Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/1fd29acb-8c96-325a-a813-ab420bc7ed7e.roa
File:                     1fd29acb-8c96-325a-a813-ab420bc7ed7e.roa (raw, json)
Hash identifier:          +lqo0WPPFv017Ln8bPlhdR9XqBDQp7CZTX8BdQdCS2c=
Subject key identifier:   BB:B3:76:A1:B8:03:B7:5A:7F:50:9C:21:48:58:38:05:F1:3E:FC:F2
Certificate issuer:       /CN=a90f006a-b108-4757-9dfd-b36376534658
Certificate serial:       010D0C9F432858452C1D40BC95CAB1A386A81F00
Authority key identifier: 56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/1fd29acb-8c96-325a-a813-ab420bc7ed7e.roa
Signing time:             Mon 11 Mar 2024 13:00:31 +0000
ROA not before:           Mon 11 Mar 2024 13:00:31 +0000
ROA not after:            Sun 09 Jun 2024 13:00:31 +0000
asID:                     398465
IP address blocks:        45.43.7.0/24 maxlen: 24
                          45.43.8.0/24 maxlen: 24
                          66.11.125.0/24 maxlen: 24
                          104.192.103.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2c:1d:40:bc:95:ca:b1:a3:86:a8:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a90f006a-b108-4757-9dfd-b36376534658
        Validity
            Not Before: Mar 11 13:00:31 2024 GMT
            Not After : Jun  9 13:00:31 2024 GMT
        Subject: CN=e9a96494-efba-44fa-a1a2-2fb37436a09f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:6b:f3:8d:9a:dd:69:42:b0:50:c5:96:48:c3:
                    02:b4:79:2f:10:59:23:98:85:54:a6:44:1c:44:65:
                    03:cf:c8:2b:f3:47:34:60:03:1d:07:78:fd:0b:9c:
                    53:61:81:fe:ec:b0:31:7f:bf:b5:5d:2e:b7:bd:02:
                    12:98:75:94:d5:19:19:f3:63:1c:7e:8d:fe:a2:98:
                    15:c4:8c:cf:ec:e9:4c:a7:64:06:ce:ec:2a:66:bb:
                    ff:d6:0b:2d:eb:3c:47:24:bc:45:a0:8f:9e:25:62:
                    bc:df:84:07:ca:48:96:db:2f:f4:7b:77:52:9e:56:
                    81:b6:6d:69:08:53:8d:d9:b3:16:d6:ef:af:5f:47:
                    e1:54:33:d4:a9:ff:d4:04:b1:34:de:0a:fd:4c:84:
                    54:29:df:ce:40:c2:ca:be:0a:57:27:7b:ad:58:81:
                    1d:2a:a3:b2:ea:eb:60:91:0c:55:a9:2f:07:1a:bc:
                    65:ce:00:30:8a:15:3e:85:ea:f7:ae:04:be:15:c7:
                    1f:83:8e:4b:70:06:93:61:9e:04:64:86:a5:a4:d0:
                    db:66:87:ab:2f:0f:3d:2a:90:2c:59:f4:21:0a:b2:
                    a2:e9:5f:11:a5:10:58:c1:31:be:c4:17:0a:e8:7f:
                    10:60:5a:ae:5b:f5:3f:40:28:7d:ac:0e:bd:0d:37:
                    a5:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:B3:76:A1:B8:03:B7:5A:7F:50:9C:21:48:58:38:05:F1:3E:FC:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/1fd29acb-8c96-325a-a813-ab420bc7ed7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl

            X509v3 Authority Key Identifier:
                keyid:56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.43.7.0-45.43.8.255
                  66.11.125.0/24
                  104.192.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:55:11:ea:9f:61:ee:9a:cc:4b:06:05:45:b9:74:82:bf:5f:
         dc:e2:23:36:3c:a8:8f:0d:de:b3:a2:f3:1a:e1:91:f2:69:fc:
         e6:9a:06:3c:74:68:19:e9:27:28:53:4d:b4:5e:d4:7f:3c:8f:
         bc:e7:47:61:5d:29:8b:e3:03:41:83:b7:86:f9:eb:a3:03:fe:
         ea:26:49:a8:75:21:ae:7c:c9:cc:a2:77:7a:5b:29:30:54:67:
         06:ac:f2:d2:04:cc:67:fb:f0:77:3d:78:4e:11:68:37:af:0c:
         ff:a3:e1:e7:93:f6:cd:1c:bc:b8:08:4c:1c:6a:e7:fa:18:7f:
         d7:1b:41:72:d0:5c:3d:5f:03:fd:72:2d:9f:f2:66:df:44:e1:
         f6:59:f5:e7:e8:a1:27:22:c8:ba:2c:0d:b9:18:4a:48:dd:21:
         e9:cd:a6:d1:e5:f7:f9:a2:6b:72:14:65:fc:22:64:ed:d2:aa:
         97:20:6a:e5:7f:1f:98:1c:e5:5c:72:77:38:c5:30:23:37:83:
         18:07:89:17:af:95:94:96:91:25:d3:54:0b:f8:a7:5e:f2:5f:
         98:b2:3a:82:44:2b:28:24:60:56:0d:23:28:3a:2c:d8:f1:d1:
         b8:15:a5:bb:96:b3:31:3d:4d:c9:00:1c:bd:c7:a8:51:fa:6a:
         5f:4f:b9:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:26:33 2024 by rpki-client on console-ams.rpki-client.org