Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/506bcebe-036e-4f01-b460-22929ff0f236/45be40ea-3482-30b7-938c-3ca0c351a045.roa
File:                     45be40ea-3482-30b7-938c-3ca0c351a045.roa (raw, json)
Hash identifier:          M1ZnTbKJhzuZNvCFWj9CLgPCAGZC5uDhDrYHrkqjdMw=
Subject key identifier:   C1:03:CF:CE:5C:A1:3E:98:41:99:F6:5B:27:6D:11:5E:B5:B5:99:6F
Certificate issuer:       /CN=506bcebe-036e-4f01-b460-22929ff0f236
Certificate serial:       010D0C9F432858455762CB99B8ADE24B8FBE1000
Authority key identifier: C1:41:63:71:E7:1D:3D:F7:BA:EF:8E:01:94:2B:C3:ED:04:71:FD:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/506bcebe-036e-4f01-b460-22929ff0f236.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/506bcebe-036e-4f01-b460-22929ff0f236/45be40ea-3482-30b7-938c-3ca0c351a045.roa
Signing time:             Wed 27 Mar 2024 01:00:26 +0000
ROA not before:           Wed 27 Mar 2024 01:00:26 +0000
ROA not after:            Tue 25 Jun 2024 01:00:26 +0000
asID:                     398643
IP address blocks:        205.149.64.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/506bcebe-036e-4f01-b460-22929ff0f236/506bcebe-036e-4f01-b460-22929ff0f236.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/506bcebe-036e-4f01-b460-22929ff0f236/506bcebe-036e-4f01-b460-22929ff0f236.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/506bcebe-036e-4f01-b460-22929ff0f236.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Jun 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:57:62:cb:99:b8:ad:e2:4b:8f:be:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=506bcebe-036e-4f01-b460-22929ff0f236
        Validity
            Not Before: Mar 27 01:00:26 2024 GMT
            Not After : Jun 25 01:00:26 2024 GMT
        Subject: CN=ec09defb-51da-4c8d-a610-6099c5d37789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ee:c3:e9:10:5e:cb:8a:16:34:a3:b9:2a:f5:
                    04:d1:36:89:20:ee:42:02:68:12:db:a8:6e:7d:2d:
                    47:60:d0:8d:00:d3:f6:14:80:52:6d:76:1a:65:0e:
                    19:93:ee:d1:ba:66:58:18:04:e8:d1:f1:2e:51:08:
                    0b:5a:2d:97:30:6b:c7:3c:d1:02:1a:fa:25:0a:e1:
                    0c:3e:f9:26:a2:31:cc:ff:9c:95:79:f5:28:b9:a5:
                    0e:82:1a:dc:e2:c0:ef:92:22:bd:e2:b0:c6:12:e7:
                    ba:20:2a:bf:3e:9e:ca:bb:d6:50:44:fc:c7:4b:17:
                    50:d4:f3:fa:d1:f8:4c:13:5f:14:b6:0d:b4:a7:c0:
                    8e:3a:28:42:f0:6c:5f:6a:2a:2d:59:70:88:a6:ea:
                    24:7d:45:8d:e6:8a:48:d1:ca:b8:be:45:96:8d:a5:
                    79:00:b7:38:7b:5e:c6:e4:bb:d5:8d:1d:ec:41:a8:
                    78:35:21:9f:03:38:15:47:15:86:6a:9f:ce:c7:8c:
                    ab:48:0a:55:87:46:a4:48:36:73:d0:e4:a1:a2:39:
                    33:44:33:2c:51:48:64:c4:10:e3:a7:2a:42:d5:16:
                    7e:f1:2c:b3:82:9e:2c:32:e4:22:d1:a8:48:7e:f0:
                    31:4e:0a:47:bc:59:8d:38:76:9c:0b:35:fe:d1:16:
                    f2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:03:CF:CE:5C:A1:3E:98:41:99:F6:5B:27:6D:11:5E:B5:B5:99:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/506bcebe-036e-4f01-b460-22929ff0f236/45be40ea-3482-30b7-938c-3ca0c351a045.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/506bcebe-036e-4f01-b460-22929ff0f236/506bcebe-036e-4f01-b460-22929ff0f236.crl

            X509v3 Authority Key Identifier:
                keyid:C1:41:63:71:E7:1D:3D:F7:BA:EF:8E:01:94:2B:C3:ED:04:71:FD:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/506bcebe-036e-4f01-b460-22929ff0f236.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.149.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:2d:78:c6:65:dd:02:aa:c3:8f:2d:2b:d7:54:fb:9c:71:15:
         57:c7:c2:d2:34:f9:42:fc:27:18:40:e0:34:33:29:92:8f:e5:
         b0:52:21:c5:60:21:78:4d:a6:2d:49:b0:57:36:1e:1c:ca:01:
         09:1d:08:8d:4a:b3:5d:33:97:8b:34:89:aa:2f:70:df:88:f7:
         59:23:04:5b:b4:26:9a:dd:1b:43:36:b2:dd:70:9e:19:fe:67:
         f9:74:9b:35:37:6b:24:86:08:07:9a:56:fc:15:8c:80:94:66:
         69:1f:bc:4e:19:fc:47:14:91:f5:a2:3c:d3:71:8a:b6:1b:59:
         a6:50:5f:6f:35:4a:ef:9b:a6:7f:ae:b3:28:aa:dc:d7:c9:0f:
         0f:a0:da:d0:7f:3b:bf:c1:ea:be:b5:af:59:5e:00:38:79:a9:
         b3:1a:b6:86:11:ca:0f:25:a0:e7:25:42:2e:4c:af:36:6a:1e:
         df:67:f3:a3:de:03:d7:4e:0f:98:74:69:ca:59:b5:0c:fa:38:
         15:af:9a:d2:c3:19:18:ff:de:e8:f6:0d:ec:93:da:d5:33:00:
         5a:aa:74:9a:2e:8a:85:df:10:f4:92:47:cf:2d:a1:6c:e9:90:
         2d:7b:c7:01:dd:64:36:88:d9:ee:b4:a3:e3:cf:5c:08:d9:60:
         32:6e:1c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 4 00:16:41 2024 by rpki-client on console-ams.rpki-client.org