Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/01a8e0d0-c87f-353d-8382-1d4f0267ccd8.roa
File:                     01a8e0d0-c87f-353d-8382-1d4f0267ccd8.roa (raw, json)
Hash identifier:          4ZGYgQqURYRnu5Us7NAH8XxrpmJD/EAHb6GGj9SyFG8=
Subject key identifier:   FD:20:5B:A8:53:D6:0A:A3:0F:57:19:F6:37:91:39:E5:46:CB:8C:18
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285845C5A8F8A793C04C35426B85C0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/01a8e0d0-c87f-353d-8382-1d4f0267ccd8.roa
Signing time:             Sun 05 May 2024 13:00:34 +0000
ROA not before:           Sun 05 May 2024 13:00:34 +0000
ROA not after:            Sat 03 Aug 2024 13:00:34 +0000
asID:                     206264
IP address blocks:        45.74.3.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c5:a8:f8:a7:93:c0:4c:35:42:6b:85:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: May  5 13:00:34 2024 GMT
            Not After : Aug  3 13:00:34 2024 GMT
        Subject: CN=392211ea-bdad-470a-9251-2d3f9f8d2536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:21:c1:a6:38:24:a3:06:77:d1:92:69:7c:c0:
                    f8:f9:f7:d5:1b:e6:20:fb:ea:93:10:f6:28:30:9d:
                    fd:9d:a0:87:e5:8c:0e:d9:ed:00:73:3d:80:35:c8:
                    8e:42:4e:5c:68:15:7d:86:f8:bc:de:74:42:6c:27:
                    fb:0c:df:28:01:4d:db:c8:e0:b5:54:f7:11:34:0a:
                    6c:77:4e:c9:35:6a:ef:b3:51:7f:ea:be:e0:f9:6c:
                    f9:af:95:99:c1:e3:f8:6c:6b:41:5c:ee:34:0f:24:
                    36:83:9e:94:14:6c:3c:e0:25:0b:12:c6:41:cd:73:
                    22:9d:16:60:54:a2:90:6d:c1:52:ab:dc:26:b8:8f:
                    55:46:03:48:d5:22:1a:db:c9:c4:00:75:83:fb:d8:
                    30:42:c1:51:13:53:96:e3:e1:a2:44:e6:f2:73:a4:
                    a2:f2:3f:10:7f:27:23:d9:05:d7:7a:2a:e9:a6:4f:
                    d6:13:c8:55:32:cf:07:d8:ff:32:8d:50:9e:d5:5e:
                    d9:59:f2:04:cb:1b:78:b5:35:76:63:13:2d:4c:b6:
                    c6:f3:c9:55:1f:1b:6f:8e:ed:36:2b:75:f8:45:29:
                    02:23:8c:9a:25:4c:5f:59:39:15:b6:97:de:3d:2c:
                    7d:2e:f7:7c:c2:9c:b8:39:c8:ba:07:9a:ec:0d:de:
                    6e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:20:5B:A8:53:D6:0A:A3:0F:57:19:F6:37:91:39:E5:46:CB:8C:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/01a8e0d0-c87f-353d-8382-1d4f0267ccd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.74.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:f2:2e:05:29:bc:d3:7e:7a:a1:45:b4:1b:1a:ef:56:98:9e:
         78:fc:5c:7f:b5:ab:80:0a:00:46:c4:2e:9e:88:71:f2:d8:66:
         12:68:73:70:7e:73:ff:4d:28:a9:39:40:db:47:67:9d:69:58:
         78:11:76:7f:cd:5e:78:cd:2e:34:ee:61:f2:cf:4d:67:81:20:
         52:54:a1:6d:0f:9d:3f:3a:12:17:47:74:09:ac:bf:ca:5a:7f:
         4c:7d:f7:b5:19:b8:b2:16:d3:c9:5f:8f:85:c5:c8:37:9e:57:
         4b:73:fc:ea:49:10:55:b2:0b:98:39:1f:c3:91:1f:13:b6:9a:
         1f:57:4b:66:86:c6:8b:b1:d5:a5:36:7e:09:07:11:19:1f:b2:
         3c:4a:50:3b:0d:c9:05:38:80:e7:35:30:62:22:a5:23:04:5a:
         65:ba:1f:8d:f8:44:bf:39:b4:42:32:54:ae:a0:82:4e:fe:67:
         78:6e:0a:4d:c4:45:f2:46:87:4f:56:f2:85:d3:9a:c4:fe:8d:
         82:77:ae:24:34:96:e9:8f:cf:08:42:4b:c3:b7:13:0c:3c:37:
         fb:ed:8e:44:62:bc:dd:98:8e:b9:c1:7e:0f:c5:4f:9c:77:b9:
         c2:e6:a5:be:5c:8d:ac:d8:e2:5a:1b:21:c3:b7:3e:18:92:a0:
         18:53:a4:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 13:40:22 2024 by rpki-client on console-ams.rpki-client.org