Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/b6d7cd18-984c-3f83-987a-1b5fea3f909c.roa
File:                     b6d7cd18-984c-3f83-987a-1b5fea3f909c.roa (raw, json)
Hash identifier:          WZe7wTxdwWvsl0yLqgzqbYSDL9MWl5LK9ZS66R6EFH4=
Subject key identifier:   42:93:D8:59:8B:7E:CC:93:70:FD:43:0B:58:BA:9C:A5:EC:1F:22:13
Certificate issuer:       /CN=61939bbc-e50f-4ced-8482-e7c4008e3583
Certificate serial:       010D0C9F43285845F253DA50829AEB8F726F6D00
Authority key identifier: 3F:8D:F8:51:B6:E3:53:FA:6A:C1:CF:4A:DD:0E:91:CE:C3:DE:49:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/b6d7cd18-984c-3f83-987a-1b5fea3f909c.roa
Signing time:             Tue 21 May 2024 13:00:34 +0000
ROA not before:           Tue 21 May 2024 13:00:34 +0000
ROA not after:            Mon 19 Aug 2024 13:00:34 +0000
asID:                     397453
IP address blocks:        45.138.164.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/61939bbc-e50f-4ced-8482-e7c4008e3583.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/61939bbc-e50f-4ced-8482-e7c4008e3583.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:f2:53:da:50:82:9a:eb:8f:72:6f:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61939bbc-e50f-4ced-8482-e7c4008e3583
        Validity
            Not Before: May 21 13:00:34 2024 GMT
            Not After : Aug 19 13:00:34 2024 GMT
        Subject: CN=7d9a0ee3-4207-45c0-96df-0ba9a14d0816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:8b:48:a2:1a:12:51:86:7f:51:a8:c4:76:ae:
                    fd:93:7e:57:78:1e:62:a0:65:2e:17:04:53:8f:0e:
                    d8:3b:80:8b:e5:1b:07:f9:75:d3:76:b0:c5:52:cb:
                    5a:2f:d8:67:dc:72:fa:6e:c1:cc:19:6f:37:54:ce:
                    15:ff:31:94:ae:45:f4:d7:9c:65:88:4d:e6:d8:9a:
                    08:a8:d6:30:39:9c:7a:6c:bb:d8:af:b2:e5:73:19:
                    53:af:48:84:d0:55:55:aa:35:9d:dc:13:d1:92:c3:
                    da:96:e7:6a:b0:24:7c:11:2c:0d:3b:22:35:8b:ba:
                    35:59:42:6e:39:76:db:60:45:b2:a8:91:48:ee:46:
                    e7:d7:2d:fd:27:80:6d:2f:64:54:1d:32:1d:ba:54:
                    55:11:ea:87:65:40:06:9d:3a:a6:c1:e0:54:22:f8:
                    79:bf:f7:de:fd:ce:66:f1:10:f6:76:f2:8b:43:d5:
                    6e:b1:2b:eb:3f:2d:21:71:b1:1d:23:ae:08:a8:06:
                    57:d8:fe:54:28:3f:44:01:87:31:44:84:d2:03:b3:
                    78:08:53:9b:db:76:50:af:59:03:c0:c0:8a:c1:df:
                    7e:04:c1:b5:5a:38:af:da:26:1d:4e:61:96:41:18:
                    c5:c9:67:20:8a:47:50:8f:29:1e:c4:44:8d:ce:98:
                    83:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:93:D8:59:8B:7E:CC:93:70:FD:43:0B:58:BA:9C:A5:EC:1F:22:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/b6d7cd18-984c-3f83-987a-1b5fea3f909c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/61939bbc-e50f-4ced-8482-e7c4008e3583.crl

            X509v3 Authority Key Identifier:
                keyid:3F:8D:F8:51:B6:E3:53:FA:6A:C1:CF:4A:DD:0E:91:CE:C3:DE:49:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.138.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:4f:e8:25:cd:8e:19:62:c1:f9:5f:56:2d:ec:2f:13:77:9d:
         23:10:32:a7:ce:f4:c6:48:8c:87:2b:6e:33:7f:55:e0:77:ad:
         d0:90:1a:b7:aa:d1:ec:eb:e5:ed:f4:fd:93:a7:36:e9:02:08:
         4f:e7:dc:4b:d9:08:21:84:2d:3d:86:72:2f:f6:a6:1b:8b:e0:
         a4:09:a3:8e:20:6c:df:b9:02:58:3f:08:06:4f:90:1b:8d:f2:
         ca:88:9e:3a:92:be:fb:4b:45:09:72:7c:fb:a2:6c:5b:37:12:
         55:cb:aa:01:60:af:b6:0d:cf:10:85:23:d0:86:20:f1:9b:66:
         25:92:66:f8:9a:fe:69:3f:90:e9:28:0b:d9:60:4d:7c:75:ae:
         53:8f:72:39:90:74:d5:84:3e:2e:88:fe:0d:b8:c4:35:9c:30:
         51:3a:88:97:4a:48:dc:78:89:4c:21:98:40:72:33:f2:79:7c:
         30:42:9b:87:8f:9e:58:14:5f:76:ce:09:fc:f9:f4:6c:d9:30:
         85:93:0e:f9:43:94:62:00:4a:3d:24:c9:fb:83:27:24:b3:ed:
         31:81:cc:d3:17:86:e5:54:c3:b9:65:ce:e5:51:ec:e1:3e:e4:
         4a:72:49:32:e3:d8:72:7d:7a:3c:dc:d2:4b:cc:27:ac:68:54:
         7d:21:c1:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 03:00:00 2024 by rpki-client on console-ams.rpki-client.org