:01:9e:3c:b7:99:99:52:78:ca:e0:00:
         6f:6d:f9:cf:21:8a:00:dd:23:0d:de:bb:08:07:2e:d9:1d:d9:
         4e:b8:ac:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 15:13:35 2024 by rpki-client on console-ams.rpki-client.org