Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/50e63370-966c-3959-9273-e0f62353ba1d.roa
File:                     50e63370-966c-3959-9273-e0f62353ba1d.roa (raw, json)
Hash identifier:          20wlMLdf20bbo7w0vzFDUqsq8IZ2icuevqvvIcRFr4c=
Subject key identifier:   90:C9:2F:A6:A1:1A:52:CA:67:51:DE:07:B5:BE:8A:B6:45:A1:78:24
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285845871E9E85B85BAE7B336A5700
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/50e63370-966c-3959-9273-e0f62353ba1d.roa
Signing time:             Sat 13 Apr 2024 03:21:54 +0000
ROA not before:           Sat 13 Apr 2024 03:21:54 +0000
ROA not after:            Fri 12 Jul 2024 03:21:54 +0000
asID:                     212238
IP address blocks:        45.38.195.0/24 maxlen: 24
                          45.38.215.0/24 maxlen: 24
                          23.230.84.0/24 maxlen: 24
                          23.230.91.0/24 maxlen: 24
                          45.39.59.0/24 maxlen: 24
                          45.38.253.0/24 maxlen: 24
                          45.39.38.0/24 maxlen: 24
                          45.38.39.0/24 maxlen: 24
                          45.38.129.0/24 maxlen: 24
                          45.38.131.0/24 maxlen: 24
                          23.230.80.0/24 maxlen: 24
                          45.39.81.0/24 maxlen: 24
                          45.39.85.0/24 maxlen: 24
                          45.39.101.0/24 maxlen: 24
                          45.39.112.0/24 maxlen: 24
                          45.39.126.0/24 maxlen: 24
                          45.38.159.0/24 maxlen: 24
                          45.38.156.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:87:1e:9e:85:b8:5b:ae:7b:33:6a:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 13 03:21:54 2024 GMT
            Not After : Jul 12 03:21:54 2024 GMT
        Subject: CN=2740fcec-7e2e-46df-8ad3-c3d4a0fef93e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a7:fb:69:5a:be:30:38:f2:75:3e:d8:ca:b6:
                    9e:7c:6e:35:8f:36:53:d7:69:9c:8c:92:8e:94:11:
                    16:0b:63:0f:52:7b:02:6a:0e:2a:08:33:96:14:e0:
                    e2:39:7e:83:57:09:56:c4:6c:0f:d4:90:37:1b:35:
                    bb:56:e3:cd:66:a2:f9:91:63:d4:cc:db:f1:84:bc:
                    8e:db:aa:ed:18:f0:b7:20:c2:11:89:c3:4f:b8:cf:
                    19:db:e3:34:bf:67:28:f8:fe:1c:bc:67:e2:dd:f7:
                    87:90:bb:98:f8:3a:67:68:10:cc:27:91:01:a5:85:
                    0e:5a:9d:01:cf:34:ae:7c:a0:47:eb:d9:c4:a5:c9:
                    67:0f:43:f2:0c:6e:4d:9b:21:03:9d:af:a2:02:aa:
                    85:f7:86:3f:30:3c:e2:01:69:d2:f6:95:ff:0e:86:
                    46:07:69:ba:3f:b9:c5:dd:81:02:72:b2:13:9b:38:
                    2c:3a:62:6a:9d:12:e7:e7:b1:70:17:a3:a9:59:e2:
                    48:f2:ff:9b:5a:7a:90:2e:17:2c:8e:53:4e:e8:a8:
                    a1:23:66:5d:1e:83:c0:1c:c7:f3:60:36:45:2e:d4:
                    e7:6e:b5:ec:8f:ac:44:f2:9a:8f:9e:e7:a2:82:8c:
                    f5:51:0d:c1:8e:b1:29:46:ac:e4:16:2c:0f:86:19:
                    49:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:C9:2F:A6:A1:1A:52:CA:67:51:DE:07:B5:BE:8A:B6:45:A1:78:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/50e63370-966c-3959-9273-e0f62353ba1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.80.0/24
                  23.230.84.0/24
                  23.230.91.0/24
                  45.38.39.0/24
                  45.38.129.0/24
                  45.38.131.0/24
                  45.38.156.0/24
                  45.38.159.0/24
                  45.38.195.0/24
                  45.38.215.0/24
                  45.38.253.0/24
                  45.39.38.0/24
                  45.39.59.0/24
                  45.39.81.0/24
                  45.39.85.0/24
                  45.39.101.0/24
                  45.39.112.0/24
                  45.39.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:86:e4:5f:b1:a9:a1:df:d9:73:bc:cc:94:4f:69:d5:16:0b:
         2f:49:bc:c0:75:a9:b3:42:41:14:7f:b9:98:eb:06:17:8e:7e:
         57:a1:11:e3:72:28:0a:4e:05:c7:ea:a2:6f:aa:02:26:25:e4:
         08:56:1d:94:95:47:47:5d:a7:71:61:f0:f6:5f:80:4c:80:8f:
         00:e5:d0:3c:27:97:b5:3d:ea:6a:69:b1:5b:0d:b4:e0:42:26:
         15:48:e2:6b:6b:6c:46:ec:f6:dc:4e:bb:95:26:13:62:97:02:
         3d:80:36:8b:8a:e3:89:4f:95:76:58:64:6b:fa:22:41:eb:eb:
         9f:b0:79:10:5c:e8:e8:dd:de:da:f7:15:6d:39:7e:28:36:3c:
         a4:c2:b3:73:4b:e3:91:07:d5:6c:00:e8:c3:56:23:2c:75:e1:
         76:36:26:e1:2d:4a:b6:5c:98:e5:77:8f:f7:1f:43:0b:8b:ce:
         9c:96:67:4f:b6:84:82:1a:7a:d0:df:e7:00:a1:0a:28:06:9b:
         4c:dc:97:ac:36:54:da:53:90:23:d1:f1:d5:7b:81:08:ae:42:
         de:16:4a:52:14:83:95:5d:c0:11:0d:de:9f:a9:94:77:4b:51:
         a4:6c:8f:a8:af:15:c9:9d:8b:5f:8c:a5:ee:1a:4d:14:34:77:
         7c:5e:01:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:43:27 2024 by rpki-client on console-fra.rpki-client.org