Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/44c53b71-783e-3d89-b96a-8cd2d6619738.roa
File:                     44c53b71-783e-3d89-b96a-8cd2d6619738.roa (raw, json)
Hash identifier:          vWi1F+w45EP0B0ORu7+7OyfaMfa09704BJIyGy3aedY=
Subject key identifier:   F8:0C:25:E6:0B:21:AB:05:40:99:2B:8C:C6:CF:1D:AB:75:9A:87:69
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F432858477230EDE938701052A605AD20
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/44c53b71-783e-3d89-b96a-8cd2d6619738.roa
Signing time:             Sun 06 Oct 2024 01:00:31 +0000
ROA not before:           Sun 06 Oct 2024 01:00:31 +0000
ROA not after:            Sat 04 Jan 2025 02:00:31 +0000
asID:                     46261
IP address blocks:        45.33.144.0/23 maxlen: 23
                          45.33.146.0/24 maxlen: 24
                          45.33.147.0/24 maxlen: 24
                          45.33.148.0/24 maxlen: 24
                          45.33.149.0/24 maxlen: 24
                          45.33.151.0/24 maxlen: 24
                          45.33.153.0/24 maxlen: 24
                          45.33.155.0/24 maxlen: 24
                          45.33.156.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:72:30:ed:e9:38:70:10:52:a6:05:ad:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Oct  6 01:00:31 2024 GMT
            Not After : Jan  4 02:00:31 2025 GMT
        Subject: CN=714fa13f-1c81-4fce-a6e5-6bfb6436c9a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:0e:8b:b5:68:aa:82:76:6b:47:10:3f:f0:6f:
                    b7:a7:32:9f:25:56:ed:f9:b6:f1:7b:f0:ef:24:20:
                    fe:0b:86:00:63:8e:5b:b3:4b:40:10:c6:23:43:0c:
                    60:95:96:9d:58:b6:6e:01:19:af:d1:72:7e:15:53:
                    64:a2:ce:cc:99:6d:a5:10:22:9b:e7:ec:2a:31:a8:
                    23:59:69:3f:26:e0:99:53:67:1d:e4:2d:c8:3e:31:
                    f8:4f:a9:dd:94:ef:75:c2:77:28:b2:ce:7f:81:bb:
                    44:1a:5a:b6:8f:35:f8:32:fc:44:e6:2a:00:ae:0e:
                    b0:a9:b6:96:c5:e9:11:d7:d1:f9:64:55:d0:fb:af:
                    32:e4:66:cc:85:41:d7:90:38:8b:98:96:7b:3d:18:
                    a7:e0:6c:45:67:c4:b2:45:26:46:58:b4:09:5e:39:
                    e9:18:b7:15:93:2a:ec:d0:bb:32:9c:86:3a:4a:ce:
                    7c:80:2f:5f:af:b5:32:35:4a:b6:cc:db:13:08:07:
                    93:fe:eb:8a:6a:c0:a9:79:9f:b9:73:a4:03:51:e7:
                    f2:de:fc:20:71:be:85:1b:23:96:bf:57:7f:a3:14:
                    2a:aa:ee:eb:9d:78:e7:76:40:12:84:90:87:0d:12:
                    85:8a:04:28:98:dc:1a:f9:01:86:2f:ad:62:92:6c:
                    32:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:0C:25:E6:0B:21:AB:05:40:99:2B:8C:C6:CF:1D:AB:75:9A:87:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/44c53b71-783e-3d89-b96a-8cd2d6619738.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.33.144.0-45.33.149.255
                  45.33.151.0/24
                  45.33.153.0/24
                  45.33.155.0-45.33.157.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:cb:79:5d:bc:3e:9b:fa:1a:d3:66:25:96:28:2b:43:e8:30:
         d4:88:8e:d2:70:fa:7b:6f:1e:f8:83:24:c8:dc:77:12:ef:04:
         23:9d:c9:8b:a9:60:79:81:73:75:fa:6d:f8:75:5a:7d:da:01:
         71:15:b1:e1:58:16:30:ce:e3:23:78:f3:b2:66:0d:2b:d7:d3:
         32:c8:a5:8f:08:7e:89:0c:80:72:e8:97:68:da:62:fa:bc:af:
         91:53:99:93:93:e4:c9:28:68:dd:9c:a9:04:d3:97:d5:c2:19:
         e6:57:ab:9d:05:d6:02:5b:b4:dd:51:8c:90:b5:58:01:9f:42:
         a1:a0:45:60:a3:75:6e:90:4a:00:3e:e0:20:fe:bb:4e:75:f4:
         2d:95:b2:49:84:64:d7:7f:ef:03:16:fd:8f:40:ab:04:1c:c9:
         67:f6:51:2c:ff:21:2e:38:ad:09:fa:d5:6d:5b:02:9c:af:21:
         fd:33:ea:e2:1e:69:e3:be:51:70:0f:76:b2:ac:36:a6:16:27:
         fc:cd:04:5d:54:bc:bb:7a:e7:f9:54:23:33:d5:65:8a:42:d3:
         29:ba:58:ae:eb:ea:a1:5f:64:a0:6a:36:19:77:27:5c:b4:74:
         aa:67:f5:42:52:d9:6a:bd:72:35:d6:ef:1d:53:eb:9b:c5:3a:
         78:6e:57:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:48:44 2024 by rpki-client on console-ams.rpki-client.org