Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/09729117-c725-49ca-9a64-f10a055403c3/95727abb-f8cd-392c-9fda-6a003409ad50.roa
File:                     95727abb-f8cd-392c-9fda-6a003409ad50.roa (raw, json)
Hash identifier:          R8LP4MHc6uHnKnHDgNYRBqO6Xz2fUKFMhCYphrgtAXY=
Subject key identifier:   58:36:A2:18:8B:4F:DA:D9:C2:5E:A7:BE:E8:AB:34:B8:9F:E3:AE:A5
Certificate issuer:       /CN=09729117-c725-49ca-9a64-f10a055403c3
Certificate serial:       010D0C9F432858458573310F22000D0EFADDFA40
Authority key identifier: 22:1B:19:CA:BD:F7:88:3C:50:D8:13:F3:B2:F8:AF:7A:A9:8A:7C:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/09729117-c725-49ca-9a64-f10a055403c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/09729117-c725-49ca-9a64-f10a055403c3/95727abb-f8cd-392c-9fda-6a003409ad50.roa
Signing time:             Fri 12 Apr 2024 13:00:34 +0000
ROA not before:           Fri 12 Apr 2024 13:00:34 +0000
ROA not after:            Thu 11 Jul 2024 13:00:34 +0000
asID:                     60354
IP address blocks:        45.41.234.0/24 maxlen: 32
                          2602:80b:b000::/44 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/09729117-c725-49ca-9a64-f10a055403c3/09729117-c725-49ca-9a64-f10a055403c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/09729117-c725-49ca-9a64-f10a055403c3/09729117-c725-49ca-9a64-f10a055403c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/09729117-c725-49ca-9a64-f10a055403c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 May 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:85:73:31:0f:22:00:0d:0e:fa:dd:fa:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09729117-c725-49ca-9a64-f10a055403c3
        Validity
            Not Before: Apr 12 13:00:34 2024 GMT
            Not After : Jul 11 13:00:34 2024 GMT
        Subject: CN=76cd6f21-a889-422d-9c93-afed653ed67e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f3:1e:93:10:0d:9f:f2:6d:9d:ec:71:77:45:
                    08:f1:6c:07:5a:6d:bd:15:e7:d1:bf:f6:80:66:38:
                    9b:ae:5c:45:8e:b7:7e:27:ff:eb:e2:6b:32:f4:b5:
                    2f:e9:ed:62:7a:0f:41:12:05:50:18:d5:e2:6c:96:
                    71:42:17:43:1f:fe:4a:6e:2c:0e:59:62:40:74:32:
                    61:eb:e5:9f:e7:23:f3:ce:9a:71:fa:dd:71:06:1c:
                    8d:30:7f:bd:18:a7:40:3f:c5:b5:0d:bc:ae:ff:21:
                    fc:64:f7:27:17:41:58:c5:0c:ca:06:ce:ad:cb:ff:
                    c3:77:ba:7d:78:46:34:92:2c:1a:89:c5:be:bb:aa:
                    11:cc:5e:da:7b:48:2a:eb:f7:1d:28:7f:9a:a0:de:
                    60:5b:72:27:7f:95:5b:88:d7:a8:ec:99:b2:c5:7c:
                    37:dc:d4:ec:52:8f:5c:4c:80:fd:0c:21:ad:10:ff:
                    f9:a7:d8:29:4c:03:d9:b7:b0:3c:49:d2:9a:ac:72:
                    23:49:55:fb:fd:09:b4:1f:1d:da:3f:13:67:32:bf:
                    f8:79:a4:6f:f7:69:38:73:19:e4:3a:10:24:b9:b9:
                    e6:dd:b9:b3:4d:1e:19:8d:bf:e1:9c:72:71:a5:cf:
                    05:4d:27:e8:14:94:3a:5f:33:26:b5:06:66:70:29:
                    e4:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:36:A2:18:8B:4F:DA:D9:C2:5E:A7:BE:E8:AB:34:B8:9F:E3:AE:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/09729117-c725-49ca-9a64-f10a055403c3/95727abb-f8cd-392c-9fda-6a003409ad50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/09729117-c725-49ca-9a64-f10a055403c3/09729117-c725-49ca-9a64-f10a055403c3.crl

            X509v3 Authority Key Identifier:
                keyid:22:1B:19:CA:BD:F7:88:3C:50:D8:13:F3:B2:F8:AF:7A:A9:8A:7C:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/09729117-c725-49ca-9a64-f10a055403c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.41.234.0/24
                IPv6:
                  2602:80b:b000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:0c:fd:78:08:9f:4f:aa:c1:fe:e1:6a:f2:a0:d3:2d:f2:80:
         86:68:d1:ed:b7:9b:f9:81:11:0c:d1:04:a3:1b:a5:3a:b1:8e:
         07:65:01:dc:e2:80:86:ab:f3:ac:f5:4a:29:16:52:2b:8a:9f:
         d7:ae:7d:91:cd:d6:7f:a8:0d:48:e4:ae:19:63:10:ad:eb:14:
         a3:7e:e1:bd:ff:38:92:fa:a6:f1:1c:7a:ed:87:d8:97:6f:f2:
         85:15:6e:86:2f:fd:e4:38:17:d8:57:6c:51:38:87:d8:0e:14:
         d3:a6:7d:b7:74:cd:37:6d:37:2d:17:4e:b4:e1:34:46:0a:bd:
         37:4d:ad:7e:b7:1a:bf:72:20:98:c2:72:4b:93:fc:ee:eb:7d:
         b9:d2:28:1a:27:7f:95:5e:be:eb:45:00:c9:4b:ee:6f:cd:ec:
         71:19:06:ed:3d:e1:4e:15:70:b5:75:e3:22:eb:42:8f:2c:3c:
         45:c9:ba:5c:b6:61:94:d9:9e:dd:0b:f6:14:7d:08:c8:44:51:
         95:55:7a:e5:0d:d2:d3:75:4d:42:1d:f1:42:63:28:ed:aa:e3:
         75:ea:b9:53:f6:3a:83:fe:01:1e:28:d5:9c:3d:de:f6:1a:0f:
         10:07:2e:cc:e0:b1:a4:73:a7:ea:5c:0b:e1:b0:d1:53:f6:dd:
         5f:33:48:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 01:42:12 2024 by rpki-client on console-ams.rpki-client.org