Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f1099499-e865-4a58-89d5-0df023af2376/65dea0e8-176a-3d48-9746-bcb73b9776c7.roa
File:                     65dea0e8-176a-3d48-9746-bcb73b9776c7.roa (raw, json)
Hash identifier:          HYQN2ORAFNEk609QvutS5QH6f9zS95UNI6zxLjhVSEo=
Subject key identifier:   22:D2:82:81:D9:1B:6F:DF:27:56:6C:AC:93:15:4D:8B:6C:DA:CD:80
Certificate issuer:       /CN=f1099499-e865-4a58-89d5-0df023af2376
Certificate serial:       010D0C9F43285847CFD4A3FB86FE4757E40F1680
Authority key identifier: C4:83:95:BC:07:81:7D:1D:AE:34:86:BC:A2:03:C2:30:72:E3:46:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f1099499-e865-4a58-89d5-0df023af2376.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f1099499-e865-4a58-89d5-0df023af2376/65dea0e8-176a-3d48-9746-bcb73b9776c7.roa
Signing time:             Fri 08 Nov 2024 14:00:39 +0000
ROA not before:           Fri 08 Nov 2024 14:00:39 +0000
ROA not after:            Thu 06 Feb 2025 14:00:39 +0000
asID:                     32030
IP address blocks:        45.45.168.0/23 maxlen: 23
                          192.40.141.0/24 maxlen: 24
                          2620:128:7000::/48 maxlen: 48
                          2620:128:7003::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f1099499-e865-4a58-89d5-0df023af2376/f1099499-e865-4a58-89d5-0df023af2376.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f1099499-e865-4a58-89d5-0df023af2376/f1099499-e865-4a58-89d5-0df023af2376.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f1099499-e865-4a58-89d5-0df023af2376.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:d4:a3:fb:86:fe:47:57:e4:0f:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1099499-e865-4a58-89d5-0df023af2376
        Validity
            Not Before: Nov  8 14:00:39 2024 GMT
            Not After : Feb  6 14:00:39 2025 GMT
        Subject: CN=978c23d8-ab55-480c-9e55-d35892eff8c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:60:32:ce:0d:6f:b0:05:c2:cf:4d:35:f3:c1:
                    2b:1a:df:cd:09:5f:f3:3f:8f:df:be:c6:f6:d3:07:
                    22:7e:e3:c3:05:d4:c0:34:c7:24:a2:eb:e6:15:5f:
                    7c:10:92:b4:1e:40:e6:92:9b:56:a2:d0:6f:73:20:
                    d3:78:3d:77:37:f2:62:96:dd:63:fe:b9:14:de:09:
                    e5:53:7b:b8:3d:11:f2:95:cc:19:e8:21:0e:45:4a:
                    1e:ef:da:56:33:f8:0c:ed:1e:50:78:b2:ac:bb:a9:
                    c6:c5:44:9d:96:55:18:17:5c:57:99:a0:9b:17:e2:
                    65:fd:09:a4:cc:ca:31:25:de:80:fe:38:f3:97:b6:
                    6a:35:5e:d1:c0:a0:c5:4f:f3:e3:7d:48:39:06:94:
                    05:dd:7e:23:df:3c:d5:89:19:3f:48:92:28:5a:74:
                    41:fd:a3:55:20:c0:6a:0b:2a:fb:58:1f:f6:9e:3c:
                    15:12:91:0d:27:17:7c:6f:fa:9b:b1:fa:ff:30:cf:
                    07:9a:33:26:2e:21:f1:9a:e9:08:cb:e1:b6:f3:a6:
                    7c:f1:60:19:45:7a:ce:59:b1:95:7b:0f:1f:2a:dd:
                    0e:1e:d4:95:8b:cb:b5:de:9c:81:16:2d:5d:a6:09:
                    6e:4d:55:d7:49:dd:ad:c0:c8:82:ab:e6:91:53:2f:
                    78:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:D2:82:81:D9:1B:6F:DF:27:56:6C:AC:93:15:4D:8B:6C:DA:CD:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f1099499-e865-4a58-89d5-0df023af2376/65dea0e8-176a-3d48-9746-bcb73b9776c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f1099499-e865-4a58-89d5-0df023af2376/f1099499-e865-4a58-89d5-0df023af2376.crl

            X509v3 Authority Key Identifier:
                keyid:C4:83:95:BC:07:81:7D:1D:AE:34:86:BC:A2:03:C2:30:72:E3:46:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f1099499-e865-4a58-89d5-0df023af2376.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.168.0/23
                  192.40.141.0/24
                IPv6:
                  2620:128:7000::/48
                  2620:128:7003::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:6c:db:16:25:5e:11:e6:28:94:40:5d:88:ab:5b:cd:96:8c:
         28:e7:1d:ca:10:de:91:4d:dd:7b:9d:3f:60:ff:06:68:35:81:
         f1:6a:da:c4:2f:b0:c5:a2:5e:27:2a:c8:0b:55:7e:75:0e:e3:
         f0:cb:f7:9e:3d:a0:9d:da:2e:dc:89:be:ea:86:3a:df:9d:f6:
         5b:f3:e8:8a:22:fd:93:f4:1b:e8:59:44:b9:f9:35:ce:de:d5:
         ab:53:8c:6c:a7:42:53:eb:8f:5a:a9:2a:97:5d:c5:77:c3:53:
         26:af:f2:66:1a:91:f2:0f:d2:66:88:37:b5:51:a8:23:07:b6:
         7f:8e:1c:77:8c:f1:db:12:fa:a5:7e:7d:86:a3:2f:58:76:71:
         55:d1:fd:40:8a:45:57:67:9f:fd:d6:cf:7d:af:82:92:e3:52:
         76:bc:62:34:09:c8:6a:e4:8a:d4:be:fd:4f:3b:7b:74:30:36:
         8c:ca:38:93:09:b8:3a:ed:78:76:b1:d5:cc:ca:ac:03:fe:03:
         58:30:f8:d8:d5:78:41:19:9b:25:48:99:8a:fa:9b:31:99:50:
         34:5d:21:8d:48:e3:d8:4a:87:ce:d3:2a:6d:3d:84:d2:18:b5:
         99:68:0d:34:95:e0:a1:e4:60:8c:4a:0c:ad:9f:fb:c1:63:09:
         33:3a:8d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:36:13 2024 by rpki-client on console-fra.rpki-client.org