Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/dd3fba27-8eb5-35e8-99fc-0065f304a90c.roa
File:                     dd3fba27-8eb5-35e8-99fc-0065f304a90c.roa (raw, json)
Hash identifier:          oql6uGgN5I6NhsnvCFP4owe4Y9ElJ75pLSM+9GKJU9E=
Subject key identifier:   63:AB:54:16:7F:5C:84:EB:AD:F6:9E:3D:25:13:17:17:69:64:67:90
Certificate issuer:       /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial:       010D0C9F4328583A0C908C2B69B7E850C460B480
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/dd3fba27-8eb5-35e8-99fc-0065f304a90c.roa
Signing time:             Tue 30 Jul 2019 04:00:00 +0000
ROA not before:           Tue 30 Jul 2019 04:00:00 +0000
ROA not after:            Mon 30 Jul 2029 04:00:00 +0000
asID:                     398101
IP address blocks:        45.40.156.0/22 maxlen: 22
                          45.40.128.0/20 maxlen: 20
                          45.40.160.0/19 maxlen: 19
                          50.62.16.0/20 maxlen: 20
                          50.62.24.0/22 maxlen: 22
                          50.62.136.0/21 maxlen: 21
                          50.62.144.0/21 maxlen: 21
                          50.62.192.0/18 maxlen: 18
                          50.63.8.0/22 maxlen: 22
                          50.63.12.0/22 maxlen: 22
                          50.63.128.0/21 maxlen: 21
                          50.63.160.0/21 maxlen: 21
                          2607:f208:d000::/43 maxlen: 43
                          2607:f208:df00::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:0c:90:8c:2b:69:b7:e8:50:c4:60:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
        Validity
            Not Before: Jul 30 04:00:00 2019 GMT
            Not After : Jul 30 04:00:00 2029 GMT
        Subject: CN=d801c31f-be68-47f5-a9d4-ed8c63572ccc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0f:06:c1:8e:77:fd:8c:ad:1d:3c:5c:4e:ac:
                    fb:00:d3:69:3d:81:eb:3f:05:c8:94:0f:4a:f7:0e:
                    a2:cf:3d:a5:06:31:ca:c9:67:92:d4:22:4a:27:f8:
                    7e:2c:10:1c:c3:7e:25:f4:1d:68:a3:5b:3f:58:28:
                    93:23:f8:cc:f1:ad:10:de:f3:ea:d4:44:a1:9e:e8:
                    d4:8a:d3:4e:bb:79:6f:8b:8c:cc:65:d7:99:43:da:
                    9d:1b:3e:a0:ea:1c:45:66:99:ed:c4:bc:81:b0:f9:
                    2f:9a:47:d8:2b:8c:68:89:20:77:c7:2b:0e:c0:e2:
                    b5:13:71:f4:7f:f3:ea:7d:4e:b1:1f:ea:35:d8:9a:
                    40:19:d7:13:75:a8:50:1f:d3:de:2d:c6:13:ea:a1:
                    5b:8c:94:05:92:78:8e:12:3c:53:8b:78:0d:19:ef:
                    e8:a1:77:b8:6e:65:23:23:5d:44:1b:2b:14:76:d4:
                    e6:f1:1f:81:0a:7a:48:10:5d:d8:ff:a7:6f:5c:27:
                    50:0b:2c:af:5e:7d:9e:66:b5:0c:fa:28:9b:b1:03:
                    c4:d8:4a:ec:bf:a5:78:62:e1:32:85:1e:ff:40:fe:
                    45:75:a5:e8:28:de:20:9c:e0:4a:7a:24:13:ae:34:
                    20:63:72:bc:7d:c4:0b:fc:c6:2b:88:c5:5b:4f:ea:
                    9c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:AB:54:16:7F:5C:84:EB:AD:F6:9E:3D:25:13:17:17:69:64:67:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/dd3fba27-8eb5-35e8-99fc-0065f304a90c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl

            X509v3 Authority Key Identifier:
                keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.40.128.0/20
                  45.40.156.0-45.40.191.255
                  50.62.16.0/20
                  50.62.136.0-50.62.151.255
                  50.62.192.0/18
                  50.63.8.0/21
                  50.63.128.0/21
                  50.63.160.0/21
                IPv6:
                  2607:f208:d000::/43
                  2607:f208:df00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:15:bf:8d:c3:a7:29:e2:48:85:4a:99:57:a1:61:d2:39:e9:
         96:d8:48:d7:1c:03:c2:30:bd:39:64:63:ef:64:c5:15:59:c3:
         40:73:13:c8:c0:37:e1:bc:4d:05:02:7f:a5:9b:b8:d9:ec:34:
         4b:3c:c4:bf:07:03:c2:a4:2b:9c:ed:7c:b5:5c:67:a1:08:f9:
         cb:cb:80:be:81:8f:83:9e:08:6f:67:d9:08:31:61:8d:d0:ac:
         57:85:92:2d:9a:98:4d:af:5e:ba:71:85:6d:3a:ab:12:7d:45:
         f9:35:e2:d8:fc:d3:f2:ab:2f:fd:ee:eb:d6:ec:88:96:3a:6e:
         e4:a0:e0:54:2c:fd:6a:16:8d:f8:ad:a3:15:21:a4:09:70:33:
         61:37:26:fe:7c:0a:ad:f1:56:88:eb:09:ea:a1:ee:6f:1b:f0:
         04:a6:02:cb:b0:15:6a:ef:26:d7:1f:26:b2:23:d9:77:1b:41:
         5e:06:65:91:34:90:2a:03:92:88:67:ed:83:bd:43:f3:04:8b:
         c8:d4:69:fd:1b:15:9f:4c:90:6b:fe:f4:22:f6:b0:e0:59:1b:
         9d:f3:2a:aa:b6:a7:0d:2a:44:b2:f7:af:cd:83:66:3f:10:e6:
         77:67:ed:aa:bf:eb:25:48:9b:88:44:8b:55:c7:7e:15:72:3e:
         b8:f9:10:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 02:11:09 2024 by rpki-client on console-ams.rpki-client.org