Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/836c6d6c-b014-3b85-bedd-f5a836704db0.roa
File:                     836c6d6c-b014-3b85-bedd-f5a836704db0.roa (raw, json)
Hash identifier:          qx9hVUkqLzV7jHKH0TQe7YvVSNZ1xrl4jFP/Tr31atw=
Subject key identifier:   ED:C9:E4:88:11:64:15:1B:6A:02:30:8B:AD:B9:3B:2A:87:E9:E6:DD
Certificate issuer:       /CN=a521f5ee-89d2-4088-abb9-f69291655e39
Certificate serial:       010D0C9F43285845A6925B94D934E764B0BAE080
Authority key identifier: 14:EE:0D:BC:78:58:6F:49:6A:4F:7C:2E:30:4A:4E:11:A9:FE:9B:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/836c6d6c-b014-3b85-bedd-f5a836704db0.roa
Signing time:             Wed 24 Apr 2024 09:45:09 +0000
ROA not before:           Wed 24 Apr 2024 09:45:09 +0000
ROA not after:            Tue 23 Jul 2024 09:45:09 +0000
asID:                     6233
IP address blocks:        45.62.96.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a6:92:5b:94:d9:34:e7:64:b0:ba:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a521f5ee-89d2-4088-abb9-f69291655e39
        Validity
            Not Before: Apr 24 09:45:09 2024 GMT
            Not After : Jul 23 09:45:09 2024 GMT
        Subject: CN=e1c1d489-c878-47a0-bd09-277523cb1fb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:39:5b:30:dc:39:50:de:a5:6c:a9:b0:9c:46:
                    b8:25:c8:8d:fb:3e:1f:01:3d:3e:b5:1d:08:fa:3d:
                    d1:08:1f:1e:38:bb:d6:68:81:21:4b:79:fc:20:3c:
                    5b:e1:cc:09:05:78:30:17:0a:5e:cc:4e:98:04:49:
                    bb:ea:f3:a5:1c:3a:d9:7e:83:97:4d:35:d4:25:48:
                    88:8a:b7:98:e7:4e:14:5a:89:75:32:0a:13:30:18:
                    75:dd:58:36:4e:41:67:d9:93:30:95:4c:fa:7c:16:
                    54:5a:37:0a:f9:57:02:03:ea:a4:ff:c9:53:9c:62:
                    df:d5:8b:c3:e8:ad:4c:32:f7:f5:39:64:66:e9:d5:
                    56:b3:06:94:57:b1:e1:e8:7a:da:1e:9f:9a:0f:3b:
                    c0:55:e3:65:c3:0a:05:4e:49:50:ab:f6:54:37:33:
                    c4:35:09:75:6a:19:9e:a4:15:80:52:aa:fb:15:a1:
                    2d:73:a4:3f:6b:6b:84:d8:6c:b1:2f:09:9f:ac:f9:
                    66:a9:13:ce:eb:a6:60:a9:a0:b4:be:7f:6e:c2:d1:
                    7a:af:6a:11:c8:09:3e:f6:d2:25:60:be:5d:f8:77:
                    e4:59:1d:88:c9:05:0c:a6:b6:c8:d1:8d:76:4f:a4:
                    e6:84:fe:92:74:68:f0:42:c5:95:cc:7f:e0:4e:98:
                    a6:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:C9:E4:88:11:64:15:1B:6A:02:30:8B:AD:B9:3B:2A:87:E9:E6:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/836c6d6c-b014-3b85-bedd-f5a836704db0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.crl

            X509v3 Authority Key Identifier:
                keyid:14:EE:0D:BC:78:58:6F:49:6A:4F:7C:2E:30:4A:4E:11:A9:FE:9B:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.62.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:9c:88:85:e4:78:ec:36:86:e5:34:bd:f5:5f:57:d9:f3:4b:
         98:da:d3:1d:30:0f:6f:85:dc:34:27:eb:d5:d5:20:a7:41:3c:
         83:6e:24:ea:08:32:32:cc:31:ae:87:08:4e:eb:3e:8d:30:29:
         41:3d:4b:28:9d:ba:4f:6d:14:f4:75:02:43:43:67:7c:6b:98:
         d5:7e:b4:28:60:a4:19:bf:35:f6:48:04:8d:0f:1d:2d:47:b3:
         33:65:54:45:55:86:9b:ac:79:16:4d:04:6a:a9:72:88:56:96:
         52:17:71:8b:86:a9:c3:66:5b:85:4a:3e:b8:c9:0d:52:39:fa:
         84:0b:04:e1:37:6f:f4:91:54:a0:65:1a:29:b8:22:f1:fb:f5:
         5d:98:45:37:34:12:48:36:6f:7e:b1:c6:e4:18:83:5c:a8:25:
         9e:c3:e6:b4:51:98:9b:0b:e2:82:33:d3:1a:31:68:71:f5:a2:
         f8:bd:96:b1:8a:6d:78:df:5a:bb:c3:35:9c:50:29:04:6d:7b:
         52:bb:4c:76:05:59:73:c8:77:28:57:9f:b1:7e:a8:fc:43:64:
         1c:b7:79:3a:26:27:ce:9d:c8:41:f7:e3:fa:82:1c:a2:77:47:
         2e:ec:14:a6:dc:9d:05:d4:04:c5:bf:69:8f:36:95:c2:d5:9f:
         92:d5:fd:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 14:13:44 2024 by rpki-client on console-ams.rpki-client.org