Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/03d6ba40-02b4-3565-a74a-d62126945baf.roa
File:                     03d6ba40-02b4-3565-a74a-d62126945baf.roa (raw, json)
Hash identifier:          PDa0ZX3v4dtNzrEknCE1NujIiKuc0uq27oQAEgV7lHA=
Subject key identifier:   45:FC:03:64:F0:45:A1:A7:7A:70:8E:2E:4A:36:2C:18:53:FB:F8:61
Certificate issuer:       /CN=9e8ed950-4488-49b1-8d39-bb8c71a767d2
Certificate serial:       010D0C9F432858454272C50590D1013085A8BD10
Authority key identifier: 26:16:DB:85:90:7D:14:0F:A6:08:91:5A:F3:8C:48:B7:DC:F3:D4:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/03d6ba40-02b4-3565-a74a-d62126945baf.roa
Signing time:             Tue 19 Mar 2024 13:00:34 +0000
ROA not before:           Tue 19 Mar 2024 13:00:34 +0000
ROA not after:            Mon 17 Jun 2024 13:00:34 +0000
asID:                     399141
IP address blocks:        45.42.172.0/22 maxlen: 24
                          2602:fcd8::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9e8ed950-4488-49b1-8d39-bb8c71a767d2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9e8ed950-4488-49b1-8d39-bb8c71a767d2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:42:72:c5:05:90:d1:01:30:85:a8:bd:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e8ed950-4488-49b1-8d39-bb8c71a767d2
        Validity
            Not Before: Mar 19 13:00:34 2024 GMT
            Not After : Jun 17 13:00:34 2024 GMT
        Subject: CN=bae8f882-46d0-46da-b692-7823f058dcea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:33:11:10:81:23:b7:98:2e:9c:ac:b0:f3:4e:
                    fe:4e:da:92:bb:5b:bd:c0:2f:a8:a6:2a:89:2d:ef:
                    99:a1:b5:ad:4e:68:dc:7f:f6:98:4e:d4:ef:89:91:
                    80:ae:db:66:ec:26:b7:09:e4:6f:6f:94:b5:ea:aa:
                    f4:53:73:c5:b4:98:9a:0e:28:f9:61:eb:00:3f:f6:
                    a9:37:64:d2:7e:e4:e2:75:45:60:68:51:8d:4b:aa:
                    a9:15:f4:0d:d4:82:f6:65:93:e0:01:73:fe:5c:80:
                    e8:07:97:c8:a7:73:c5:4f:6d:60:6a:d5:42:89:f5:
                    9e:88:f7:66:7c:f7:36:aa:48:62:25:79:ac:dd:fd:
                    ef:2d:96:33:f8:34:94:cb:e5:49:02:b2:9b:bc:75:
                    75:0c:fe:8d:fb:16:8c:bd:69:66:13:8f:88:93:d1:
                    50:9c:fb:b2:0c:89:bf:ad:69:79:39:c5:17:f4:61:
                    d2:88:59:cd:64:7c:e0:b6:23:49:e3:dd:b8:7a:8b:
                    fb:08:36:ce:5c:aa:70:83:02:37:47:31:4a:90:b2:
                    13:3b:2a:5a:0f:16:28:30:62:ed:7c:1f:b4:c6:8e:
                    93:d9:12:0f:54:04:af:fc:ca:2d:c0:5c:d4:8b:8b:
                    2b:17:01:c5:5b:ab:2f:a4:3b:f4:aa:79:46:a3:ce:
                    f9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:FC:03:64:F0:45:A1:A7:7A:70:8E:2E:4A:36:2C:18:53:FB:F8:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/03d6ba40-02b4-3565-a74a-d62126945baf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9e8ed950-4488-49b1-8d39-bb8c71a767d2.crl

            X509v3 Authority Key Identifier:
                keyid:26:16:DB:85:90:7D:14:0F:A6:08:91:5A:F3:8C:48:B7:DC:F3:D4:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.172.0/22
                IPv6:
                  2602:fcd8::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:cc:bf:3b:1e:57:2b:bf:e7:b2:b2:43:5e:2c:fa:ff:82:8d:
         ef:a8:9e:28:d7:9a:de:6b:39:26:a7:10:7f:ae:89:c5:f1:d7:
         fc:07:c4:a1:f1:d4:d9:25:1e:80:f4:2c:63:dc:45:dc:f8:64:
         ab:c4:08:f9:91:71:b5:00:85:1e:7a:73:16:57:06:fc:12:5e:
         74:74:9a:8b:c8:6a:a7:d0:cb:78:50:a8:d9:d0:51:d4:66:20:
         c6:42:eb:79:89:21:6d:83:80:46:54:05:58:08:1f:be:1d:3c:
         13:4a:79:f9:93:31:dc:9f:79:17:88:80:a0:30:39:c3:83:9f:
         12:8f:bc:0b:cd:df:a0:cb:98:ba:a6:b7:30:e6:76:51:7a:ac:
         20:75:f0:38:7c:a2:df:86:ef:55:23:da:b6:04:57:57:69:70:
         9e:f7:e0:44:6b:c9:17:57:6f:66:20:bc:97:e7:52:57:09:0b:
         47:01:06:bf:4f:4b:ff:e0:e0:b4:6b:6b:69:56:81:42:c4:0d:
         28:30:ff:c4:50:c7:9e:b7:7c:0c:ac:31:e2:1e:df:5f:ac:ae:
         b4:9d:8b:29:48:ee:1a:f3:eb:c8:62:8d:8b:d4:ed:ff:b6:86:
         6d:8d:55:b3:fa:c3:3e:c0:64:ac:cc:ae:03:6a:97:d2:7e:09:
         70:f4:14:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 20:39:20 2024 by rpki-client on console-fra.rpki-client.org