Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/45526e1a-d9f8-3cde-965b-6bfd824ce1dc.roa
File:                     45526e1a-d9f8-3cde-965b-6bfd824ce1dc.roa (raw, json)
Hash identifier:          x24itZ+ojnFZXgGKY/wWhgnc+R8XsFWMR8ou+7oYYtE=
Subject key identifier:   CB:EF:E5:8A:34:C6:8C:CE:DE:2D:88:67:8D:EF:77:1B:1F:3A:2B:BF
Certificate issuer:       /CN=f80f9298-8029-4285-89d7-27308341b2e0
Certificate serial:       010D0C9F43285845E193C7C509E685ABA7B3BF00
Authority key identifier: 67:6F:DF:98:DD:C5:B2:D6:A7:9F:9F:CF:0E:49:5C:38:64:D1:44:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/45526e1a-d9f8-3cde-965b-6bfd824ce1dc.roa
Signing time:             Wed 15 May 2024 13:00:34 +0000
ROA not before:           Wed 15 May 2024 13:00:34 +0000
ROA not after:            Tue 13 Aug 2024 13:00:34 +0000
asID:                     2639
IP address blocks:        136.143.176.0/20 maxlen: 24
                          136.143.160.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e1:93:c7:c5:09:e6:85:ab:a7:b3:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f80f9298-8029-4285-89d7-27308341b2e0
        Validity
            Not Before: May 15 13:00:34 2024 GMT
            Not After : Aug 13 13:00:34 2024 GMT
        Subject: CN=b2db7642-7c47-4f6e-b77a-3969ea5c9f19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:00:95:96:b8:20:a2:d8:b8:64:e9:d0:fe:63:
                    b6:14:b5:60:5d:39:da:26:54:dd:f0:4e:3a:bb:0b:
                    7c:0c:59:5f:be:99:2b:fa:14:0a:48:34:2c:9f:ef:
                    62:ea:76:62:66:24:c5:0c:88:fc:e1:a1:dd:19:15:
                    5a:aa:01:7c:c0:cc:f5:a2:c9:71:69:c1:b5:c2:b5:
                    fd:f6:f4:22:c6:4d:bc:48:b8:f1:09:58:7a:f7:a2:
                    f0:30:61:12:88:b4:fa:33:f8:78:29:e1:0e:60:1f:
                    e9:8c:16:ae:5e:10:e6:0a:e1:bd:f4:b3:5f:b8:b9:
                    11:6d:79:2f:9f:80:94:22:01:50:e7:97:1a:f0:a1:
                    ce:b8:70:33:51:85:cc:25:8a:d5:d4:f3:f4:c4:76:
                    dc:39:a5:20:dc:cb:ea:9f:8e:f3:89:b9:54:dd:58:
                    f7:7d:78:d8:c1:85:65:96:f0:a4:36:22:7f:b4:18:
                    9e:21:f2:90:95:ea:0c:0c:91:f4:0c:f2:47:20:97:
                    8a:6a:56:85:87:7b:03:87:4e:d1:52:fb:8a:53:27:
                    d4:23:3b:56:66:d8:85:87:cd:45:6c:00:94:1a:93:
                    56:1d:bd:57:fd:c3:9d:01:5f:b2:39:6b:29:dc:5f:
                    8d:9e:5c:89:32:aa:d1:1f:a3:60:cb:57:90:7c:da:
                    af:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:EF:E5:8A:34:C6:8C:CE:DE:2D:88:67:8D:EF:77:1B:1F:3A:2B:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/45526e1a-d9f8-3cde-965b-6bfd824ce1dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.crl

            X509v3 Authority Key Identifier:
                keyid:67:6F:DF:98:DD:C5:B2:D6:A7:9F:9F:CF:0E:49:5C:38:64:D1:44:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.143.160.0/21
                  136.143.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:0d:d2:00:e1:09:d2:51:88:0c:8f:c8:55:54:a0:b1:d5:ed:
         c8:cf:dc:0e:ff:91:7f:e3:53:04:b0:85:68:30:8d:08:9f:b7:
         10:c9:55:eb:b2:4b:c0:bd:89:65:2d:12:e7:9e:31:a0:23:30:
         0e:42:4d:58:f2:b6:4f:e3:05:cb:6f:00:a1:97:45:4b:fa:0c:
         ba:f6:0b:9d:e1:85:99:d8:5b:3f:c4:d0:fc:e9:7c:4f:b4:00:
         e3:63:b0:3e:bc:1a:92:62:d5:fb:18:1b:91:8d:02:db:0f:ce:
         c3:10:91:ce:e7:e7:65:69:18:4a:2a:fb:38:2e:fd:4f:15:af:
         a9:56:ec:0b:65:66:32:54:81:16:16:d3:ba:03:e1:7d:f0:29:
         ad:97:74:6a:82:7c:f0:b5:57:26:e8:1f:54:23:b8:ca:c2:1e:
         8c:39:05:a4:19:63:09:91:77:16:bc:cd:bc:38:00:b0:6d:48:
         16:84:40:ec:be:60:6b:4b:94:ef:a6:43:57:ad:81:a8:54:38:
         d1:51:a5:c4:7b:5c:a7:ed:23:ed:07:68:d2:cf:94:6f:b6:de:
         19:88:b9:11:bc:d5:8d:5a:5c:eb:98:45:c1:3e:f6:e4:b3:f3:
         cd:bc:11:21:0f:d1:18:09:8b:45:7f:d9:9a:20:5c:cc:17:87:
         c4:40:14:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:00:32 2024 by rpki-client on console-ams.rpki-client.org