Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/f8450f00-dc71-372a-ab1c-68c74f002318.roa
File:                     f8450f00-dc71-372a-ab1c-68c74f002318.roa (raw, json)
Hash identifier:          nqY3nH9djXEqT2FBpMES+uSQR20RsWPBe6D0djsuh7s=
Subject key identifier:   30:60:51:5D:63:FB:9F:41:9C:89:25:B9:06:8C:2F:C9:78:DA:CB:E0
Certificate issuer:       /CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9
Certificate serial:       010D0C9F43285847832BEA04F9CDF30AD04D6C40
Authority key identifier: CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/f8450f00-dc71-372a-ab1c-68c74f002318.roa
Signing time:             Sat 12 Oct 2024 02:59:19 +0000
ROA not before:           Sat 12 Oct 2024 02:59:19 +0000
ROA not after:            Fri 10 Jan 2025 03:59:19 +0000
asID:                     13332
IP address blocks:        45.249.56.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:83:2b:ea:04:f9:cd:f3:0a:d0:4d:6c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9
        Validity
            Not Before: Oct 12 02:59:19 2024 GMT
            Not After : Jan 10 03:59:19 2025 GMT
        Subject: CN=f9555164-fa5f-4af3-a5df-5365a5aacf60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e4:9a:2d:8a:19:4f:2b:55:c7:09:c0:cb:57:
                    9b:10:5f:6b:4e:f6:44:27:81:bc:cc:55:df:70:1d:
                    de:1e:d8:57:34:98:af:b2:58:46:b1:59:ca:f9:92:
                    c1:f4:38:c8:66:49:5e:34:4e:01:32:7b:ac:94:fb:
                    ee:f6:bc:4b:c5:5f:0f:2c:7c:5e:95:c7:24:a9:d9:
                    25:a4:6d:5d:f2:c9:ae:5a:6e:ab:6d:46:74:17:71:
                    d6:a8:f3:e8:77:b5:c9:43:21:75:ca:b9:50:4f:87:
                    b8:88:5a:e7:12:12:f0:32:b5:19:a8:18:92:88:84:
                    1a:d8:14:62:52:90:82:39:de:b4:e9:b3:f2:7f:cd:
                    d3:a0:6f:5b:1d:99:6b:bf:40:90:24:22:66:f2:00:
                    27:94:62:61:76:6c:2e:e7:58:a6:8a:f0:71:71:20:
                    86:f4:1f:6f:40:7b:99:ae:7c:e7:77:f7:17:4c:2c:
                    cc:34:75:e9:cf:60:69:93:24:9d:2f:50:ca:8b:95:
                    c5:d1:94:20:76:21:b5:4c:b5:be:a9:cc:cc:63:b0:
                    3e:d7:4a:f8:b1:9b:8d:c1:57:43:af:bb:17:68:90:
                    09:8b:d6:73:cf:24:3b:0a:5c:18:73:3e:76:78:60:
                    79:8a:51:35:e3:bb:dc:f7:40:a1:bb:ea:d0:21:74:
                    d9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:60:51:5D:63:FB:9F:41:9C:89:25:B9:06:8C:2F:C9:78:DA:CB:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/f8450f00-dc71-372a-ab1c-68c74f002318.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl

            X509v3 Authority Key Identifier:
                keyid:CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.249.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:9d:e3:74:4b:31:1b:4f:1e:01:1d:7d:99:e2:f8:3d:e0:bd:
         a9:65:51:0f:c1:52:b4:c2:b6:04:a6:55:57:26:0b:65:3e:05:
         da:b8:e8:4e:d2:c2:a7:08:e5:09:3d:2e:0e:20:0d:b5:ce:42:
         18:70:b4:88:29:a0:ad:a8:b4:00:cc:e4:99:33:11:c2:dc:5c:
         8a:23:9c:a1:18:e6:7f:6f:04:32:58:97:3b:55:8b:af:9e:fd:
         99:3a:18:13:b2:80:18:88:51:74:b8:8c:7a:de:12:ca:ad:7a:
         a6:78:6d:b1:7d:df:27:f0:a7:29:4b:78:0f:eb:a4:c1:96:06:
         cf:47:6c:55:3f:27:83:e8:5f:16:01:64:31:cb:ff:d7:ce:4a:
         0e:f2:11:44:8e:50:37:71:f1:a9:cf:f6:70:dd:d2:6d:87:2c:
         6e:a8:41:a6:fe:0b:7f:bf:19:0d:f9:f6:9e:e3:37:bd:c8:36:
         08:40:f7:c2:61:63:69:1c:49:95:45:3f:cb:5d:07:de:13:bc:
         ea:b1:7f:bb:c5:86:67:de:89:65:f5:54:7c:d5:a6:af:0a:11:
         93:9a:3a:2f:28:31:2b:d5:ed:11:7e:fb:98:a5:03:d4:3e:91:
         45:df:d4:06:15:1b:a1:3e:46:b8:05:21:96:6b:33:43:f2:a7:
         50:a6:83:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:12:16 2024 by rpki-client on console-fra.rpki-client.org