Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/bed61a49-e0db-3864-a697-d8e1e0b1dcc5.roa
File:                     bed61a49-e0db-3864-a697-d8e1e0b1dcc5.roa (raw, json)
Hash identifier:          Qn/rWjNAUNVLWTqf9D8xLvtJwqEjvM9gB8kC8hzyfwo=
Subject key identifier:   FE:6F:2D:F3:7F:30:3E:B3:89:2A:78:36:0A:C4:DE:77:1B:3E:A5:36
Certificate issuer:       /CN=a90f006a-b108-4757-9dfd-b36376534658
Certificate serial:       010D0C9F43285844F2FFF581D06C3E08120B6100
Authority key identifier: 56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/bed61a49-e0db-3864-a697-d8e1e0b1dcc5.roa
Signing time:             Tue 20 Feb 2024 02:00:26 +0000
ROA not before:           Tue 20 Feb 2024 02:00:26 +0000
ROA not after:            Mon 20 May 2024 01:00:26 +0000
asID:                     22333
IP address blocks:        45.43.7.0/24 maxlen: 24
                          66.11.125.0/24 maxlen: 24
                          45.43.8.0/24 maxlen: 24
                          104.192.103.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f2:ff:f5:81:d0:6c:3e:08:12:0b:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a90f006a-b108-4757-9dfd-b36376534658
        Validity
            Not Before: Feb 20 02:00:26 2024 GMT
            Not After : May 20 01:00:26 2024 GMT
        Subject: CN=a4dab183-93c2-4bf7-b090-2fc3d725caae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:5a:e0:76:95:f6:06:3c:98:79:24:8b:fc:0e:
                    49:ec:ea:ad:92:5f:ec:c1:f6:1c:fe:a2:e1:a3:4b:
                    ba:9d:e5:29:ad:ae:c7:67:cb:50:23:6f:7f:0b:f7:
                    cc:1f:20:24:b8:5a:ab:06:40:b3:28:b3:1d:18:2c:
                    b8:fa:39:58:2b:ac:e1:85:ba:94:a8:84:1a:ba:3e:
                    9d:72:8f:af:53:57:bd:9d:01:23:5d:9c:56:99:41:
                    bc:b2:0b:ae:9c:84:ff:47:f0:92:50:14:88:49:8a:
                    b0:f6:bb:83:dc:4e:95:53:a7:80:8c:f7:91:40:53:
                    54:68:1b:a5:99:7d:ea:16:2e:87:7c:f7:f1:f7:95:
                    fc:93:f4:7b:8e:f7:b8:21:e4:bb:29:bf:a6:b0:75:
                    46:12:fb:22:98:1f:60:b3:c7:6c:bb:92:6a:35:65:
                    b5:a5:c1:f5:14:f1:70:7e:ca:13:c9:fd:f6:6c:79:
                    52:ca:08:db:74:a4:25:56:f7:99:04:14:56:4a:a7:
                    cf:00:4d:05:cf:67:0e:61:99:39:66:30:c9:13:0b:
                    6e:28:38:fc:e5:19:32:17:81:d0:2e:e3:93:ca:e8:
                    88:d4:e3:5a:45:e4:33:10:31:09:ec:64:5e:4e:24:
                    68:9b:79:f6:11:de:61:17:ab:ed:20:41:3a:ae:8e:
                    0a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:6F:2D:F3:7F:30:3E:B3:89:2A:78:36:0A:C4:DE:77:1B:3E:A5:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/bed61a49-e0db-3864-a697-d8e1e0b1dcc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl

            X509v3 Authority Key Identifier:
                keyid:56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.43.7.0-45.43.8.255
                  66.11.125.0/24
                  104.192.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:f9:d0:9f:94:18:d7:3d:73:e4:64:a7:50:be:65:e3:37:60:
         cb:4d:74:ea:1e:42:5a:f9:86:9b:1d:78:7e:f8:35:73:a4:83:
         e4:aa:3c:b0:2c:51:1b:cf:37:b9:5d:31:63:4a:03:29:f4:1f:
         34:e1:82:53:c4:77:e2:eb:9f:d4:9d:42:81:77:e3:42:ed:ae:
         6e:c1:86:dc:95:d2:2c:cf:b1:a6:e7:49:e9:30:13:74:bf:cd:
         de:36:5a:e4:7e:fe:a1:ea:33:94:16:db:d0:de:d7:36:64:d7:
         e5:e6:8b:ba:8c:81:8e:e9:73:04:df:2b:f3:6b:34:62:70:a1:
         d8:dc:c6:67:ef:35:03:a6:57:00:ef:c2:97:68:33:02:5f:a1:
         43:c2:8e:18:26:44:4f:93:50:d0:aa:5c:e7:47:fb:2a:60:32:
         77:8c:82:a6:51:2d:83:84:68:02:ac:4b:ef:77:a7:65:c0:2f:
         9d:e3:99:d7:69:44:d1:1b:4d:90:58:85:5a:07:e9:c3:59:f4:
         40:f3:9c:74:ba:cd:7c:af:aa:b4:04:77:8c:cb:25:54:8d:0c:
         0d:52:02:48:5c:1e:84:a5:7c:39:53:4d:b4:af:e5:14:95:5c:
         4e:e2:ad:07:e4:00:fb:e4:3a:e5:e8:07:c9:30:6e:0a:9e:cd:
         c6:3e:04:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:24:41 2024 by rpki-client on console-ams.rpki-client.org