Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/03940f68-15cc-37ea-9d81-2d50bccadcd8.roa
File:                     03940f68-15cc-37ea-9d81-2d50bccadcd8.roa (raw, json)
Hash identifier:          AD0sA+CsVwri7cWOQgP5mQwVABOqxAcHrsOrKf8BQ7w=
Subject key identifier:   6C:78:7A:E8:6D:7F:B6:B0:A8:33:00:A0:0B:54:17:12:18:A2:20:92
Certificate issuer:       /CN=341b7e96-a6f0-44d3-aecc-9294d6bccc78
Certificate serial:       010D0C9F43285844FF901C82FD97C3C9B73CCF80
Authority key identifier: A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/03940f68-15cc-37ea-9d81-2d50bccadcd8.roa
Signing time:             Sat 24 Feb 2024 14:00:31 +0000
ROA not before:           Sat 24 Feb 2024 14:00:31 +0000
ROA not after:            Fri 24 May 2024 13:00:31 +0000
asID:                     16509
IP address blocks:        45.223.12.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ff:90:1c:82:fd:97:c3:c9:b7:3c:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=341b7e96-a6f0-44d3-aecc-9294d6bccc78
        Validity
            Not Before: Feb 24 14:00:31 2024 GMT
            Not After : May 24 13:00:31 2024 GMT
        Subject: CN=7c070623-902e-4f59-a418-afbe83e7f7e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:cf:14:fc:6f:e5:21:b5:bc:ae:87:03:01:32:
                    59:ea:fe:26:6e:6c:cc:3a:32:65:c5:ab:c3:6d:a1:
                    3b:be:4b:f8:23:6f:16:7b:e1:8d:d2:7c:42:7e:18:
                    bc:06:58:e5:2a:5d:ae:25:98:b9:89:3b:f7:ff:e5:
                    65:03:f4:0b:14:b6:9a:20:46:92:67:02:40:b4:4a:
                    82:81:91:22:a3:44:1e:ae:56:6b:e1:0a:ac:62:5e:
                    0b:b2:bd:07:0e:b4:e3:74:fc:c6:d9:7f:f5:92:19:
                    6c:de:28:b1:1f:ce:2e:97:53:f0:3d:90:e1:88:c8:
                    18:71:78:e2:a6:26:59:e3:c7:dc:05:e6:e0:07:1e:
                    2f:17:56:0c:f0:fb:07:74:9a:44:54:92:91:54:31:
                    68:2f:24:26:a7:08:20:1a:c6:94:37:5c:54:e9:3d:
                    b5:9d:ea:5b:a1:5c:ba:fc:a9:48:98:2c:5d:43:e3:
                    e7:dd:7d:57:6c:df:b2:24:8c:5a:a6:37:88:9c:f4:
                    e0:c7:b2:f9:61:30:5c:43:92:10:12:ee:7b:cd:69:
                    d8:6f:5a:38:88:b6:36:af:02:e8:10:ea:54:1d:5d:
                    28:0d:4d:27:d9:17:94:a4:47:6b:31:a9:b0:63:77:
                    48:b0:73:b0:88:17:ab:ae:b2:7e:76:9e:d0:6d:eb:
                    1d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:78:7A:E8:6D:7F:B6:B0:A8:33:00:A0:0B:54:17:12:18:A2:20:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/03940f68-15cc-37ea-9d81-2d50bccadcd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.crl

            X509v3 Authority Key Identifier:
                keyid:A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.223.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:58:b0:b1:20:bf:7f:f5:52:02:19:6e:75:62:cf:ee:8d:f2:
         f0:9d:75:da:11:ac:89:42:5b:24:b5:09:ac:35:56:b2:d7:92:
         a5:da:2a:15:77:0f:a2:12:4b:b0:be:42:b7:ec:a9:ad:fb:a7:
         ec:04:84:0c:1b:9b:8a:54:e2:12:85:e4:08:e7:b8:5c:6d:36:
         05:1b:8c:f8:c1:c6:a1:c2:c4:26:4a:5b:e6:0e:e2:fb:07:a1:
         8e:7e:c2:a5:db:d5:27:56:fb:6a:4d:c5:b1:bb:de:74:98:fd:
         a9:50:67:fc:8e:02:87:2d:ee:5e:80:6a:21:2d:5b:1a:05:d4:
         46:c4:07:d6:c2:7c:0a:bd:f1:91:5b:ec:55:da:16:29:c5:50:
         32:63:24:63:74:ff:f3:a0:30:83:fa:82:87:59:39:bb:b7:a5:
         6e:d1:cc:c3:1f:e0:34:30:16:12:41:7f:a7:80:87:bd:61:36:
         48:23:c6:53:12:d4:9c:8e:cd:fb:54:3c:5d:a5:c6:a8:6e:5f:
         cb:86:cd:23:11:f6:47:d7:57:2c:c5:dc:7f:62:4f:5f:f4:f8:
         0b:59:08:89:65:57:59:df:27:ea:84:88:2b:a7:4b:2a:6d:f5:
         13:d0:ac:e7:4f:c2:dc:48:c0:e1:b7:3e:bd:aa:1c:fb:a8:87:
         3c:9c:60:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:19:52 2024 by rpki-client on console-ams.rpki-client.org