Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/9a249e6e-47df-3766-a58c-3846de9693e3.roa
File:                     9a249e6e-47df-3766-a58c-3846de9693e3.roa (raw, json)
Hash identifier:          Q8tiNM7TEPQbG6km7DeicCFPlY/NBGwWCO9UPRzTeqE=
Subject key identifier:   87:0B:78:0F:71:D5:4E:41:8E:CC:F4:0F:2E:B9:A5:57:C8:40:EA:47
Certificate issuer:       /CN=22f3c152-12b6-441e-b4d6-66feab870c4d
Certificate serial:       010D0C9F43285844F895582D3DE28E60ED344800
Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/9a249e6e-47df-3766-a58c-3846de9693e3.roa
Signing time:             Thu 22 Feb 2024 02:00:27 +0000
ROA not before:           Thu 22 Feb 2024 02:00:27 +0000
ROA not after:            Wed 22 May 2024 01:00:27 +0000
asID:                     12212
IP address blocks:        45.59.71.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f8:95:58:2d:3d:e2:8e:60:ed:34:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d
        Validity
            Not Before: Feb 22 02:00:27 2024 GMT
            Not After : May 22 01:00:27 2024 GMT
        Subject: CN=6a116924-fb33-4de9-b424-ff84c934e6b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:01:09:37:d6:a7:76:43:2c:f9:86:c3:8f:25:
                    53:87:e9:95:72:89:7c:5e:61:00:da:3d:e6:2a:3c:
                    57:3e:57:8e:3d:41:dd:c6:0f:14:dd:ff:5a:3c:8c:
                    1a:19:56:41:93:fd:44:94:d3:5e:3c:c6:94:0a:a1:
                    68:a4:42:10:a0:27:ca:27:e4:2d:59:c9:f3:b5:5c:
                    8f:62:63:89:b7:8b:3d:50:46:27:ca:c0:b2:e5:26:
                    03:eb:5a:0f:da:ab:56:75:fa:65:cb:fa:26:47:8e:
                    32:03:69:b3:8c:7b:77:7f:a7:b5:90:1b:e4:fd:af:
                    a6:ad:f2:63:1d:7a:4e:dc:f7:a9:2b:cb:8b:da:5e:
                    14:73:6a:17:2a:b1:98:3a:a8:68:fb:64:cd:2e:26:
                    c8:2e:73:40:0a:e2:c0:5a:94:76:59:3a:71:77:59:
                    8c:6d:f1:e9:65:80:1c:5c:9a:05:6f:46:01:72:e6:
                    3a:c1:a0:3c:4d:97:f9:c9:74:89:a3:ab:10:07:68:
                    f6:86:e1:5c:6d:ad:6f:8f:1d:f0:00:4d:70:cd:01:
                    41:5a:49:e6:0e:9b:6f:24:7f:e1:2a:43:cf:81:d6:
                    3d:3a:59:e6:74:0f:4e:f0:22:45:a9:b1:d2:ad:76:
                    bd:92:e2:a4:d1:20:43:ed:fc:98:f2:1c:30:19:ed:
                    be:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:0B:78:0F:71:D5:4E:41:8E:CC:F4:0F:2E:B9:A5:57:C8:40:EA:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/9a249e6e-47df-3766-a58c-3846de9693e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl

            X509v3 Authority Key Identifier:
                keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:98:bf:25:0a:41:f8:32:5d:07:c3:29:b4:49:a1:de:17:6f:
         69:a9:f3:d0:2a:21:09:e4:c3:3a:7e:89:cf:80:08:c4:fc:c2:
         3d:72:61:28:4e:d2:9c:2b:30:d9:7e:4c:aa:4f:1b:0b:35:06:
         30:5f:0b:fa:8f:04:23:bc:62:be:82:eb:ae:f9:0b:3c:2b:9f:
         73:7a:a3:fc:56:b6:c1:4c:e1:78:00:4f:d5:ce:31:cf:61:43:
         4f:fb:fb:cc:f2:40:f3:ed:dd:eb:c7:87:03:59:c3:08:a1:f3:
         f3:38:96:71:7f:a4:ce:7c:1e:23:f7:a1:1a:c8:43:ee:a5:65:
         32:e7:33:80:36:e2:96:81:f5:64:82:b2:8a:da:5d:bd:ea:62:
         42:af:f0:7a:27:e0:7e:a1:6a:40:81:1a:7a:04:2f:5d:2a:21:
         df:d0:13:d4:ed:17:4c:e2:da:a1:47:ce:45:71:7f:2f:1c:b3:
         7f:83:96:51:35:1f:0b:17:33:54:ea:3f:61:d3:1b:4f:e0:e6:
         83:17:fb:33:d9:af:fc:db:99:7a:21:65:6c:f9:11:58:a0:e2:
         5f:13:fe:51:ed:07:08:3f:91:a3:1e:f2:5a:0a:e1:81:04:8b:
         c5:49:1f:97:95:d2:b6:72:86:12:9b:3e:95:ac:57:03:42:20:
         3d:57:3a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 21:42:34 2024 by rpki-client on console-ams.rpki-client.org