Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/b6292c35-028c-34ee-9fac-bb07874cf5d4.roa
File:                     b6292c35-028c-34ee-9fac-bb07874cf5d4.roa (raw, json)
Hash identifier:          /NaW2kc1gZ/Ki5VFe4G7BHh90HGPE1qyep5xwkbvY0w=
Subject key identifier:   79:F8:B5:10:FB:BA:2A:1A:41:C5:00:0C:E4:27:F7:80:CB:BE:FE:18
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285845A428D3DE243F5662F5FACB40
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/b6292c35-028c-34ee-9fac-bb07874cf5d4.roa
Signing time:             Tue 23 Apr 2024 13:00:34 +0000
ROA not before:           Tue 23 Apr 2024 13:00:34 +0000
ROA not after:            Mon 22 Jul 2024 13:00:34 +0000
asID:                     64267
IP address blocks:        45.40.123.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a4:28:d3:de:24:3f:56:62:f5:fa:cb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Apr 23 13:00:34 2024 GMT
            Not After : Jul 22 13:00:34 2024 GMT
        Subject: CN=75a55248-9b39-4e33-97b8-7035d8665ae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3e:58:31:00:2a:6e:71:74:ca:80:8c:a3:c9:
                    db:fd:99:a7:db:72:08:78:8c:b7:92:89:c6:b6:06:
                    ec:44:10:e9:64:4d:8b:c6:81:ba:16:ef:8b:b5:69:
                    7d:93:39:6e:94:c8:72:83:e9:e0:6e:c4:29:0a:9d:
                    2c:da:53:99:30:e1:14:f1:14:6d:e8:cb:81:8e:f6:
                    f3:eb:95:77:a1:bc:75:60:c7:d7:a7:67:fc:40:80:
                    30:d1:aa:d6:17:dd:f7:c8:df:23:52:d4:be:f5:b5:
                    8f:6e:b6:6c:d2:7c:37:c0:82:d7:df:df:57:a6:9e:
                    45:dd:3b:d4:b6:54:4e:b9:9b:5e:87:fb:e0:be:79:
                    f9:7e:ab:dc:55:2e:95:3e:a8:30:b1:b8:2a:48:b5:
                    c6:49:d4:c2:27:0d:7a:5b:a1:4a:39:1e:28:19:9c:
                    16:a5:43:9d:21:13:ab:2e:6b:3f:f5:4b:fd:6e:45:
                    65:b8:89:48:2b:40:8e:48:c1:99:2f:1a:1a:f5:6f:
                    56:77:92:7f:ea:1b:92:0c:75:82:aa:ae:eb:e8:5f:
                    ab:c6:4e:c8:ef:f8:01:07:26:86:d3:8e:a2:aa:18:
                    62:26:59:4f:b5:a7:5a:32:b8:d9:34:0c:84:eb:ca:
                    98:27:6e:3a:a8:61:20:2c:fb:17:f7:07:c4:37:65:
                    cc:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:F8:B5:10:FB:BA:2A:1A:41:C5:00:0C:E4:27:F7:80:CB:BE:FE:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/b6292c35-028c-34ee-9fac-bb07874cf5d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.40.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:f1:b1:4e:19:9b:8c:aa:76:b5:f3:68:28:89:79:fd:c3:25:
         ff:bb:78:8e:3e:45:15:c9:1b:08:c1:9b:23:65:5a:d7:9a:d5:
         d6:2c:c9:33:79:10:e9:1f:97:65:80:05:ee:5e:13:e4:ec:76:
         c9:a4:91:33:2c:10:1e:d5:1a:78:82:f5:03:09:1e:e9:c9:ed:
         1f:52:5b:15:a4:45:1e:72:c7:0a:9f:86:85:43:c5:39:94:fa:
         cf:2d:59:98:aa:d9:d4:2d:6d:5c:f5:fb:e3:b3:20:68:f0:47:
         24:64:99:04:c9:d4:da:c6:b7:e4:41:f8:89:bb:fa:99:4c:36:
         ab:cf:b5:57:ba:61:1e:e2:6a:5a:40:29:30:95:70:18:2b:5f:
         5e:d1:e8:d1:60:f0:c0:c0:de:95:cc:5a:ee:53:9a:81:c2:76:
         1e:2e:1b:53:28:7e:07:bd:6d:ef:f9:19:d5:99:1d:e6:77:30:
         f5:a7:62:1f:6c:59:25:d5:4b:bd:a5:a9:e7:a4:6f:44:9e:27:
         49:46:31:da:7f:0d:18:9e:33:4d:6a:f9:a6:8c:8b:08:8d:75:
         05:a4:d9:4b:8b:6d:16:00:a5:3b:a9:4d:17:60:54:61:e7:2f:
         d3:82:5c:66:28:96:fb:54:a8:26:5a:14:c8:db:ab:87:40:fd:
         a6:4a:e4:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 06:59:47 2024 by rpki-client on console-fra.rpki-client.org