Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/825158bb-6443-390b-9fb8-dff6e8c58030.roa
File:                     825158bb-6443-390b-9fb8-dff6e8c58030.roa (raw, json)
Hash identifier:          1NVBZI4D2WJvQ+FAwAvwjuikB7Bu2luKub8ta8HcsN0=
Subject key identifier:   E1:C4:91:E5:BD:3B:C8:3A:07:AD:BE:EB:94:BF:D5:2F:A1:58:C5:1B
Certificate issuer:       /CN=0c27bc55-b041-47cd-84eb-f3e9707acff1
Certificate serial:       010D0C9F43285845AC88C36BC8CD3DE4C3DB7500
Authority key identifier: C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/825158bb-6443-390b-9fb8-dff6e8c58030.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     53828
IP address blocks:        45.43.240.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:88:c3:6b:c8:cd:3d:e4:c3:db:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c27bc55-b041-47cd-84eb-f3e9707acff1
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=9c7a81f7-e8ec-48b0-8679-78a1d83980c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:37:c1:6e:41:17:38:73:38:7a:f6:44:d8:45:
                    d6:20:ab:57:a3:b2:fc:13:3a:55:d9:64:74:70:81:
                    0d:08:49:11:76:d8:c5:de:e9:0f:29:44:78:b3:0f:
                    bf:e2:79:dc:96:1a:f6:d7:eb:eb:e2:54:cd:26:a9:
                    b1:3f:0c:c2:08:bf:37:7d:c3:8a:60:bd:5d:2e:53:
                    86:e0:6b:98:93:b4:a0:e4:75:e3:6c:1d:10:37:8d:
                    f7:94:3f:4e:d7:60:dc:22:d4:82:eb:ed:21:84:2d:
                    d9:88:53:85:fc:0f:43:8f:7f:9e:41:a1:56:c8:4d:
                    d6:7e:83:46:35:98:21:b0:0d:1c:48:e7:97:ee:81:
                    3c:94:32:ed:72:84:fe:a6:55:b6:68:c3:67:72:f2:
                    b3:79:b9:74:97:92:c3:e1:54:d1:fa:2f:43:ef:ce:
                    b4:4c:98:a0:ab:7f:a4:f7:30:e7:2b:1c:8c:a7:d9:
                    91:96:47:22:62:f2:60:ea:36:27:14:af:eb:5c:f5:
                    6b:4f:17:34:7e:25:05:cf:c0:1c:8f:3c:09:98:95:
                    bf:d2:c7:78:7e:91:61:5a:ab:2e:14:0a:b7:19:b4:
                    db:62:30:56:89:6f:45:9d:6b:66:a3:3a:75:bd:62:
                    ed:c0:69:6d:f4:bc:5b:61:a7:af:3e:b7:46:33:76:
                    f7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:C4:91:E5:BD:3B:C8:3A:07:AD:BE:EB:94:BF:D5:2F:A1:58:C5:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/825158bb-6443-390b-9fb8-dff6e8c58030.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl

            X509v3 Authority Key Identifier:
                keyid:C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.43.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:2e:d3:0e:5b:3a:d2:8d:4f:53:41:75:89:77:f2:fa:90:04:
         b3:54:ca:9e:eb:95:30:4b:6f:a4:0f:7c:ab:fe:42:c3:37:7f:
         6e:00:df:8b:d4:ec:f3:1a:30:7c:c7:4d:29:2b:95:69:27:9a:
         a2:26:68:15:3d:86:38:d0:77:0e:2d:17:25:a7:bd:2e:b5:77:
         82:8f:88:76:e3:fd:cd:22:86:6c:fe:33:ce:bb:7d:f6:cf:87:
         0f:52:8a:07:38:5d:c5:80:ad:d6:44:89:b6:d6:54:ff:6a:0f:
         42:62:aa:27:3d:93:fc:fc:16:3c:d1:89:fa:e4:3e:f1:57:fe:
         64:8c:a1:92:4f:f5:7e:34:ab:d3:1e:f3:2e:e0:bb:1f:c2:ba:
         2b:71:29:33:f4:cb:b2:3f:8b:4d:30:07:cd:44:cf:c9:86:cf:
         32:8b:a0:36:75:01:d8:57:35:5d:dc:ed:7d:bc:88:24:65:1c:
         bb:8b:17:c9:7d:58:a4:19:5e:66:21:30:44:4f:5e:0f:84:cc:
         59:90:0b:ea:c0:5c:ed:82:9e:92:b5:b5:df:60:6d:b5:0a:d3:
         5a:7b:c9:cb:c1:d6:a5:f3:f6:8b:3d:93:d0:95:d6:4c:ba:7b:
         61:f1:32:6b:21:e8:68:a9:74:ba:d0:4a:71:21:e9:09:1f:18:
         9c:a9:d2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 03:09:22 2024 by rpki-client on console-fra.rpki-client.org