Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/306e1a11-a42b-3dea-8e1f-698ff652a2cd.roa
File:                     306e1a11-a42b-3dea-8e1f-698ff652a2cd.roa (raw, json)
Hash identifier:          ODujqMhaZGUMSe1MpU9AlxK+bCpehuzvH9R6+4kcXyU=
Subject key identifier:   F6:58:EF:55:64:C9:5F:F2:57:2D:02:58:BB:C2:8B:AA:B7:0B:06:48
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F43285845ADEE164C23132273CA0A2F00
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/306e1a11-a42b-3dea-8e1f-698ff652a2cd.roa
Signing time:             Sat 27 Apr 2024 01:00:26 +0000
ROA not before:           Sat 27 Apr 2024 01:00:26 +0000
ROA not after:            Fri 26 Jul 2024 01:00:26 +0000
asID:                     19905
IP address blocks:        45.4.172.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ad:ee:16:4c:23:13:22:73:ca:0a:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Apr 27 01:00:26 2024 GMT
            Not After : Jul 26 01:00:26 2024 GMT
        Subject: CN=0bf6f6b1-b384-4347-87ad-aca07cb1350d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:95:b6:64:ea:eb:92:3e:44:be:72:2e:e4:13:
                    70:06:19:eb:15:ba:01:cc:cc:a6:13:0e:31:9d:7d:
                    d8:2f:c9:7d:d8:ed:66:d9:3d:72:0f:02:43:1c:f9:
                    07:3c:7a:0e:5f:d5:64:9c:94:6a:99:60:0d:af:97:
                    62:97:54:8c:d9:a1:88:fe:2f:c6:ab:c8:21:fb:e3:
                    d2:99:f5:9e:e1:23:54:eb:83:b3:8c:94:f4:e6:27:
                    b0:77:b2:c9:98:52:cc:a2:1b:e2:30:a6:d6:36:fc:
                    fd:52:3e:69:ce:a4:10:55:22:6a:63:e2:1b:28:55:
                    23:f7:3d:4c:1d:9b:e6:be:c3:61:d6:3c:f0:11:ca:
                    82:59:aa:11:5d:f8:60:73:40:d2:c4:92:71:77:d1:
                    b1:67:4c:2e:13:1e:c6:c5:da:e8:1c:43:ac:d7:10:
                    1a:f4:4f:6a:38:ea:1e:43:87:41:30:6d:04:0e:85:
                    45:d1:c0:ae:82:d9:42:49:90:a4:4d:29:3c:16:24:
                    df:7c:5d:ff:59:c5:3f:0e:8c:eb:2b:7b:45:62:9d:
                    63:8d:e4:c9:5c:65:c6:2b:8b:6e:c6:29:a0:55:6b:
                    5c:20:84:b0:c5:e7:8e:6b:95:04:62:ad:4e:26:cd:
                    57:d6:68:7c:b0:27:a8:4c:28:14:b5:75:16:2f:8f:
                    bd:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:58:EF:55:64:C9:5F:F2:57:2D:02:58:BB:C2:8B:AA:B7:0B:06:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/306e1a11-a42b-3dea-8e1f-698ff652a2cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:fb:87:23:a2:d9:29:e7:75:db:d0:47:b8:6b:bc:18:f1:80:
         7a:9e:dc:15:c3:ab:36:99:1c:7d:49:af:ec:c6:5a:45:45:02:
         cf:ed:27:b0:18:33:e2:d3:bb:64:6f:4b:7f:a6:45:37:3b:96:
         86:33:95:2c:db:d5:0f:9d:95:6a:76:86:14:fe:75:9f:a7:96:
         19:c2:a8:28:71:f8:c6:03:c5:a3:be:e9:fe:8a:12:d9:c6:55:
         50:2a:ec:03:51:d4:f2:7a:ff:fc:06:f7:94:2f:8a:2e:83:bd:
         31:ec:2b:b3:dc:c5:99:61:8a:3f:1d:2f:c0:aa:54:1e:20:2d:
         33:ed:90:0d:3c:40:40:33:9e:79:95:f3:19:de:b4:79:49:7d:
         7e:78:43:74:84:33:3f:d8:df:8b:68:d6:ea:9b:54:d4:07:82:
         0b:b7:76:ec:69:09:01:a8:d5:ed:a9:d7:22:e9:1d:c1:b1:3d:
         dd:23:f0:53:3d:f5:2f:49:ee:7c:f5:9d:58:a0:81:00:99:81:
         7a:8c:d7:df:b4:68:e7:c3:1e:be:9c:be:db:6c:b9:4f:0c:67:
         fa:71:b5:06:c8:b2:ed:94:66:96:23:ad:42:ae:21:dd:f1:6c:
         10:52:49:72:f7:cb:e7:eb:bc:38:cb:8c:0a:d5:ee:cc:c1:06:
         e8:21:54:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 21:11:03 2024 by rpki-client on console-fra.rpki-client.org