Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/45c66754-6161-4548-b519-3f3f38d6030b/2acaf791-4341-36cc-b06b-89887c6e2c00.roa
File:                     2acaf791-4341-36cc-b06b-89887c6e2c00.roa (raw, json)
Hash identifier:          QbJfx5raNuPpSeOidl8/W3QzxgzIN0dJ7Y+c4CnpBAE=
Subject key identifier:   25:ED:5F:D9:E0:32:23:F7:E3:E4:6F:10:68:E9:AE:5E:8C:3C:AA:1D
Certificate issuer:       /CN=45c66754-6161-4548-b519-3f3f38d6030b
Certificate serial:       010D0C9F43285844ED6AA03765B1A4F563901CC0
Authority key identifier: 73:4A:E2:1F:5C:28:AF:8E:91:9A:0D:39:7E:F4:21:94:35:3C:38:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/45c66754-6161-4548-b519-3f3f38d6030b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/45c66754-6161-4548-b519-3f3f38d6030b/2acaf791-4341-36cc-b06b-89887c6e2c00.roa
Signing time:             Sun 18 Feb 2024 02:00:25 +0000
ROA not before:           Sun 18 Feb 2024 02:00:25 +0000
ROA not after:            Sat 18 May 2024 01:00:25 +0000
asID:                     16509
IP address blocks:        163.47.180.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/45c66754-6161-4548-b519-3f3f38d6030b/45c66754-6161-4548-b519-3f3f38d6030b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/45c66754-6161-4548-b519-3f3f38d6030b/45c66754-6161-4548-b519-3f3f38d6030b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/45c66754-6161-4548-b519-3f3f38d6030b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ed:6a:a0:37:65:b1:a4:f5:63:90:1c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45c66754-6161-4548-b519-3f3f38d6030b
        Validity
            Not Before: Feb 18 02:00:25 2024 GMT
            Not After : May 18 01:00:25 2024 GMT
        Subject: CN=2af8c27c-8b35-481a-954d-e0e687a85024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:05:0d:01:5a:ee:a4:0a:ff:72:8a:9a:3c:30:
                    30:c7:a0:de:14:42:78:2e:bc:b4:05:e9:08:56:96:
                    e0:56:da:01:6c:0d:97:a1:6f:30:3d:f7:b5:1f:61:
                    87:75:49:73:1e:7e:4b:46:9a:3e:3f:98:e9:57:5c:
                    85:f7:91:26:f6:fe:01:5c:25:1d:2f:55:a0:0d:44:
                    46:29:42:43:e2:25:d3:20:df:fd:6b:fc:ac:c5:37:
                    ec:98:90:1f:3a:c2:d7:07:e3:4d:3a:91:9d:cc:e0:
                    93:62:be:6d:54:95:46:be:20:db:d1:bc:78:df:b9:
                    e5:80:0e:d1:f6:1f:9e:ed:d8:38:28:e6:02:e6:4e:
                    05:b3:01:15:d7:02:9b:28:45:2c:64:04:71:aa:dc:
                    9d:64:5b:95:3a:39:36:92:bf:09:f1:8b:7b:d7:3c:
                    3b:77:90:55:09:fa:55:88:97:71:5a:6a:61:fc:be:
                    e4:00:dc:37:9a:d1:88:c2:43:9e:17:3e:dd:4c:e0:
                    54:9e:83:65:b3:7b:5a:52:98:73:87:98:6b:6d:0d:
                    b3:f5:d0:87:62:5a:46:ea:57:24:fa:6a:e7:34:24:
                    52:ed:1d:5a:fd:f0:55:0d:a5:b9:41:f4:fd:92:c7:
                    ef:b6:33:6b:df:bd:41:53:0e:63:56:61:57:f8:de:
                    9f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:ED:5F:D9:E0:32:23:F7:E3:E4:6F:10:68:E9:AE:5E:8C:3C:AA:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/45c66754-6161-4548-b519-3f3f38d6030b/2acaf791-4341-36cc-b06b-89887c6e2c00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/45c66754-6161-4548-b519-3f3f38d6030b/45c66754-6161-4548-b519-3f3f38d6030b.crl

            X509v3 Authority Key Identifier:
                keyid:73:4A:E2:1F:5C:28:AF:8E:91:9A:0D:39:7E:F4:21:94:35:3C:38:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/45c66754-6161-4548-b519-3f3f38d6030b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.47.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:b8:f5:dc:fa:e1:c8:07:08:61:ff:4b:46:b1:92:51:f2:dd:
         73:b5:5a:d0:e7:43:1f:c5:9b:0d:a5:d9:9a:fb:39:a1:7a:69:
         1e:ae:2c:ed:be:2b:d5:aa:bd:52:d8:19:8f:ac:e4:c5:9c:f6:
         10:c1:b3:79:31:24:de:13:a6:d6:01:cc:fc:e3:24:8c:aa:3e:
         9c:01:ca:50:16:45:bf:93:45:10:07:7c:c7:ac:4f:a3:8b:0d:
         63:ee:af:66:11:d6:12:21:17:27:7f:20:32:5e:9b:0d:6a:ac:
         30:56:48:12:0d:70:55:33:75:e2:aa:3d:01:bd:15:86:34:b3:
         b2:57:6d:b6:67:52:bc:b6:b3:d0:43:82:e9:64:1b:3d:ca:81:
         cd:44:27:de:e7:63:4f:46:8a:fb:6e:b7:d3:56:4c:e5:dd:48:
         6a:74:19:c4:6a:3c:56:6f:9a:eb:fa:55:2d:d6:3a:4d:90:d0:
         39:32:b3:9b:30:ef:44:06:15:ac:52:da:51:e5:db:88:d7:a3:
         46:73:c0:7f:03:8f:1a:c8:29:06:87:bf:ca:d3:3d:7c:a5:fd:
         06:d8:c5:b9:7f:be:73:02:94:3e:da:7e:8b:56:c1:29:9e:14:
         02:c5:1a:b8:3d:5a:04:41:5b:e9:85:d1:b3:0d:d4:3a:af:a0:
         ff:62:7d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:15:51 2024 by rpki-client on console-ams.rpki-client.org