Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/37f97f97-7938-33a2-94e9-584d409d7825.roa
File:                     37f97f97-7938-33a2-94e9-584d409d7825.roa (raw, json)
Hash identifier:          fLpFjm7z2dObGtRoW1PLsB/HuH++swWYoRNMKL6+9eI=
Subject key identifier:   C4:55:6B:3F:EF:B1:B8:AD:35:77:22:46:94:FA:C3:31:72:60:EE:D3
Certificate issuer:       /CN=59c9f46b-742f-4b2d-929b-267fefccc50a
Certificate serial:       010D0C9F432858477660FFDD44EC66A3C4861100
Authority key identifier: 31:94:CB:06:4F:A4:B6:3C:A6:4A:48:CC:A8:86:01:92:A7:0E:A0:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/37f97f97-7938-33a2-94e9-584d409d7825.roa
Signing time:             Mon 07 Oct 2024 13:00:40 +0000
ROA not before:           Mon 07 Oct 2024 13:00:40 +0000
ROA not after:            Sun 05 Jan 2025 14:00:40 +0000
asID:                     16509
IP address blocks:        45.45.196.0/22 maxlen: 24
                          208.74.168.0/21 maxlen: 24
                          2607:880::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:76:60:ff:dd:44:ec:66:a3:c4:86:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59c9f46b-742f-4b2d-929b-267fefccc50a
        Validity
            Not Before: Oct  7 13:00:40 2024 GMT
            Not After : Jan  5 14:00:40 2025 GMT
        Subject: CN=ab3c56b7-8818-4544-a8a2-90fa88d24d22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:34:5b:92:28:ef:a0:f1:58:c5:58:05:80:57:
                    aa:4c:7f:46:c3:7a:09:bd:41:eb:9d:ec:2b:9a:54:
                    72:f5:dc:11:d3:19:82:04:17:78:1c:1a:2a:bd:43:
                    80:a9:aa:20:f8:c2:cb:3b:7b:98:2a:b9:c6:7e:6c:
                    a4:27:88:b4:c6:5f:6e:b9:77:f3:9c:8b:46:9d:5b:
                    2e:da:5c:ad:a5:fa:db:54:73:d0:72:40:b7:a2:e5:
                    4d:7b:a3:81:24:57:18:88:72:30:e0:ca:17:99:33:
                    e0:f0:3e:cc:f1:28:eb:3c:38:42:bd:a7:45:2f:d8:
                    c7:ef:30:8d:69:c2:76:4a:99:f2:5c:89:92:b8:a6:
                    1a:fe:ac:90:ef:4a:e4:81:d8:c0:04:4a:ba:5a:02:
                    0c:cd:44:de:09:ef:a9:b5:bf:9b:7e:67:51:3d:ae:
                    cb:77:85:22:41:a3:5a:e0:a6:52:37:59:9f:1f:7d:
                    4f:51:df:21:f7:37:62:01:65:bd:50:fa:f5:72:e1:
                    6d:d9:7f:00:18:c8:28:5f:61:0c:1b:78:90:2d:6a:
                    4f:f3:c6:d2:11:ef:02:80:bf:3b:83:ac:9f:3d:90:
                    c0:f5:c7:b2:1d:f8:9b:3e:84:91:a0:28:24:ba:6f:
                    1c:6a:83:e6:e5:99:b6:47:a5:06:0b:18:b7:c2:12:
                    cf:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:55:6B:3F:EF:B1:B8:AD:35:77:22:46:94:FA:C3:31:72:60:EE:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/37f97f97-7938-33a2-94e9-584d409d7825.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.crl

            X509v3 Authority Key Identifier:
                keyid:31:94:CB:06:4F:A4:B6:3C:A6:4A:48:CC:A8:86:01:92:A7:0E:A0:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.196.0/22
                  208.74.168.0/21
                IPv6:
                  2607:880::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:6a:72:3a:99:7a:92:f7:23:ca:34:5b:eb:9e:34:09:ca:8a:
         66:4a:1b:ab:a2:ce:ef:da:d7:6b:16:5b:78:7c:a4:93:36:1c:
         65:b8:5e:42:1e:0b:c7:e9:eb:49:20:88:ba:20:ee:f2:d8:cb:
         51:b1:cc:3b:d7:ca:7a:88:c1:fc:bc:30:83:18:c1:d0:0f:f6:
         b2:e6:8b:4e:9a:eb:dd:f0:6f:5e:ff:77:1d:f5:ce:35:a9:52:
         0c:2b:33:d4:3c:31:4b:13:5c:04:6f:ad:fc:1a:9b:b5:80:d9:
         cf:e0:02:24:1c:5f:05:81:08:52:12:db:75:a9:3e:ee:35:7d:
         2c:5a:47:9a:67:e0:e4:87:eb:0a:23:14:a4:8c:37:b8:ae:fa:
         5e:38:40:0b:aa:9e:ba:3b:83:d7:78:8d:9c:fe:97:72:d6:c3:
         2e:b1:04:a8:cb:16:09:0a:3f:8a:09:a2:7e:49:d8:4d:f4:0b:
         22:fd:40:f5:02:6f:26:76:8e:79:8f:c8:cb:92:08:34:38:c9:
         ec:b9:be:74:27:57:31:79:b5:34:6f:5b:cf:f4:26:32:1d:95:
         65:fd:f5:81:f4:29:29:87:ff:b7:7f:a2:cf:1c:62:c1:8d:7e:
         1d:97:c8:60:4d:1d:94:e9:09:b3:6d:af:dd:4d:a6:00:b5:97:
         de:59:b3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:38 2024 by rpki-client on console-fra.rpki-client.org