Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/dd10681c-9d05-3b70-aafb-f5510f585252.roa
File:                     dd10681c-9d05-3b70-aafb-f5510f585252.roa (raw, json)
Hash identifier:          7irW0f2Wg9umW68uSPvBQOQPsncNfbqBHd8hzpTM+Is=
Subject key identifier:   9D:09:36:93:BA:51:12:37:0F:61:D6:D2:A2:6F:6F:35:58:EE:18:51
Certificate issuer:       /CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Certificate serial:       010D0C9F43285848394C8F428FEF1C71FCBF2C80
Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/dd10681c-9d05-3b70-aafb-f5510f585252.roa
Signing time:             Mon 16 Dec 2024 08:42:13 +0000
ROA not before:           Mon 16 Dec 2024 08:42:13 +0000
ROA not after:            Sun 16 Mar 2025 07:42:13 +0000
asID:                     54535
IP address blocks:        146.197.44.0/23 maxlen: 23
                          146.197.50.0/23 maxlen: 23
                          146.197.52.0/23 maxlen: 23
                          146.197.176.0/22 maxlen: 22
                          146.197.184.0/23 maxlen: 23
                          146.197.188.0/23 maxlen: 23
                          146.197.198.0/24 maxlen: 24
                          146.197.199.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Dec 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:39:4c:8f:42:8f:ef:1c:71:fc:bf:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9
        Validity
            Not Before: Dec 16 08:42:13 2024 GMT
            Not After : Mar 16 07:42:13 2025 GMT
        Subject: CN=d6cff1f8-e7ae-46fa-9a3c-441775da4317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:52:4e:9b:6a:cb:62:d2:d0:a1:fb:be:b0:a6:
                    6f:57:21:0c:1e:b9:7a:84:dd:17:36:f1:c9:1f:27:
                    c6:62:3a:95:76:46:8c:ea:fb:fc:ea:d2:70:6e:9e:
                    ff:b2:34:cf:55:51:47:f6:b3:ac:14:34:e7:4c:06:
                    7f:9b:79:ec:64:4c:47:82:3a:78:d7:71:8d:da:79:
                    94:19:93:9f:c4:22:06:0b:0f:bd:26:1c:25:1d:99:
                    76:d5:ea:eb:d8:3d:e7:1e:1e:41:63:70:6f:88:fd:
                    71:24:b0:eb:2a:aa:3e:6b:6c:ee:ef:94:7f:90:df:
                    2a:7f:8c:f7:40:a3:b4:0b:94:5b:12:7f:e9:ca:23:
                    ca:e1:ad:38:b1:23:f4:83:91:ec:ce:0b:73:c5:a9:
                    61:81:82:23:9c:9b:11:eb:f6:63:f3:96:52:50:c9:
                    41:f5:04:53:51:93:95:84:87:29:5c:b7:5a:d0:eb:
                    1d:ee:87:21:80:89:01:47:fd:3b:5c:eb:6e:93:50:
                    90:7a:e0:5c:53:2c:81:63:7a:e9:49:c0:56:4d:25:
                    e3:47:54:1a:aa:5f:a5:53:e4:c4:7c:0a:21:43:84:
                    7f:31:5f:ce:01:70:d6:38:31:27:00:75:57:73:cd:
                    64:ec:e8:89:d9:10:3b:7e:aa:85:5a:cb:95:8e:00:
                    bb:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:09:36:93:BA:51:12:37:0F:61:D6:D2:A2:6F:6F:35:58:EE:18:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/dd10681c-9d05-3b70-aafb-f5510f585252.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl

            X509v3 Authority Key Identifier:
                keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.197.44.0/23
                  146.197.50.0-146.197.53.255
                  146.197.176.0/22
                  146.197.184.0/23
                  146.197.188.0/23
                  146.197.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:31:d7:3f:e5:92:3c:2f:55:ad:b3:81:10:77:64:03:f7:d5:
         d3:1d:12:d8:e2:e4:f0:65:1d:d3:db:53:45:d3:0d:3a:e9:f0:
         ed:5c:c5:ed:3b:e3:e4:f6:63:b6:41:ad:fc:51:26:e3:20:88:
         3b:1f:28:f1:ac:7d:36:6b:de:11:2e:53:76:f5:0f:67:38:f8:
         13:ef:10:a1:d5:aa:ab:81:65:52:b3:23:a0:fe:cd:3b:f9:26:
         db:40:c4:38:e9:54:7f:ce:9b:03:79:4b:2f:75:dc:3d:c7:43:
         bb:cc:fe:56:c5:0b:63:cf:13:0d:9a:d4:e1:21:93:6d:44:8f:
         a6:76:64:37:ac:af:92:d0:82:df:b6:ab:f3:dc:46:c7:d2:56:
         5d:b8:81:a9:f6:b7:d3:25:e3:91:73:9a:c3:c3:e3:06:d4:f4:
         7c:33:18:23:e1:a2:15:7b:b4:06:d7:3e:9b:58:35:5c:03:8f:
         81:c1:8d:ca:ee:b2:61:a8:df:fe:a6:2e:03:d5:cf:a4:4a:fa:
         fd:ef:85:c2:1b:82:f7:ee:2b:ac:1e:35:9e:1f:33:40:09:1b:
         b6:80:7b:66:97:58:1f:2f:a4:16:eb:c0:7c:4e:fe:b1:0b:3a:
         4b:6d:2b:0d:7e:95:4e:ad:8a:ad:27:78:ed:2d:f0:26:c2:fd:
         25:cb:10:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 28 18:45:10 2024 by rpki-client on console-ams.rpki-client.org