Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/f710b903-fe73-3bbb-921e-813757ddcca1.roa
File:                     f710b903-fe73-3bbb-921e-813757ddcca1.roa (raw, json)
Hash identifier:          7PzRg/aIHFx+WeUBbNaojcnlr29s0079bIid7sjrbGY=
Subject key identifier:   75:13:5E:3D:A4:23:85:78:B4:C6:75:A3:AE:78:44:18:E8:9B:2B:84
Certificate issuer:       /CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff
Certificate serial:       010D0C9F43285847924BD15B72F758CB8AC00840
Authority key identifier: D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/f710b903-fe73-3bbb-921e-813757ddcca1.roa
Signing time:             Thu 17 Oct 2024 13:00:42 +0000
ROA not before:           Thu 17 Oct 2024 13:00:42 +0000
ROA not after:            Wed 15 Jan 2025 14:00:42 +0000
asID:                     399437
IP address blocks:        209.50.145.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:92:4b:d1:5b:72:f7:58:cb:8a:c0:08:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff
        Validity
            Not Before: Oct 17 13:00:42 2024 GMT
            Not After : Jan 15 14:00:42 2025 GMT
        Subject: CN=91c4e537-2fa7-4aa2-803d-a789d7c6bf5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:74:5b:ed:e4:71:d6:55:24:4d:f8:96:93:03:
                    bd:99:46:8e:b5:a6:10:f5:f4:c7:d9:0a:1a:6c:fb:
                    75:4c:7a:4b:74:be:21:b7:69:2c:a7:0c:0d:be:f8:
                    da:19:70:0e:10:5f:dc:85:27:29:fd:fd:cd:f4:b1:
                    71:e6:11:54:a0:9b:a3:a5:a3:0c:ae:6c:5e:06:4c:
                    9b:e1:6e:f3:3c:4e:b7:8c:9f:63:35:08:73:fe:75:
                    bf:81:6d:dd:41:c9:79:0b:93:2e:5d:84:5f:59:91:
                    3d:35:f3:08:78:fa:0a:7d:d7:9f:86:2c:00:b5:48:
                    62:61:b4:84:ea:76:83:36:27:b1:2e:cc:04:c7:ec:
                    99:d4:58:d0:01:12:81:68:c2:41:de:d6:1c:92:7f:
                    16:72:f4:25:d5:64:fd:6e:94:07:5c:33:f2:31:a6:
                    38:95:44:01:d9:aa:c9:89:64:16:0e:ef:2e:7e:74:
                    0b:76:3b:61:93:6c:76:ee:d6:f2:61:a8:32:2d:5c:
                    0e:dc:ad:46:43:99:c1:04:fd:a3:47:90:4e:15:e7:
                    9a:bf:1e:c7:8e:2b:1d:65:4f:02:99:49:d7:7f:53:
                    88:8e:03:4c:8f:f4:43:0c:39:97:e3:84:a5:6b:37:
                    88:63:cc:23:6d:01:4c:9c:7f:f9:27:91:ec:8b:ab:
                    7e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:13:5E:3D:A4:23:85:78:B4:C6:75:A3:AE:78:44:18:E8:9B:2B:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/f710b903-fe73-3bbb-921e-813757ddcca1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl

            X509v3 Authority Key Identifier:
                keyid:D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.50.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:25:45:51:d5:f9:55:13:ca:6f:77:ed:1a:a6:ec:a5:c2:e7:
         ba:f9:93:c6:48:fc:38:10:87:53:1e:86:88:f4:42:fe:c5:0b:
         01:ca:d7:25:df:ed:34:0f:3f:d9:68:9b:c3:7d:76:81:de:6b:
         9c:7e:7a:b7:fd:a2:33:48:b8:1c:3b:74:fc:c9:7a:61:76:e8:
         d1:6e:91:f6:1a:93:3b:f9:d9:91:80:5e:5c:56:12:be:52:b5:
         c7:cc:2e:b7:76:3c:62:8f:06:4e:be:b8:56:00:a5:41:1f:83:
         17:31:30:b8:af:c7:2a:3b:b3:81:c9:86:87:4c:30:ed:73:b4:
         75:4a:16:a6:f0:5a:c9:d3:87:95:72:75:16:f9:73:48:44:81:
         80:b7:74:7a:ac:80:c6:f7:d9:61:f7:1e:d8:70:22:47:be:a0:
         8e:df:f4:78:49:44:ab:6a:ce:67:1e:df:e1:29:88:00:52:a2:
         05:64:1a:dc:73:8d:6c:93:82:b0:f7:dd:ed:10:fb:f5:94:1b:
         07:e4:3a:c6:5b:d3:9b:8d:51:13:c1:e8:ab:93:5f:d1:23:9b:
         7e:22:58:61:70:1d:67:7f:68:5a:95:c8:43:b1:66:97:32:d5:
         42:23:85:58:ac:83:18:bf:36:91:5d:d8:69:0a:79:57:42:be:
         fe:89:cb:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:50 2024 by rpki-client on console-ams.rpki-client.org