Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9d9fc06e-066d-3e30-89e6-33c88367a823.roa
File:                     9d9fc06e-066d-3e30-89e6-33c88367a823.roa (raw, json)
Hash identifier:          nOMtl1IawSZzY9RSsA/Dql0v+C1wmpntmnK+s0/xjU8=
Subject key identifier:   F3:60:B9:77:C8:7C:4B:D3:77:6C:78:53:77:B5:F0:F5:ED:93:45:7D
Certificate issuer:       /CN=9e8ed950-4488-49b1-8d39-bb8c71a767d2
Certificate serial:       010D0C9F432858453FA80C6A96911A5A5396B180
Authority key identifier: 26:16:DB:85:90:7D:14:0F:A6:08:91:5A:F3:8C:48:B7:DC:F3:D4:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9d9fc06e-066d-3e30-89e6-33c88367a823.roa
Signing time:             Mon 18 Mar 2024 13:00:30 +0000
ROA not before:           Mon 18 Mar 2024 13:00:30 +0000
ROA not after:            Sun 16 Jun 2024 13:00:30 +0000
asID:                     14618
IP address blocks:        45.42.175.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9e8ed950-4488-49b1-8d39-bb8c71a767d2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9e8ed950-4488-49b1-8d39-bb8c71a767d2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3f:a8:0c:6a:96:91:1a:5a:53:96:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e8ed950-4488-49b1-8d39-bb8c71a767d2
        Validity
            Not Before: Mar 18 13:00:30 2024 GMT
            Not After : Jun 16 13:00:30 2024 GMT
        Subject: CN=e8285ef5-d368-4248-ba90-06fa02511cb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:37:84:11:15:f3:ef:fa:62:46:01:55:e1:d9:
                    3d:26:a5:65:41:61:36:c4:53:39:58:d2:a2:ef:97:
                    7a:d8:1a:98:bf:83:51:ca:51:54:93:95:f1:f4:72:
                    b5:2e:8e:a6:4a:65:b9:e5:2a:16:df:53:18:73:72:
                    c1:37:40:6a:12:c1:78:f3:2f:2d:19:9b:bb:9c:d0:
                    67:e2:ac:51:79:5a:32:40:59:8c:43:43:63:2d:83:
                    79:78:2a:bb:03:ee:bb:a9:13:a4:81:7e:be:c5:d0:
                    60:2e:a1:9a:0c:26:4e:4e:13:d3:d7:55:2b:9d:d8:
                    b1:86:6e:8a:a8:6f:32:ec:d1:3e:5e:2a:9d:fb:bc:
                    d8:cb:94:d2:0c:5a:78:b7:8f:26:ef:7f:f2:4c:87:
                    c7:83:83:fe:88:b9:71:ed:99:9e:5d:d0:fd:99:05:
                    b2:7e:3b:58:04:ac:6f:4a:6f:1d:ce:d2:5c:18:4f:
                    d4:33:4e:f0:4e:1b:ea:c9:5f:f0:e9:4c:cb:2e:da:
                    8a:87:bc:20:6c:9b:5a:05:72:bd:41:3f:a3:c2:e1:
                    95:18:d8:bb:1c:98:1b:b4:12:58:53:a7:16:01:b6:
                    ad:57:43:26:44:d1:ee:f4:05:7e:d8:0d:83:9d:c2:
                    82:76:5f:56:cf:45:46:58:70:f1:47:de:ea:cf:0e:
                    6b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:60:B9:77:C8:7C:4B:D3:77:6C:78:53:77:B5:F0:F5:ED:93:45:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9d9fc06e-066d-3e30-89e6-33c88367a823.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9e8ed950-4488-49b1-8d39-bb8c71a767d2.crl

            X509v3 Authority Key Identifier:
                keyid:26:16:DB:85:90:7D:14:0F:A6:08:91:5A:F3:8C:48:B7:DC:F3:D4:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:d5:2f:82:36:16:09:2e:92:1c:c4:14:4e:26:7f:17:50:1e:
         17:19:48:3c:28:67:c3:c7:29:e2:c6:5b:cc:53:76:1c:98:b1:
         0b:14:a0:e5:26:c3:d1:8e:a4:b1:92:e2:c3:a7:28:ba:7c:30:
         c4:99:a4:95:ed:4c:dc:6c:1d:a1:3c:4b:a9:ee:77:e6:8a:c5:
         ac:4a:cc:f2:7d:49:e5:64:ec:4f:aa:9f:5a:96:0f:cd:fd:ac:
         67:0e:8d:26:42:c3:1a:5f:f3:fe:74:32:e6:db:41:1b:fc:bd:
         65:05:ca:3f:19:f0:de:1d:d0:0f:b4:ba:2a:09:3b:56:0c:68:
         33:82:70:3c:85:3b:be:d6:4d:bc:6d:fe:97:e8:fc:ec:69:91:
         6f:72:be:e4:d8:86:7f:d9:b8:09:ae:55:13:8f:2d:b1:8a:d8:
         56:09:14:ac:bb:bd:b5:11:9a:4b:da:5b:70:70:b5:20:2f:05:
         84:4c:73:51:fe:d4:cd:c3:7e:9d:b0:db:3b:a8:d3:76:78:26:
         f7:6b:e3:91:57:8f:a2:ba:2b:52:f1:ec:83:61:06:9f:06:24:
         8c:a0:b0:34:dc:7a:d4:5e:7b:5d:2f:50:8f:58:55:42:40:0e:
         76:15:14:ac:1c:a2:b8:09:54:73:ca:cf:67:d0:05:74:25:c9:
         2c:bb:d7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:27:08 2024 by rpki-client on console-fra.rpki-client.org