Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/836c6d6c-b014-3b85-bedd-f5a836704db0.roa
File:                     836c6d6c-b014-3b85-bedd-f5a836704db0.roa (raw, json)
Hash identifier:          vDnRp2qo05kuivEQ2CP2vVHJ/4A5VOm3zYnnV8N10V0=
Subject key identifier:   0D:05:7A:75:FD:22:18:FC:7E:EF:AC:5A:F6:92:5B:87:58:AB:83:DF
Certificate issuer:       /CN=a521f5ee-89d2-4088-abb9-f69291655e39
Certificate serial:       010D0C9F4328584765A0F3650C3E7BEBBEC62800
Authority key identifier: 14:EE:0D:BC:78:58:6F:49:6A:4F:7C:2E:30:4A:4E:11:A9:FE:9B:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/836c6d6c-b014-3b85-bedd-f5a836704db0.roa
Signing time:             Tue 01 Oct 2024 13:00:42 +0000
ROA not before:           Tue 01 Oct 2024 13:00:42 +0000
ROA not after:            Mon 30 Dec 2024 14:00:42 +0000
asID:                     6233
IP address blocks:        45.62.96.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:65:a0:f3:65:0c:3e:7b:eb:be:c6:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a521f5ee-89d2-4088-abb9-f69291655e39
        Validity
            Not Before: Oct  1 13:00:42 2024 GMT
            Not After : Dec 30 14:00:42 2024 GMT
        Subject: CN=84ac07b8-5ddf-43b3-bbbf-56e59bb14c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:89:86:0d:f9:99:fb:8c:c7:33:e2:13:4b:d2:
                    2c:5c:5b:57:7f:c1:e4:f9:95:34:34:39:7c:62:24:
                    74:a5:38:26:cf:9a:b3:6d:85:77:25:44:e6:ac:68:
                    84:9d:be:3f:09:46:7c:4f:ca:46:6e:b4:2e:2e:d1:
                    52:e0:9c:12:0b:f5:6e:97:dc:72:9f:08:00:d8:04:
                    c0:c3:06:93:d1:2d:77:21:c9:95:c5:54:72:c6:6c:
                    6c:13:e4:57:42:22:52:bb:90:ed:8e:71:9c:69:b5:
                    d0:67:db:97:2d:96:1a:6e:7e:b1:29:f4:b4:95:c6:
                    95:9a:96:0a:e7:12:a4:52:b3:a9:33:2a:53:95:5e:
                    5e:23:47:f3:1a:7e:4d:56:ee:ca:3b:fb:59:30:5c:
                    58:f9:c3:2c:7a:1f:64:94:50:fc:95:a9:6a:2a:8b:
                    32:5f:74:36:75:67:05:8f:13:a6:a1:da:07:72:de:
                    10:0d:03:62:25:20:55:27:55:c4:33:02:e3:80:38:
                    05:5b:04:34:19:ab:11:9c:c4:1a:cd:17:78:20:01:
                    1d:76:34:78:1c:2c:88:bd:e4:71:b7:92:15:65:a6:
                    b5:c6:3b:fa:0f:30:0b:d7:fa:17:61:e2:63:4a:a4:
                    8c:d5:23:37:57:e7:02:ea:ef:34:2f:3d:18:4c:a1:
                    83:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:05:7A:75:FD:22:18:FC:7E:EF:AC:5A:F6:92:5B:87:58:AB:83:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/836c6d6c-b014-3b85-bedd-f5a836704db0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.crl

            X509v3 Authority Key Identifier:
                keyid:14:EE:0D:BC:78:58:6F:49:6A:4F:7C:2E:30:4A:4E:11:A9:FE:9B:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.62.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:24:2d:51:8c:91:7e:9b:0f:a0:2f:2b:e5:f1:52:84:e3:f5:
         8b:8d:7c:52:7d:12:a9:6d:3b:ad:e7:0f:94:87:bd:6a:67:ee:
         98:e7:d3:0b:8d:54:a1:30:bb:25:4a:bf:75:18:26:ae:24:00:
         48:b8:20:b6:5d:47:3d:18:24:f0:f9:83:02:12:9e:c3:8f:e7:
         20:be:41:9a:67:f8:41:e4:44:24:90:33:cd:13:8d:ec:56:97:
         3c:b5:5f:37:55:0c:b3:04:7c:46:e9:44:66:cb:63:ce:63:30:
         2c:79:51:56:ce:5e:54:95:1c:ac:f9:5f:ca:73:af:71:20:45:
         0b:6d:32:e8:ac:58:d8:4e:c4:1d:c7:c7:88:92:fe:e4:6d:4f:
         e5:2b:ee:ca:d6:e6:95:db:ed:13:64:43:bc:8e:15:3e:a8:15:
         82:bc:dd:5a:c7:c5:b7:d8:e7:b1:9c:57:dd:55:fb:0a:d2:ca:
         be:5d:15:32:48:fc:8d:42:a9:5c:fd:bb:01:d7:97:b5:bb:68:
         6d:d6:f0:1b:40:45:ae:e9:2d:bd:48:53:c6:ba:74:cf:f3:06:
         ab:35:02:5c:18:61:4a:dd:92:cd:60:0c:64:91:1b:34:e0:2c:
         08:2d:47:60:a9:ba:10:9b:17:d7:19:3c:9c:c6:bf:f5:3f:3c:
         84:6c:22:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:50 2024 by rpki-client on console-fra.rpki-client.org