Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8ab256df-0271-3a6d-8fa5-61592d6f759a.roa
File:                     8ab256df-0271-3a6d-8fa5-61592d6f759a.roa (raw, json)
Hash identifier:          hQ+IyuS+L9owDmMxI7NpFVWMLAqHjFxjppRijoQ5SDU=
Subject key identifier:   48:D0:51:2D:E2:D5:66:68:BC:12:CE:22:31:31:96:57:C1:3C:60:BD
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584582A891C1248179D047DE9CD0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8ab256df-0271-3a6d-8fa5-61592d6f759a.roa
Signing time:             Thu 11 Apr 2024 13:00:36 +0000
ROA not before:           Thu 11 Apr 2024 13:00:36 +0000
ROA not after:            Wed 10 Jul 2024 13:00:36 +0000
asID:                     394256
IP address blocks:        45.74.61.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:82:a8:91:c1:24:81:79:d0:47:de:9c:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Apr 11 13:00:36 2024 GMT
            Not After : Jul 10 13:00:36 2024 GMT
        Subject: CN=424fab37-c61a-4108-816b-37fcfb689755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8e:f0:02:ae:05:96:c2:a0:12:b4:b1:48:45:
                    d4:48:d1:fa:f1:76:c3:1f:31:14:c6:67:51:c9:46:
                    d6:4e:54:e8:01:25:99:26:07:40:e6:d7:0e:8d:18:
                    b1:56:3d:ff:43:ab:aa:da:79:e4:dc:e3:75:1f:74:
                    ca:45:5e:29:15:72:f8:22:99:c4:8f:bc:82:02:b8:
                    47:16:8b:4a:1f:aa:01:d9:4c:93:30:e9:db:b7:c0:
                    38:1b:67:4a:da:e1:86:90:ae:f2:e4:50:fb:36:5f:
                    d9:56:e8:f8:56:c2:5d:49:61:45:0d:2c:dc:df:59:
                    bc:73:df:d7:ee:53:a7:b2:f3:e1:21:e9:81:62:85:
                    28:9b:8e:b9:e6:a1:61:db:6f:7f:ac:67:60:f0:89:
                    ef:79:61:a3:71:11:52:41:3d:5e:d5:1f:69:4c:32:
                    f9:3c:59:7b:ae:1b:48:83:dc:fb:22:e7:71:c4:69:
                    b0:f2:e7:87:78:b2:c9:87:c6:8e:60:a6:ac:87:fd:
                    0e:c6:00:77:e1:4d:6d:97:47:bc:fb:3e:f9:af:b8:
                    ad:da:b2:dd:f6:e6:16:37:b2:eb:1d:bb:41:1f:a6:
                    f9:ab:04:d2:47:ca:ce:00:ea:c4:d1:0d:75:5b:95:
                    4e:fa:ee:de:ac:37:a7:55:26:04:4f:cb:4b:03:e8:
                    36:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:D0:51:2D:E2:D5:66:68:BC:12:CE:22:31:31:96:57:C1:3C:60:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8ab256df-0271-3a6d-8fa5-61592d6f759a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.74.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:96:33:8b:cd:9b:4e:71:57:60:ad:c6:6b:50:21:2e:7c:f8:
         15:3a:0f:3b:0d:61:5a:2a:38:38:d5:a2:1a:77:c3:6f:65:0a:
         69:5e:74:8b:70:be:f4:3c:ac:5b:8a:66:d6:4c:a1:a6:9b:03:
         41:8a:6f:17:a5:e1:c2:bd:12:bd:35:50:6d:fa:8e:9b:97:d7:
         55:89:65:e9:21:8d:5a:02:57:d8:d1:93:2f:cb:14:16:81:0c:
         80:68:cb:72:1c:ca:48:84:ba:10:0e:dc:17:11:7a:a4:21:e5:
         ab:61:2d:d6:a8:e3:fa:ab:1b:0d:19:73:4c:b8:a5:96:e0:cb:
         58:b9:6b:48:89:87:97:b0:16:37:d1:ee:6a:f2:9b:77:54:cc:
         ba:9c:0a:9a:1a:92:c6:41:c9:ae:f7:96:34:e6:3e:52:a1:0e:
         52:c3:25:cf:1b:d6:40:37:a6:89:d9:f8:6e:6e:6f:89:6e:3d:
         b1:ea:2a:69:d7:af:ec:ec:c8:a4:05:88:c8:30:20:7c:9c:1a:
         c3:66:fc:a8:c8:2d:81:3b:9a:3b:dc:6e:66:91:f9:2e:0b:94:
         21:c7:8a:0c:f1:55:e1:f3:db:b8:fd:c1:42:90:98:03:80:a6:
         8d:5d:de:27:7c:86:98:58:03:17:27:d6:65:84:24:d9:55:93:
         52:ad:e4:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 02:22:50 2024 by rpki-client on console-fra.rpki-client.org