Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/327eb619-2e36-3ec0-ae28-411e45003b3c.roa
File:                     327eb619-2e36-3ec0-ae28-411e45003b3c.roa (raw, json)
Hash identifier:          kfOCBiFbmgyCPxprmzjwMs30iom3mc5IgZLdcnOnQ7Y=
Subject key identifier:   2B:DA:81:07:D6:52:0E:F5:FC:6E:0A:BD:DC:9C:FD:1F:B7:9F:4A:2B
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285845C87398BBF993E1C36D71A280
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/327eb619-2e36-3ec0-ae28-411e45003b3c.roa
Signing time:             Mon 06 May 2024 13:00:34 +0000
ROA not before:           Mon 06 May 2024 13:00:34 +0000
ROA not after:            Sun 04 Aug 2024 13:00:34 +0000
asID:                     9009
IP address blocks:        45.74.21.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c8:73:98:bb:f9:93:e1:c3:6d:71:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: May  6 13:00:34 2024 GMT
            Not After : Aug  4 13:00:34 2024 GMT
        Subject: CN=63fe8684-2f7e-4f5d-8a86-61eee43b4c7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:41:cb:b6:e3:17:89:50:ed:db:e7:e8:bd:42:
                    36:9c:fa:f2:65:a0:ef:70:a3:b9:78:99:32:11:81:
                    bf:fa:24:62:30:5e:9f:f7:a5:68:1c:b6:9a:64:d2:
                    39:b9:d0:f3:19:9d:93:40:9b:d9:56:3c:2d:99:a6:
                    11:34:95:d3:55:74:2c:77:35:4a:f5:ad:2f:b2:71:
                    17:07:a0:83:57:07:67:99:5e:f5:77:99:3b:6e:3f:
                    02:47:cc:88:62:50:5b:ab:66:65:2a:54:f4:77:08:
                    bd:2c:b0:5a:8c:51:1e:da:6e:4f:6b:2d:a4:1c:c0:
                    13:56:90:c6:80:3d:40:54:28:48:c3:be:c9:b7:dc:
                    6a:89:f0:f2:df:23:27:36:f3:86:12:94:fe:88:02:
                    8a:18:95:1b:a6:cf:9b:1f:d2:b9:bf:b0:78:1b:f1:
                    f8:78:83:22:d3:f1:e3:cd:9c:cf:37:60:07:d5:df:
                    d6:e9:19:ff:42:c9:6b:3b:45:69:ac:d8:74:d7:d6:
                    b9:49:5c:36:c4:b0:6f:9f:4c:3b:18:60:69:37:ee:
                    8b:e2:ad:5e:c0:5c:87:b4:70:86:dd:11:cf:d9:e1:
                    45:0b:b4:2e:f1:e5:50:fd:d9:46:0a:c6:fb:e0:01:
                    d0:6e:41:03:cb:4e:41:d5:bd:56:ce:3f:bf:3b:a8:
                    85:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:DA:81:07:D6:52:0E:F5:FC:6E:0A:BD:DC:9C:FD:1F:B7:9F:4A:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/327eb619-2e36-3ec0-ae28-411e45003b3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.74.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:e5:89:13:13:b3:58:a5:b3:8a:98:45:b6:35:97:b3:a5:e5:
         af:cf:22:35:b4:c7:c4:bd:9a:54:76:94:4b:66:e7:79:84:f1:
         0f:dd:0f:df:ca:e1:51:5f:6e:4e:d1:a4:8e:44:37:65:07:9c:
         c8:1f:6a:e0:e9:98:65:3d:cc:8c:4e:1d:f0:12:43:5d:d9:75:
         87:79:a0:01:66:a0:fe:95:6a:8d:8d:9f:3b:98:2a:fa:52:71:
         71:4a:49:8c:c9:0c:e6:ff:29:eb:ee:cf:72:0f:a9:78:cc:19:
         b9:3d:26:8d:53:4f:3b:18:bf:4b:5f:a7:2e:66:7e:d7:c2:71:
         e4:6a:bd:35:68:16:0e:07:87:41:6a:0c:7f:c7:a0:29:28:97:
         31:42:d2:f8:7d:83:f9:8a:89:96:37:1f:f4:63:6d:5d:67:d0:
         25:b1:4d:79:f7:02:5b:16:c5:39:2b:5c:97:2e:71:69:df:77:
         4d:ff:7e:94:cc:3b:38:c0:23:6f:00:3a:70:25:bd:39:80:9d:
         9d:38:e4:44:56:89:26:37:eb:eb:8d:2b:8c:c7:02:96:72:bf:
         ad:33:ab:69:3e:06:cb:21:5e:ac:dc:19:55:a2:48:06:07:33:
         ff:ae:84:87:df:75:d8:f3:e1:e0:08:02:42:83:b8:37:26:6f:
         01:da:d7:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:14:51 2024 by rpki-client on console-fra.rpki-client.org