Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/4ac90a12-2853-3a43-862e-34906192ded5.roa
File:                     4ac90a12-2853-3a43-862e-34906192ded5.roa (raw, json)
Hash identifier:          PZ8pDlj0HNtA0dgBs/6QFVLdhaTi/7V9Nhlsy9NTVSs=
Subject key identifier:   EC:6E:FA:6A:BF:48:A6:DA:E2:E5:8A:9F:CA:F3:15:F8:11:72:BD:A9
Certificate issuer:       /CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff
Certificate serial:       010D0C9F432858459A6346D3CC2B067D2194DB00
Authority key identifier: D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/4ac90a12-2853-3a43-862e-34906192ded5.roa
Signing time:             Sat 20 Apr 2024 01:00:26 +0000
ROA not before:           Sat 20 Apr 2024 01:00:26 +0000
ROA not after:            Fri 19 Jul 2024 01:00:26 +0000
asID:                     399437
IP address blocks:        209.50.145.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9a:63:46:d3:cc:2b:06:7d:21:94:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff
        Validity
            Not Before: Apr 20 01:00:26 2024 GMT
            Not After : Jul 19 01:00:26 2024 GMT
        Subject: CN=90bbbcac-15c3-4d34-9f4d-8f3b05379999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:23:ce:05:b5:30:0c:15:c2:7d:87:47:38:96:
                    74:76:be:64:72:a5:59:be:2b:9c:f6:da:83:9d:a8:
                    70:a2:db:43:c7:91:19:28:bb:4b:fa:1f:af:9b:35:
                    a1:d9:d2:76:0d:2e:22:68:af:b4:9c:df:bf:e2:b6:
                    b3:3f:4b:b2:69:05:4e:60:b7:f1:25:1a:97:cb:e4:
                    2a:54:89:58:d5:a1:48:fc:5b:1f:f9:90:4e:86:2a:
                    42:a6:3f:25:ab:ed:a2:7f:6c:1a:c1:6d:28:1f:9a:
                    6b:e3:a3:24:2b:ac:e0:8d:ba:58:d2:65:b9:b1:8f:
                    a3:d3:51:aa:7c:4f:6c:91:53:46:85:0e:75:19:fb:
                    a2:a6:a3:77:b8:34:fd:83:9d:3e:88:0c:92:3b:14:
                    11:48:97:51:43:de:d3:83:f8:74:27:07:32:b0:da:
                    02:a7:33:09:1d:d4:1d:27:3e:97:31:49:fa:89:a8:
                    4f:f0:3f:dd:ad:1d:d7:06:ef:34:c0:6f:38:7e:ac:
                    b3:f5:45:75:fc:d7:d3:f9:2f:12:06:69:eb:e8:b9:
                    7d:7a:b0:16:1a:34:d6:f1:bb:02:86:af:c9:14:d3:
                    5d:2b:ef:a8:fe:9e:58:64:a2:26:57:a8:49:cf:07:
                    c6:2a:bc:db:fe:79:2d:62:af:18:01:7b:52:05:db:
                    44:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:6E:FA:6A:BF:48:A6:DA:E2:E5:8A:9F:CA:F3:15:F8:11:72:BD:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/4ac90a12-2853-3a43-862e-34906192ded5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl

            X509v3 Authority Key Identifier:
                keyid:D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.50.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:ce:ed:79:36:24:d7:b8:48:c0:46:1d:d5:49:3e:60:f0:a7:
         74:bf:96:40:24:d1:62:6a:50:d4:02:07:29:c4:f1:7e:6a:ec:
         e6:b8:f0:f3:f5:66:38:e8:9c:e2:a5:ca:61:ed:c6:6d:f3:ba:
         41:eb:b8:ad:18:8d:11:64:72:8d:55:3c:3c:62:27:ed:97:82:
         28:0e:66:a9:31:1f:81:cf:29:c0:e9:6a:0b:23:3e:f8:2f:1f:
         03:ff:dd:27:7c:a8:77:1a:51:2d:b7:d3:a5:fc:46:bf:b0:9a:
         94:3a:03:bc:f1:41:39:80:81:5a:0f:c4:7a:c8:67:9c:9c:82:
         3e:16:41:20:9b:d8:d5:d9:af:fd:08:c2:00:3a:c3:f4:d2:65:
         2e:51:1d:49:4a:0b:83:59:9d:f2:ba:a1:9a:a7:b6:7e:0f:a6:
         32:08:29:ff:c9:10:5d:67:f4:05:b1:f3:8c:7a:c4:08:90:35:
         cc:ea:f9:f1:68:93:91:3a:a4:98:a6:a7:57:68:9f:d1:b2:9f:
         4a:b0:ea:b9:36:e9:67:f8:cc:9e:0b:d0:33:e6:de:6f:1b:ad:
         52:5d:d3:08:18:8c:ea:e3:aa:7e:03:ff:02:1b:ed:ef:74:de:
         08:ac:ab:4d:b1:d6:9b:cd:c0:9a:5e:ee:c2:8c:0a:b6:f4:18:
         07:63:6c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 02:16:30 2024 by rpki-client on console-ams.rpki-client.org