Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/7a9bf21c-6ea9-3ef9-80c0-44e56aec4490.roa
File:                     7a9bf21c-6ea9-3ef9-80c0-44e56aec4490.roa (raw, json)
Hash identifier:          sfAGtrcMxR2PUZXqSOleQYdfll5z3pb8mQ2EiG1kbzI=
Subject key identifier:   68:DE:20:45:97:89:32:15:41:BB:E4:0C:88:90:76:A7:CC:14:FA:1C
Certificate issuer:       /CN=bc6884d6-b11e-4280-9c4c-8177287d9869
Certificate serial:       010D0C9F4328584518B04214552DF50C57BCFB80
Authority key identifier: 15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/7a9bf21c-6ea9-3ef9-80c0-44e56aec4490.roa
Signing time:             Mon 04 Mar 2024 14:00:33 +0000
ROA not before:           Mon 04 Mar 2024 14:00:33 +0000
ROA not after:            Sun 02 Jun 2024 13:00:33 +0000
asID:                     398722
IP address blocks:        199.45.154.0/24 maxlen: 24
                          199.45.155.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:18:b0:42:14:55:2d:f5:0c:57:bc:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc6884d6-b11e-4280-9c4c-8177287d9869
        Validity
            Not Before: Mar  4 14:00:33 2024 GMT
            Not After : Jun  2 13:00:33 2024 GMT
        Subject: CN=10242aff-1ef8-49f9-8e1f-43966120b824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:b6:c5:99:1c:25:3b:dd:80:11:2a:93:e1:69:
                    15:69:8e:3b:f8:8b:1f:00:e6:4d:0c:1f:17:2d:a6:
                    29:13:f8:7b:14:c5:c8:b2:f2:5d:f7:02:b2:a2:e3:
                    0c:50:61:f2:2a:76:88:8a:f8:75:8a:17:d1:8b:e4:
                    c2:0d:05:b6:71:01:52:56:37:cc:b1:05:98:04:d9:
                    30:bc:78:22:6f:4b:fe:2b:e5:4a:1b:50:52:7b:db:
                    a4:0b:20:d7:ef:a2:8a:a2:59:74:0d:88:55:72:58:
                    59:77:c1:c7:6f:a9:ce:10:d8:9e:5c:6f:2c:c4:2a:
                    dd:c7:c2:0c:e9:cd:a3:37:c3:a3:4e:e5:6f:f8:a9:
                    94:0a:10:96:01:9f:85:e5:c7:21:9d:ac:df:e6:42:
                    d0:e1:70:bb:4a:09:10:80:9d:26:ba:29:72:52:07:
                    5e:4b:f2:15:cb:15:a6:7a:67:d3:c2:50:0e:97:c1:
                    4f:77:c8:53:cb:1e:38:1d:d3:3d:50:c2:67:b5:69:
                    0d:42:d2:a1:3d:41:95:85:67:42:78:66:f8:c7:83:
                    bb:c3:a7:ab:47:43:34:49:35:99:1f:9d:d3:e4:f8:
                    60:2f:0e:18:f4:66:c5:cb:bd:d8:f2:68:bb:b6:6e:
                    e2:b1:d2:b8:57:7a:af:8e:2f:6b:d2:ee:aa:bf:b9:
                    2e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:DE:20:45:97:89:32:15:41:BB:E4:0C:88:90:76:A7:CC:14:FA:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/7a9bf21c-6ea9-3ef9-80c0-44e56aec4490.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl

            X509v3 Authority Key Identifier:
                keyid:15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.45.154.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:2a:a9:d7:bf:82:11:76:bc:2e:a3:81:e1:36:52:e8:49:db:
         6f:4a:14:e5:31:3f:f7:9a:e7:d4:ea:8b:28:0e:39:09:cc:ea:
         f5:17:aa:b3:25:b3:ad:9f:34:83:50:bc:11:65:69:05:ed:cb:
         07:82:e7:23:f5:04:d2:1a:e1:ff:34:0c:27:b6:91:2e:0f:94:
         8d:01:f3:45:7a:45:df:69:af:77:79:80:ee:f7:d4:64:02:0f:
         f2:59:9a:a1:b4:a2:d1:e9:41:90:35:90:fe:5d:a5:9a:37:34:
         e4:80:12:1b:1c:01:8a:07:7c:5c:51:2b:19:d5:70:40:38:1b:
         ac:86:80:48:6e:a2:9a:6f:cc:02:c8:3e:b2:d7:b5:44:c7:45:
         62:34:b6:a2:8f:6a:a2:0b:63:20:70:fc:55:45:0c:35:52:b6:
         aa:fa:c0:06:7e:ec:0f:d8:ba:b5:7f:a0:6e:7f:59:d7:31:51:
         5b:e3:8e:05:58:f1:9a:cc:ea:4e:f4:ad:0c:da:e1:6d:7b:a5:
         42:ab:d2:3c:09:94:40:61:1f:8e:1d:e2:da:21:ad:3e:c5:f1:
         04:ae:1a:42:07:35:0a:0a:eb:30:60:90:00:d3:fa:c5:36:d1:
         40:2a:f4:58:5d:a0:fd:44:5a:50:b9:3a:c3:c7:77:7b:08:38:
         d2:8f:b9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:27:25 2024 by rpki-client on console-fra.rpki-client.org