Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/089e7d82-00e7-37f7-ac93-9c4ab4c1ff1e.roa
File:                     089e7d82-00e7-37f7-ac93-9c4ab4c1ff1e.roa (raw, json)
Hash identifier:          SKTyYZq/KQbWkebLlahvkKYxlpP/uiylj9S+v0HRUhw=
Subject key identifier:   46:6C:FC:AA:EC:8D:BA:58:6B:7D:86:06:EA:75:AE:6A:15:1B:90:9E
Certificate issuer:       /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Certificate serial:       010D0C9F43285844E50A8F72E5B8ABDBA6C6A000
Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/089e7d82-00e7-37f7-ac93-9c4ab4c1ff1e.roa
Signing time:             Thu 15 Feb 2024 02:00:26 +0000
ROA not before:           Thu 15 Feb 2024 02:00:26 +0000
ROA not after:            Wed 15 May 2024 01:00:26 +0000
asID:                     46261
IP address blocks:        45.59.22.0/24 maxlen: 24
                          172.102.219.0/24 maxlen: 24
                          172.102.207.0/24 maxlen: 24
                          45.59.29.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e5:0a:8f:72:e5:b8:ab:db:a6:c6:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
        Validity
            Not Before: Feb 15 02:00:26 2024 GMT
            Not After : May 15 01:00:26 2024 GMT
        Subject: CN=cc4b680b-0d2e-4756-9a23-c636581cc016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:13:ed:fd:7e:e4:d2:d8:a8:00:c7:4d:07:77:
                    ea:e7:cb:75:d6:de:83:8a:e3:74:a1:c1:3d:a8:f6:
                    0b:db:09:88:1d:7d:57:f2:90:a3:86:39:1f:d9:44:
                    4b:12:2f:9a:a8:7c:cb:16:15:37:74:3f:6f:af:a5:
                    63:bc:a6:9e:ac:16:f2:8f:77:d0:83:c4:d4:3b:65:
                    11:21:a0:b9:17:24:14:f5:d5:a2:66:4b:4d:c4:ac:
                    65:25:4b:f7:af:05:95:29:49:7d:c8:5b:27:9e:1e:
                    34:6c:25:39:67:6d:4b:9d:c2:fc:9e:96:7a:c6:cc:
                    d1:aa:37:ba:d9:45:77:cf:10:d7:3b:19:8e:ad:7f:
                    1d:7a:d9:12:9d:19:16:d2:e3:a4:0f:c0:a8:c4:39:
                    65:1a:8c:55:26:1f:f0:41:61:ba:6d:94:7b:96:51:
                    71:94:64:cd:5c:c3:05:46:2a:68:97:d6:15:d0:35:
                    1e:75:87:c9:e0:d9:9b:9f:3f:79:d0:b3:30:fc:06:
                    44:77:a7:fc:47:c4:f9:22:b0:e0:b1:f1:4f:3c:48:
                    62:41:b1:0f:0a:7c:5d:10:1d:92:9a:1b:74:5c:79:
                    b5:a2:86:c3:b6:1f:eb:ef:8a:27:00:6d:c2:be:1a:
                    ba:70:43:bf:4d:de:ca:0f:e5:34:fe:17:09:14:89:
                    71:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:6C:FC:AA:EC:8D:BA:58:6B:7D:86:06:EA:75:AE:6A:15:1B:90:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/089e7d82-00e7-37f7-ac93-9c4ab4c1ff1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.22.0/24
                  45.59.29.0/24
                  172.102.207.0/24
                  172.102.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:2f:db:c4:92:f9:c2:4d:e7:22:6e:fb:1c:08:ef:e7:20:1a:
         11:48:17:54:0b:30:35:93:47:31:f2:4d:2a:88:1e:2f:79:43:
         c0:4d:5f:df:44:5d:ac:79:e7:61:cd:b0:19:89:2c:4d:18:84:
         37:29:fa:13:14:d9:04:2b:8c:86:37:be:86:09:c5:90:e1:b7:
         77:58:c6:e1:2d:84:19:64:54:75:88:b6:b1:00:d5:a3:c9:33:
         de:77:22:79:c7:41:eb:fa:f0:8e:cc:f0:df:0b:7a:d7:59:a3:
         29:04:08:58:a1:81:dd:61:d5:e0:bd:13:d6:e5:2e:18:1b:bf:
         22:79:cd:c0:72:7f:e7:6e:83:e7:28:0f:39:81:64:fc:8d:74:
         7b:1f:25:ce:c3:0a:fb:57:cb:00:82:87:59:a3:94:96:c4:62:
         e3:d9:9e:de:3c:44:28:33:25:ba:f0:c7:a1:5e:f6:9d:e0:bb:
         3e:2d:1b:85:15:b2:65:26:6a:c2:41:f3:e7:22:79:81:e7:a8:
         3a:dd:25:e1:52:ca:ee:b2:9d:31:e9:f9:9b:fc:de:00:e9:22:
         35:93:a5:44:90:f2:45:3a:da:93:30:9d:b2:1e:fa:ba:69:65:
         ba:2d:8a:36:bc:91:b5:e7:b5:3c:a3:77:4a:68:e6:a5:fa:32:
         fd:88:61:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:50:29 2024 by rpki-client on console-fra.rpki-client.org