Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/2519a9cb-4db6-326d-a603-798350bb3d13.roa
File:                     2519a9cb-4db6-326d-a603-798350bb3d13.roa (raw, json)
Hash identifier:          Z5AyVyXsOX/+mX9fKfbQRc2LuT/B9RsCk5YnQY2RkbA=
Subject key identifier:   A6:1E:22:D4:56:6C:02:0D:E6:DD:39:B7:E9:96:88:6A:97:63:E9:32
Certificate issuer:       /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Certificate serial:       010D0C9F43285847B53145109C500F1578620600
Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/2519a9cb-4db6-326d-a603-798350bb3d13.roa
Signing time:             Wed 30 Oct 2024 01:00:32 +0000
ROA not before:           Wed 30 Oct 2024 01:00:32 +0000
ROA not after:            Tue 28 Jan 2025 02:00:32 +0000
asID:                     5650
IP address blocks:        45.59.20.0/24 maxlen: 24
                          172.102.194.0/24 maxlen: 24
                          172.102.209.0/24 maxlen: 24
                          172.102.221.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b5:31:45:10:9c:50:0f:15:78:62:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
        Validity
            Not Before: Oct 30 01:00:32 2024 GMT
            Not After : Jan 28 02:00:32 2025 GMT
        Subject: CN=3bee05f9-6ab2-4e62-8eea-a00aced10146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4f:64:5f:a4:81:da:bc:41:b6:53:6d:cf:29:
                    a3:ba:72:d7:5f:4c:47:54:53:34:ca:56:97:5b:ab:
                    20:76:fd:fd:1f:94:4f:52:a7:36:76:3c:40:12:21:
                    bf:2a:f2:67:c1:7f:07:43:0d:f4:6c:ff:d6:e0:a4:
                    22:eb:07:4f:9d:29:08:15:54:4c:f0:8d:fc:f6:ed:
                    23:c0:c3:3f:d4:9f:d5:0f:3c:31:c0:9a:9d:29:b5:
                    2d:46:03:d3:4d:a4:ab:f4:c2:c0:54:72:58:aa:d7:
                    69:c2:2d:eb:ce:b8:8b:2f:ac:03:0c:aa:81:c1:2c:
                    2e:67:17:10:3b:6b:af:e5:1f:6f:9a:05:c7:34:55:
                    b5:2f:04:7d:de:dc:80:6b:b0:2c:41:c0:65:13:30:
                    87:68:d6:2f:7f:90:55:fe:c3:9d:b9:cc:91:42:e8:
                    21:27:90:f8:4a:21:5c:03:55:e3:ff:7a:26:c2:72:
                    1b:38:8d:e0:f8:d1:52:cd:e5:07:dd:d4:ff:05:2b:
                    6f:96:07:44:80:87:03:45:12:7d:8e:38:d3:44:8c:
                    78:18:a6:06:3d:1e:21:b2:1a:59:42:dc:a0:8a:38:
                    5f:86:c2:fc:7a:fb:a1:91:98:ad:a8:16:bc:25:35:
                    ee:1b:d9:d5:8e:74:3e:b1:59:32:03:3b:af:e6:2e:
                    48:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:1E:22:D4:56:6C:02:0D:E6:DD:39:B7:E9:96:88:6A:97:63:E9:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/2519a9cb-4db6-326d-a603-798350bb3d13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.20.0/24
                  172.102.194.0/24
                  172.102.209.0/24
                  172.102.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:79:cb:93:ad:57:e6:1b:25:60:c4:4a:37:5d:a7:56:63:70:
         63:8d:40:a5:df:aa:b8:76:6a:66:a9:54:96:fb:46:53:fc:db:
         a5:3f:f9:e7:08:3b:c2:a8:be:23:06:6b:f1:ea:be:95:13:b6:
         75:81:b6:71:fb:a4:72:5a:77:01:0a:70:04:11:ea:25:56:f9:
         bd:3e:c3:c4:b1:d2:50:d7:87:0c:f8:2d:f5:1a:9f:e7:c2:30:
         bf:8c:3f:81:a7:7d:8f:60:c5:1a:4a:71:b5:45:28:2a:d2:e3:
         56:c1:8b:35:9f:55:9c:aa:c1:da:4e:3f:87:4e:d7:b5:c6:04:
         ca:ed:df:6d:e1:9d:ef:f6:d3:44:d7:fa:c6:a7:14:31:68:f8:
         6b:21:88:23:f4:5a:36:53:e1:6d:11:8f:96:8d:cc:ac:86:76:
         83:53:20:71:7d:30:3d:37:1b:26:74:e4:7b:68:df:24:99:f2:
         bd:02:5f:6e:54:74:9f:aa:f1:b5:d0:be:b7:fe:09:e8:dd:28:
         5f:67:d0:6a:c8:23:7b:ec:ff:db:c8:7a:e7:2d:cd:a0:2c:32:
         42:ec:84:18:75:e9:98:a7:99:49:67:50:63:55:77:a0:4e:73:
         96:28:f6:3b:e9:60:6b:e5:53:fd:20:32:89:c5:41:01:68:02:
         6e:77:21:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:20:55 2024 by rpki-client on console-fra.rpki-client.org