Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5ba0e189-b778-475a-a7e7-ea67bb4d43c2/bd22376a-0063-340a-9389-87a8253b2735.roa
File:                     bd22376a-0063-340a-9389-87a8253b2735.roa (raw, json)
Hash identifier:          vYbnJhCQ63S8/U6gFDxhipg+BB5OfEAAH1AV5eoR/Uk=
Subject key identifier:   46:7C:7E:D0:14:FB:19:28:C4:94:CA:48:91:E2:E7:36:00:39:E0:C6
Certificate issuer:       /CN=5ba0e189-b778-475a-a7e7-ea67bb4d43c2
Certificate serial:       010D0C9F43285845E9F3CCC73D996577CA18FC40
Authority key identifier: 74:D0:81:3E:8E:4A:C0:D4:9B:5E:D6:74:81:CE:FC:55:54:E5:70:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5ba0e189-b778-475a-a7e7-ea67bb4d43c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5ba0e189-b778-475a-a7e7-ea67bb4d43c2/bd22376a-0063-340a-9389-87a8253b2735.roa
Signing time:             Sat 18 May 2024 13:00:35 +0000
ROA not before:           Sat 18 May 2024 13:00:35 +0000
ROA not after:            Fri 16 Aug 2024 13:00:35 +0000
asID:                     46154
IP address blocks:        169.197.64.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5ba0e189-b778-475a-a7e7-ea67bb4d43c2/5ba0e189-b778-475a-a7e7-ea67bb4d43c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5ba0e189-b778-475a-a7e7-ea67bb4d43c2/5ba0e189-b778-475a-a7e7-ea67bb4d43c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5ba0e189-b778-475a-a7e7-ea67bb4d43c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e9:f3:cc:c7:3d:99:65:77:ca:18:fc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ba0e189-b778-475a-a7e7-ea67bb4d43c2
        Validity
            Not Before: May 18 13:00:35 2024 GMT
            Not After : Aug 16 13:00:35 2024 GMT
        Subject: CN=51bdf87a-1840-4245-b83f-2d7fa04b176c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9c:1b:11:93:20:cb:d1:4b:f4:17:21:2e:e0:
                    38:4d:9b:c4:6d:65:f5:a4:02:92:6c:4e:42:c0:26:
                    7c:5e:dd:9a:00:0b:91:f7:46:c3:09:4d:9b:5b:2e:
                    91:03:c2:20:05:e7:19:86:7d:9d:5c:32:b0:03:47:
                    c7:e0:d3:c4:5e:ee:6e:15:ff:0b:88:25:5e:77:f2:
                    f4:29:96:09:47:9c:08:64:47:9a:f0:94:18:e8:50:
                    5c:5d:be:3f:ad:6e:49:80:91:0d:52:36:63:68:62:
                    23:59:e3:f3:df:49:73:6d:e5:02:8f:af:17:5e:58:
                    9d:7d:a8:5b:65:d5:a9:05:ef:65:b5:d4:ae:5f:1b:
                    bd:4e:4e:06:18:fe:73:b8:c3:f7:a1:a4:5e:a4:39:
                    a1:ce:14:e3:49:6b:64:38:7e:58:4c:f3:88:e9:70:
                    08:ab:c2:cd:10:80:68:d2:a0:e8:46:aa:bd:34:5e:
                    0a:13:59:85:ae:30:4e:bb:ac:db:1d:f3:07:b7:59:
                    18:f7:dc:4e:72:da:05:06:6d:3a:93:2a:f0:ca:5d:
                    3a:58:6b:ea:94:70:04:08:1e:51:e8:35:d5:84:59:
                    7c:08:e4:62:e0:1b:cd:d3:ef:98:ac:9b:3a:d7:e4:
                    8a:fb:f6:ce:3b:9f:2e:b6:23:17:9b:99:a3:94:d7:
                    31:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:7C:7E:D0:14:FB:19:28:C4:94:CA:48:91:E2:E7:36:00:39:E0:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5ba0e189-b778-475a-a7e7-ea67bb4d43c2/bd22376a-0063-340a-9389-87a8253b2735.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5ba0e189-b778-475a-a7e7-ea67bb4d43c2/5ba0e189-b778-475a-a7e7-ea67bb4d43c2.crl

            X509v3 Authority Key Identifier:
                keyid:74:D0:81:3E:8E:4A:C0:D4:9B:5E:D6:74:81:CE:FC:55:54:E5:70:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5ba0e189-b778-475a-a7e7-ea67bb4d43c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.197.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:ac:0b:b1:81:43:82:8c:2c:2b:1c:bd:6a:05:03:38:0a:93:
         ed:42:b4:23:31:ee:47:71:44:90:ae:ac:9a:54:ab:c2:c1:07:
         70:d0:fb:15:9b:f3:9a:c4:04:81:39:cf:09:ab:2b:99:52:4d:
         81:aa:9b:b6:c5:e0:b4:92:f4:d4:71:61:4f:7f:dd:35:9e:c8:
         08:e7:57:36:50:db:f4:24:04:c4:64:9d:05:7a:be:04:16:0b:
         32:67:b1:34:ab:95:47:72:ae:a2:65:66:26:f0:39:49:2d:b6:
         be:4b:ca:e7:e6:eb:3e:2a:67:04:d8:09:02:6f:99:d4:21:bd:
         12:0d:8e:39:12:c9:00:86:c1:74:a3:58:84:01:13:3e:f4:5d:
         38:4a:6d:80:46:cf:4e:92:76:85:a2:73:1b:54:63:75:0e:e7:
         b5:fb:97:3d:9b:7b:a8:15:8b:da:f8:75:7a:4f:2c:d9:40:db:
         31:12:91:50:72:ab:84:64:85:61:10:7a:24:e7:54:45:ef:79:
         15:ec:2f:47:ef:a0:5f:d1:00:31:2f:a3:f7:d9:05:d5:ad:d1:
         c1:a8:d4:55:8d:39:c0:fd:62:c7:28:0d:ed:60:f9:8a:18:76:
         54:79:33:ae:1f:65:8e:af:98:cd:b0:e9:b2:d7:0e:95:7c:fe:
         41:10:6e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 01:41:25 2024 by rpki-client on console-fra.rpki-client.org