Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/253ed1b1-5a56-3a32-945a-c0ac46ec79d3.roa
File:                     253ed1b1-5a56-3a32-945a-c0ac46ec79d3.roa (raw, json)
Hash identifier:          GYm5TahhjihGAO+SzT/vRoghpDm0wHUwu8Bv9lYnpUo=
Subject key identifier:   79:50:AD:FB:B2:80:89:57:9E:6E:A8:29:9D:2A:CC:0F:EE:8D:FA:C8
Certificate issuer:       /CN=341b7e96-a6f0-44d3-aecc-9294d6bccc78
Certificate serial:       010D0C9F43285845280AF775618027FD233C4B40
Authority key identifier: A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/253ed1b1-5a56-3a32-945a-c0ac46ec79d3.roa
Signing time:             Sun 10 Mar 2024 02:00:25 +0000
ROA not before:           Sun 10 Mar 2024 02:00:25 +0000
ROA not after:            Sat 08 Jun 2024 01:00:25 +0000
asID:                     14618
IP address blocks:        45.223.190.0/24 maxlen: 24
                          45.223.189.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:28:0a:f7:75:61:80:27:fd:23:3c:4b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=341b7e96-a6f0-44d3-aecc-9294d6bccc78
        Validity
            Not Before: Mar 10 02:00:25 2024 GMT
            Not After : Jun  8 01:00:25 2024 GMT
        Subject: CN=18a2edb7-d0bb-4da8-951b-5c84f1603e03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b2:94:14:ea:64:52:d6:7c:f4:9d:a9:1c:c0:
                    8b:4a:b3:ce:35:53:b3:f8:28:88:d1:73:84:99:87:
                    8f:f0:44:48:bb:d0:b7:0b:ac:eb:0a:35:7c:fa:9e:
                    a6:7a:73:d1:03:2c:a1:11:a1:03:2f:68:53:fa:eb:
                    f6:7c:76:6d:c3:44:ba:7e:2f:f9:a5:98:ef:97:51:
                    64:c9:d2:46:86:b1:06:47:d8:ae:5b:3b:f0:b6:00:
                    a4:ef:2f:73:35:e9:f8:8e:8f:d9:9a:b7:47:10:f5:
                    f5:47:9c:8e:8a:0b:0e:b9:c3:78:0a:7e:2c:44:e5:
                    f4:4a:71:8c:10:d3:0f:a5:e7:93:23:ec:89:ca:90:
                    51:7e:29:c5:90:89:60:eb:37:67:7a:8d:5a:74:3f:
                    84:53:c6:7a:87:32:53:c7:f0:8d:53:2e:46:41:f2:
                    66:80:2f:fb:f9:d2:a3:bd:66:4e:f1:9e:84:29:d2:
                    55:ea:96:e5:10:4d:f1:78:0d:91:c8:6f:5a:ea:3b:
                    41:aa:81:23:a1:ef:c9:2d:c0:1f:ae:92:e6:3f:e4:
                    3b:e6:82:94:30:81:77:b4:98:54:b7:80:0d:67:0c:
                    a4:0b:a3:db:73:90:2f:a3:e9:93:cc:9b:f6:b7:b2:
                    ad:64:3a:6c:69:26:9f:fd:46:ad:79:3f:fe:ee:ab:
                    d2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:50:AD:FB:B2:80:89:57:9E:6E:A8:29:9D:2A:CC:0F:EE:8D:FA:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/253ed1b1-5a56-3a32-945a-c0ac46ec79d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.crl

            X509v3 Authority Key Identifier:
                keyid:A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.223.189.0-45.223.190.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:84:25:58:40:e4:06:3d:19:f1:dc:df:67:d7:1b:c6:cf:a7:
         1e:3a:35:0e:0b:03:96:88:28:70:8f:7a:78:8a:20:d1:8e:b1:
         5f:f2:59:95:7e:99:4c:b1:70:17:e6:7e:4d:2a:fb:2a:2e:9c:
         94:90:09:8d:95:b5:51:f6:27:e7:91:cc:63:0b:03:4e:7b:c9:
         60:c6:44:ff:64:b8:1c:35:81:81:ec:18:b4:79:99:05:53:45:
         cf:25:be:db:b2:23:c3:64:a7:2b:26:66:20:a2:8d:fb:94:97:
         2d:43:ae:46:3a:a1:67:fb:e9:9f:cf:2b:02:0a:a2:7d:c5:48:
         35:8e:d8:29:fd:f8:a0:16:a4:f6:eb:96:e7:3e:43:2e:ca:12:
         1a:44:a7:1c:d1:43:b8:a0:e3:a2:a8:2e:9b:f6:f9:49:3a:8a:
         24:e3:8f:88:e1:0a:e4:60:3b:4d:47:67:74:a3:96:f8:c2:bf:
         99:06:42:5f:96:ec:89:67:8b:e1:65:ef:bb:b4:93:13:d8:8b:
         31:41:fb:76:02:9c:16:39:05:c9:28:bd:5e:4e:19:53:45:a0:
         0a:70:13:3f:2f:65:1d:d3:1a:44:79:1a:39:ac:9b:1d:9b:33:
         73:95:1e:bc:2a:d3:9b:7b:a6:27:2c:27:82:70:79:a0:1d:d9:
         d9:94:e8:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:11:20 2024 by rpki-client on console-fra.rpki-client.org