Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c2a5f43-88ce-4ed0-923f-101346dc0583/44dabfcb-4dab-33e3-9783-6ff48ebb42a7.roa
File:                     44dabfcb-4dab-33e3-9783-6ff48ebb42a7.roa (raw, json)
Hash identifier:          m3eNK+yyUi/Bb796FJGrBqefwr5UAkmlQ0Vwk4eRTzY=
Subject key identifier:   97:30:8E:29:6D:D0:6E:8A:62:2C:A7:D4:64:67:9D:20:53:1A:1E:7C
Certificate issuer:       /CN=4c2a5f43-88ce-4ed0-923f-101346dc0583
Certificate serial:       010D0C9F432858457A48773310D8F11D3DB67480
Authority key identifier: C4:01:4B:12:AF:34:9B:69:52:4A:2A:CC:0E:1A:9C:09:A3:11:2C:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c2a5f43-88ce-4ed0-923f-101346dc0583.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c2a5f43-88ce-4ed0-923f-101346dc0583/44dabfcb-4dab-33e3-9783-6ff48ebb42a7.roa
Signing time:             Mon 08 Apr 2024 13:00:34 +0000
ROA not before:           Mon 08 Apr 2024 13:00:34 +0000
ROA not after:            Sun 07 Jul 2024 13:00:34 +0000
asID:                     8075
IP address blocks:        209.46.30.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c2a5f43-88ce-4ed0-923f-101346dc0583/4c2a5f43-88ce-4ed0-923f-101346dc0583.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c2a5f43-88ce-4ed0-923f-101346dc0583/4c2a5f43-88ce-4ed0-923f-101346dc0583.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c2a5f43-88ce-4ed0-923f-101346dc0583.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7a:48:77:33:10:d8:f1:1d:3d:b6:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c2a5f43-88ce-4ed0-923f-101346dc0583
        Validity
            Not Before: Apr  8 13:00:34 2024 GMT
            Not After : Jul  7 13:00:34 2024 GMT
        Subject: CN=16022662-b907-4b9c-88ef-862ac03bba43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5c:5e:49:4d:e7:c2:de:97:be:02:9d:5c:99:
                    a2:3d:e3:d5:16:30:89:a6:ed:e7:0f:5f:0f:f8:fb:
                    0c:98:15:37:7f:7e:ea:fc:ab:0f:63:3a:d3:11:fe:
                    0b:37:c6:8d:68:7b:5c:9e:f1:93:76:31:a8:15:51:
                    8a:69:f2:d6:04:59:a6:c4:72:ac:f1:78:1e:2d:0a:
                    a3:29:34:50:fe:9c:44:21:fc:ab:b5:ac:9f:4b:c8:
                    d6:b4:4d:76:06:06:08:97:67:08:5d:5a:9f:44:ad:
                    b9:ce:e4:4f:32:93:7a:4b:70:f3:a4:4f:44:ed:c4:
                    10:90:43:67:43:90:9b:9d:31:78:dd:06:af:20:55:
                    5d:26:b6:bd:3f:ca:28:89:45:6b:cd:05:9e:56:5b:
                    ba:ad:7d:a4:9f:66:c9:ce:7f:5f:82:ad:75:f1:9d:
                    ce:12:01:e9:51:4f:6c:02:97:8f:97:c2:58:76:b7:
                    e3:01:56:69:2e:e4:e8:70:22:07:01:a2:47:89:8d:
                    a6:bf:0b:c6:37:1e:5f:83:3b:a5:a5:ac:4b:e9:e4:
                    d8:61:ea:7b:00:d7:20:ae:20:28:bb:4a:74:57:12:
                    f2:c1:7e:aa:1d:dd:9a:9e:75:d5:33:28:84:a7:72:
                    69:63:ab:e4:e5:cf:2d:96:7a:12:b0:9c:23:7c:8a:
                    ca:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:30:8E:29:6D:D0:6E:8A:62:2C:A7:D4:64:67:9D:20:53:1A:1E:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c2a5f43-88ce-4ed0-923f-101346dc0583/44dabfcb-4dab-33e3-9783-6ff48ebb42a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c2a5f43-88ce-4ed0-923f-101346dc0583/4c2a5f43-88ce-4ed0-923f-101346dc0583.crl

            X509v3 Authority Key Identifier:
                keyid:C4:01:4B:12:AF:34:9B:69:52:4A:2A:CC:0E:1A:9C:09:A3:11:2C:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c2a5f43-88ce-4ed0-923f-101346dc0583.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.46.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:a8:c0:a2:93:5f:5b:c8:82:48:d5:51:f4:cf:0b:0e:cd:67:
         d5:da:29:1b:ae:94:d4:ef:c7:26:21:95:b3:59:d5:69:ce:ab:
         fa:5d:ff:33:ec:98:d5:82:44:ac:b5:b0:db:59:9a:92:b8:c3:
         e4:95:bd:d5:6b:f1:aa:ee:b0:e2:7d:98:d9:d5:d8:8c:92:23:
         9c:a3:d2:2d:0d:9c:6c:a9:ee:90:e1:f2:77:cd:8b:05:dd:c2:
         c3:1d:df:82:ee:e7:5b:54:ea:85:35:ec:3a:57:f6:d9:00:f0:
         db:cc:1d:37:fc:f0:b8:78:44:bd:a8:3f:04:9b:eb:8f:b7:41:
         38:76:e2:df:fa:9c:40:c6:41:15:25:ca:24:05:22:d1:c9:51:
         c9:fe:31:38:d4:80:a1:e0:78:81:ba:ef:c1:bd:1a:8a:07:3e:
         cc:fb:c4:4c:2b:77:3d:43:8d:2b:a1:f9:4c:3a:a2:90:7f:c1:
         e7:c5:b8:a8:0c:ef:98:1c:4f:99:2c:29:ee:ef:44:f1:83:a7:
         42:5f:3e:9d:cc:40:e1:b2:a5:be:d7:6c:e1:85:a7:66:77:27:
         0d:33:11:f0:45:c0:6a:2d:d4:86:8c:35:21:27:e3:21:78:61:
         b3:e9:33:6d:ba:47:e9:62:41:14:93:4c:47:ba:0a:76:d1:af:
         b1:22:d8:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 15:19:39 2024 by rpki-client on console-fra.rpki-client.org