Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6aa8cf92-6ed1-444d-b120-4e622c110d10/610c7ada-377e-34d0-9c81-d4d76be9e55d.roa
File:                     610c7ada-377e-34d0-9c81-d4d76be9e55d.roa (raw, json)
Hash identifier:          UeL5+zavn2fg+fCSpniqvvMz76w+MtM9rOXyYttXMDI=
Subject key identifier:   AE:51:06:3D:F4:6D:53:83:77:72:26:48:EF:13:FD:9D:E6:86:AD:DE
Certificate issuer:       /CN=6aa8cf92-6ed1-444d-b120-4e622c110d10
Certificate serial:       010D0C9F43285845777DE07D79098C702D64FA80
Authority key identifier: BD:32:61:B6:44:20:78:C5:81:2B:AB:2D:AB:4C:0D:8D:0A:05:EC:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6aa8cf92-6ed1-444d-b120-4e622c110d10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6aa8cf92-6ed1-444d-b120-4e622c110d10/610c7ada-377e-34d0-9c81-d4d76be9e55d.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     398712
IP address blocks:        23.165.240.0/24 maxlen: 24
                          45.4.196.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6aa8cf92-6ed1-444d-b120-4e622c110d10/6aa8cf92-6ed1-444d-b120-4e622c110d10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6aa8cf92-6ed1-444d-b120-4e622c110d10/6aa8cf92-6ed1-444d-b120-4e622c110d10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6aa8cf92-6ed1-444d-b120-4e622c110d10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:e0:7d:79:09:8c:70:2d:64:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aa8cf92-6ed1-444d-b120-4e622c110d10
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=3741a5f0-e967-48ea-90fb-2af064f803cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:02:f2:00:22:a4:eb:d4:b9:03:07:69:19:56:
                    f8:57:35:ec:e4:2a:5c:48:33:a4:be:54:d5:22:e5:
                    23:30:bb:4d:ce:8c:c7:ff:3a:d6:59:ad:78:9e:15:
                    ee:19:d7:c3:7a:5a:17:68:ad:25:43:a4:4a:d4:15:
                    36:26:7a:cf:ae:f3:b2:39:69:7a:09:74:48:88:e2:
                    31:38:c4:4a:f9:68:f9:25:db:4a:53:2c:25:af:25:
                    4a:f5:05:f4:6b:ff:f1:c0:94:05:a1:05:6c:10:19:
                    29:19:48:b1:ac:28:99:82:7d:a1:75:1c:5b:11:91:
                    d4:1d:b8:5b:26:80:c9:17:cb:18:80:1d:df:64:ac:
                    b0:20:e2:04:7b:d3:d3:d8:f1:0c:01:c4:30:32:9c:
                    5c:24:8f:0a:53:38:61:cd:8d:87:9a:61:88:18:c5:
                    8c:8b:89:e6:58:03:0d:77:7d:73:a7:9f:9c:fc:5b:
                    2b:de:56:a6:9b:af:a3:b6:8e:4e:1d:da:3b:92:95:
                    65:72:f7:ac:33:37:46:46:e6:dd:34:1e:06:a2:d1:
                    29:99:7f:52:01:df:01:38:b1:64:69:47:29:f0:11:
                    3d:3d:ca:a4:03:35:62:77:1c:2e:59:af:9e:50:ed:
                    66:be:3a:3e:80:a0:91:29:15:b4:07:b5:a4:65:c7:
                    e3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:51:06:3D:F4:6D:53:83:77:72:26:48:EF:13:FD:9D:E6:86:AD:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6aa8cf92-6ed1-444d-b120-4e622c110d10/610c7ada-377e-34d0-9c81-d4d76be9e55d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6aa8cf92-6ed1-444d-b120-4e622c110d10/6aa8cf92-6ed1-444d-b120-4e622c110d10.crl

            X509v3 Authority Key Identifier:
                keyid:BD:32:61:B6:44:20:78:C5:81:2B:AB:2D:AB:4C:0D:8D:0A:05:EC:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6aa8cf92-6ed1-444d-b120-4e622c110d10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.165.240.0/24
                  45.4.196.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:2c:2d:ba:5b:8d:41:da:76:fc:4c:46:6c:b7:af:e1:56:dd:
         a8:49:0f:d3:6b:c8:a3:d9:45:d2:94:68:1f:ca:2c:d3:d5:0d:
         08:75:5b:91:11:5e:b2:97:6c:61:af:4f:75:61:93:15:19:96:
         55:cd:7f:78:0a:c1:06:06:b5:06:93:f1:ce:a2:47:91:5a:39:
         e2:7b:76:52:e3:25:9c:f8:94:95:56:66:16:bc:48:1f:e7:89:
         15:8f:43:a9:74:a4:ac:96:45:43:89:33:71:9a:05:e4:e4:62:
         d5:3a:10:f4:b7:35:58:a9:9a:ca:df:e9:f2:c4:71:82:bd:b8:
         f4:70:18:fd:ea:07:9d:ec:45:bb:5e:96:a1:88:b9:6d:89:e7:
         ce:04:0b:ae:10:0b:3a:25:7b:dd:3d:e9:59:9d:94:8b:8f:e5:
         48:11:04:db:c3:a2:2c:7c:ba:63:d2:13:0e:18:c2:77:4d:6e:
         d9:54:61:3d:c9:99:4a:09:eb:d3:05:f5:18:75:2d:52:8a:01:
         12:30:7b:cf:70:0a:ed:0d:bd:85:8d:17:df:21:0d:46:65:07:
         b5:25:ff:b4:be:17:df:81:06:d6:66:7a:f6:57:7a:db:bb:53:
         b7:37:05:e4:98:e0:01:95:43:10:f6:83:fc:5f:93:b1:c0:b9:
         ad:6d:ff:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:15:52 2024 by rpki-client on console-ams.rpki-client.org