Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/37f97f97-7938-33a2-94e9-584d409d7825.roa
File:                     37f97f97-7938-33a2-94e9-584d409d7825.roa (raw, json)
Hash identifier:          efJlSbqSc8mibVaE5suV4a00UdE7h7cQs4cbbaIHI6k=
Subject key identifier:   1E:11:DD:3C:FA:81:C4:06:12:CE:23:FF:0E:7A:2A:35:8B:68:2C:92
Certificate issuer:       /CN=59c9f46b-742f-4b2d-929b-267fefccc50a
Certificate serial:       010D0C9F43285845B7B387E3D2C45C0959F14480
Authority key identifier: 31:94:CB:06:4F:A4:B6:3C:A6:4A:48:CC:A8:86:01:92:A7:0E:A0:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/37f97f97-7938-33a2-94e9-584d409d7825.roa
Signing time:             Tue 30 Apr 2024 13:00:34 +0000
ROA not before:           Tue 30 Apr 2024 13:00:34 +0000
ROA not after:            Mon 29 Jul 2024 13:00:34 +0000
asID:                     16509
IP address blocks:        45.45.196.0/22 maxlen: 24
                          208.74.168.0/21 maxlen: 24
                          2607:880::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b7:b3:87:e3:d2:c4:5c:09:59:f1:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59c9f46b-742f-4b2d-929b-267fefccc50a
        Validity
            Not Before: Apr 30 13:00:34 2024 GMT
            Not After : Jul 29 13:00:34 2024 GMT
        Subject: CN=ba6bff98-bfe1-42ec-aaff-c94e1f91be58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:98:64:51:90:1e:08:76:3e:fe:99:ed:35:04:
                    35:64:d4:c6:35:c1:83:a5:a8:ba:2c:6d:ef:98:64:
                    2a:a7:8d:c2:9e:0d:72:22:35:ca:90:ed:7d:24:98:
                    02:57:52:df:f8:61:32:fd:79:1d:cb:66:10:08:a3:
                    c5:64:db:6d:3b:e9:bb:3f:46:bd:6e:16:6d:d9:ea:
                    bc:13:61:68:7b:80:6d:48:c3:a8:f5:49:66:42:a1:
                    62:1b:c7:8a:09:f7:db:6b:c8:11:69:40:20:fd:37:
                    f4:15:7d:80:e6:4a:81:9c:6d:80:51:31:e6:0f:4f:
                    44:49:3d:50:bd:83:7d:ed:2b:b3:9c:58:79:d0:6f:
                    41:a3:70:c8:ac:cc:9c:3b:a4:48:9b:d1:a8:f1:e2:
                    59:6f:55:9e:4d:7a:59:1b:da:ed:a2:f2:ae:82:b1:
                    ea:32:83:45:08:1d:02:02:86:c0:3f:f9:aa:9d:0d:
                    40:3e:8e:f4:e2:a8:1e:b3:06:bb:07:eb:7a:6b:17:
                    11:2b:79:85:b4:df:0e:37:ec:52:31:f2:a7:2e:1b:
                    61:c7:d4:7b:08:a5:ea:05:26:76:51:28:0f:75:84:
                    30:c0:99:c2:c2:db:66:04:58:18:09:9b:94:f2:ea:
                    38:36:57:d0:42:21:60:88:28:70:ce:ef:6c:3e:ca:
                    d5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:11:DD:3C:FA:81:C4:06:12:CE:23:FF:0E:7A:2A:35:8B:68:2C:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/37f97f97-7938-33a2-94e9-584d409d7825.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.crl

            X509v3 Authority Key Identifier:
                keyid:31:94:CB:06:4F:A4:B6:3C:A6:4A:48:CC:A8:86:01:92:A7:0E:A0:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.196.0/22
                  208.74.168.0/21
                IPv6:
                  2607:880::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:b7:c1:25:3c:2f:3d:3e:cb:70:d9:75:60:51:ab:55:2f:78:
         62:9e:30:09:6f:17:a4:29:bd:51:4f:f8:16:c1:5f:91:54:80:
         67:e6:14:e0:c3:a0:8a:8e:5c:0c:d1:73:6e:97:17:4d:b8:3b:
         2d:fe:db:49:d3:e4:b9:44:41:ca:cd:25:f1:75:13:1c:b5:3d:
         72:3e:9b:3b:1d:91:fb:22:6c:2d:be:1f:5c:2c:b9:f8:15:18:
         71:65:48:d6:ce:87:1f:24:6e:96:3a:5a:79:40:82:a4:fd:8b:
         c3:1c:30:d1:80:aa:7f:ea:bf:38:0f:98:77:fa:e4:62:5f:80:
         6a:34:d8:39:45:69:20:a1:90:b3:ce:5e:42:83:2c:de:0b:b9:
         a0:6b:fe:39:82:3e:8a:cf:9c:80:ff:94:7f:0b:bb:ba:4f:35:
         55:9a:c9:29:d5:f8:b9:94:70:5b:9f:95:26:09:05:c2:73:f4:
         e4:40:01:99:e9:85:30:9a:a6:b4:33:3c:7d:83:6e:39:69:71:
         df:dc:67:69:b1:96:91:de:2a:d4:9b:d3:20:5f:da:93:51:5b:
         8d:03:37:3d:52:15:8d:15:26:66:c9:49:83:e6:39:2a:f4:99:
         2c:fd:d7:09:b8:bc:01:5b:b7:97:ed:60:32:38:45:be:bb:78:
         b4:96:f2:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 20:51:37 2024 by rpki-client on console-ams.rpki-client.org