Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a939ee7e-81b2-46cf-9a43-3647ff132a06/20c412b1-5090-326d-952e-b44619b45586.roa
File:                     20c412b1-5090-326d-952e-b44619b45586.roa (raw, json)
Hash identifier:          od+9utZUMvP1CLRSSxp4GpxWKoJPzxc1cK05T8W8dI4=
Subject key identifier:   B1:FF:6F:83:EE:7D:53:12:BB:4C:7C:FB:03:47:CC:E7:D5:9F:41:41
Certificate issuer:       /CN=a939ee7e-81b2-46cf-9a43-3647ff132a06
Certificate serial:       010D0C9F4328584726D088A63FED7D9A37FC84C0
Authority key identifier: 42:67:98:4B:71:CA:19:1C:6D:E1:A0:5E:54:0C:B8:AA:FA:8B:28:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a939ee7e-81b2-46cf-9a43-3647ff132a06.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a939ee7e-81b2-46cf-9a43-3647ff132a06/20c412b1-5090-326d-952e-b44619b45586.roa
Signing time:             Mon 09 Sep 2024 01:00:31 +0000
ROA not before:           Mon 09 Sep 2024 01:00:31 +0000
ROA not after:            Sun 08 Dec 2024 02:00:31 +0000
asID:                     976
IP address blocks:        45.59.128.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a939ee7e-81b2-46cf-9a43-3647ff132a06/a939ee7e-81b2-46cf-9a43-3647ff132a06.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a939ee7e-81b2-46cf-9a43-3647ff132a06/a939ee7e-81b2-46cf-9a43-3647ff132a06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a939ee7e-81b2-46cf-9a43-3647ff132a06.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:26:d0:88:a6:3f:ed:7d:9a:37:fc:84:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a939ee7e-81b2-46cf-9a43-3647ff132a06
        Validity
            Not Before: Sep  9 01:00:31 2024 GMT
            Not After : Dec  8 02:00:31 2024 GMT
        Subject: CN=b2890bcc-2824-4e81-aa0e-e4025f1b1a24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:16:57:c4:07:0c:00:a3:3d:8c:1f:9e:f3:cb:
                    15:b1:48:b7:6d:47:20:bf:b9:55:3a:69:10:b4:47:
                    a1:e0:9b:62:27:39:4a:48:60:57:92:22:e3:51:f7:
                    d3:70:62:f9:f5:a2:2e:cf:0b:e2:c7:d0:2a:f0:b8:
                    e6:e5:b7:a5:51:2a:c7:10:1c:18:fa:fe:83:d5:08:
                    af:aa:0d:c3:eb:64:84:ee:de:20:23:6b:d4:d4:26:
                    a7:88:cf:a3:53:f8:7a:54:22:72:a4:20:5d:c9:0f:
                    54:d0:07:96:b7:80:d1:fd:05:af:76:42:b9:f6:2e:
                    ea:4f:e9:9e:34:81:af:21:30:5b:1d:89:a6:19:8b:
                    33:6b:5d:00:27:07:d1:7a:29:49:3d:3f:de:42:cf:
                    ae:15:7c:2e:48:a2:c5:22:80:ce:9b:a3:c6:fd:3d:
                    cc:3b:02:dc:1e:74:a5:0a:af:ea:e2:96:89:78:e1:
                    90:ac:12:f3:2d:4b:d9:fa:ea:74:d9:f6:72:fa:54:
                    ec:2f:94:8b:8b:64:d2:a6:95:ba:1d:5d:2e:04:5e:
                    c7:cc:05:1b:c6:96:95:b7:56:ae:ac:59:79:a0:6e:
                    57:f0:6f:06:32:6c:24:9c:76:02:22:aa:89:11:f6:
                    94:4b:6b:24:c6:23:d6:06:d2:2c:e2:4f:f6:a2:93:
                    0e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:FF:6F:83:EE:7D:53:12:BB:4C:7C:FB:03:47:CC:E7:D5:9F:41:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a939ee7e-81b2-46cf-9a43-3647ff132a06/20c412b1-5090-326d-952e-b44619b45586.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a939ee7e-81b2-46cf-9a43-3647ff132a06/a939ee7e-81b2-46cf-9a43-3647ff132a06.crl

            X509v3 Authority Key Identifier:
                keyid:42:67:98:4B:71:CA:19:1C:6D:E1:A0:5E:54:0C:B8:AA:FA:8B:28:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a939ee7e-81b2-46cf-9a43-3647ff132a06.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.128.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:ba:69:00:ed:47:97:31:a7:56:25:7f:67:06:43:be:40:53:
         72:63:d6:a4:58:12:fd:c6:f4:6f:43:2d:e9:b0:3e:3f:c3:23:
         c3:fd:01:1c:0c:5c:36:5b:22:6b:f0:f0:3c:26:ce:35:cb:e0:
         75:db:c4:8b:e0:00:f1:7a:0f:95:7b:3f:a8:2d:c0:89:04:f6:
         ab:18:6b:df:9f:80:20:72:70:2b:5f:ef:50:e9:38:71:d9:1d:
         51:fd:36:e5:2a:33:26:82:5b:0e:6b:b7:f4:3f:89:e3:60:10:
         da:e6:06:63:4b:fc:96:cb:aa:4f:0c:0c:cd:a8:f0:f3:bb:a4:
         a6:04:62:a0:fb:3e:7e:e4:5d:5a:f0:98:c2:01:5a:3a:b6:9a:
         f6:d4:1b:9d:13:e9:28:fb:41:58:8d:63:ff:d0:a8:45:aa:79:
         7e:2b:f7:96:cf:8c:67:ce:8a:28:0c:0b:ba:6f:b2:5d:08:ff:
         bd:16:1c:55:7b:1f:18:32:82:24:16:d9:4e:0e:5b:08:21:bf:
         12:b5:65:ae:ec:43:8d:00:e2:a0:8f:a1:f8:90:db:b6:00:9c:
         b4:e1:f4:a5:2c:53:7e:a7:27:2b:5b:c5:56:a0:8d:3b:6a:ce:
         e4:e1:9a:e1:98:ef:60:2d:a1:b3:80:62:84:1e:4e:43:02:b7:
         6c:2e:c2:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:43:05 2024 by rpki-client on console-ams.rpki-client.org