Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5/ce47c968-0a16-3170-948d-a2cfae3eb8b3.roa
File:                     ce47c968-0a16-3170-948d-a2cfae3eb8b3.roa (raw, json)
Hash identifier:          iUoRJZsY7DYHVVotFShLJ80jBiKcB4FZV8RyVBoSDgM=
Subject key identifier:   90:5F:EE:53:90:90:C1:9C:56:9D:A9:50:E3:D3:8A:C3:D9:F5:82:EA
Certificate issuer:       /CN=497813be-498e-4129-a627-225f97d0e2b5
Certificate serial:       010D0C9F43285844C2250DAA6A7BBC70E021FF80
Authority key identifier: B8:37:7B:4E:4F:03:FE:09:AC:C1:B9:40:8B:3F:9E:F0:4C:A2:FF:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5/ce47c968-0a16-3170-948d-a2cfae3eb8b3.roa
Signing time:             Fri 02 Feb 2024 14:00:31 +0000
ROA not before:           Fri 02 Feb 2024 14:00:31 +0000
ROA not after:            Thu 02 May 2024 13:00:31 +0000
asID:                     399606
IP address blocks:        45.45.176.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5/497813be-498e-4129-a627-225f97d0e2b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5/497813be-498e-4129-a627-225f97d0e2b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 Mar 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:c2:25:0d:aa:6a:7b:bc:70:e0:21:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=497813be-498e-4129-a627-225f97d0e2b5
        Validity
            Not Before: Feb  2 14:00:31 2024 GMT
            Not After : May  2 13:00:31 2024 GMT
        Subject: CN=3097b1a1-dfdd-428a-847b-8108c0dcccec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f3:71:4b:be:d9:f9:fd:f5:fd:78:70:b9:82:
                    e8:15:f6:56:53:38:2f:be:8b:a0:85:90:e6:5c:b2:
                    6f:38:e1:bb:87:4c:7f:7d:f2:a6:42:55:88:68:6d:
                    e5:56:06:52:06:47:0a:80:f7:a7:84:b7:70:42:4d:
                    cd:b2:66:fe:84:7e:b1:fe:ff:a1:d0:34:22:52:c7:
                    65:df:bc:d7:67:87:76:3b:04:09:6a:c3:2e:4c:f3:
                    b1:2e:bd:cf:9c:96:65:84:a3:a5:61:69:42:f4:1f:
                    bf:73:5a:cd:50:e1:46:8e:7b:72:62:cb:81:48:77:
                    b3:29:de:60:c0:5a:b5:77:4e:76:97:09:5d:67:9e:
                    5f:84:c1:10:f4:18:9a:14:84:48:b5:82:d8:4a:54:
                    4c:57:e8:00:72:c0:8b:be:0e:15:81:52:a0:91:fa:
                    78:ee:2b:35:fb:d2:a6:59:14:25:63:00:31:95:cd:
                    c4:21:82:67:8c:59:08:ef:ce:ef:c0:32:fc:6b:49:
                    7b:97:f5:2e:6f:95:7e:47:31:75:23:77:fd:74:1d:
                    9e:21:41:2a:5f:97:b1:b2:9a:4c:2d:36:fd:3d:dc:
                    4d:c0:ac:76:1a:9d:b6:2c:b0:9e:06:12:be:78:e7:
                    38:67:9d:ad:1a:99:87:c6:c7:95:0c:84:c6:34:de:
                    70:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:5F:EE:53:90:90:C1:9C:56:9D:A9:50:E3:D3:8A:C3:D9:F5:82:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5/ce47c968-0a16-3170-948d-a2cfae3eb8b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5/497813be-498e-4129-a627-225f97d0e2b5.crl

            X509v3 Authority Key Identifier:
                keyid:B8:37:7B:4E:4F:03:FE:09:AC:C1:B9:40:8B:3F:9E:F0:4C:A2:FF:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:45:06:18:89:22:f5:4c:78:5e:3b:6f:8a:1d:08:49:d6:62:
         28:c3:96:a0:89:57:1c:8d:82:2a:9b:19:bb:bf:7d:0a:31:41:
         05:a5:bb:69:99:c8:fd:9d:37:20:0c:5a:59:8a:03:5a:c1:d0:
         8c:e4:af:20:fd:e2:fd:e9:57:dd:9f:2a:33:41:dd:6a:75:67:
         03:45:84:d8:f4:87:f0:ce:e4:27:5b:ad:e8:7d:a2:59:0e:e6:
         39:e8:34:ae:d7:9b:7b:f9:c1:f8:67:c3:a5:2b:45:f6:45:05:
         fa:4f:ca:79:58:1c:bc:81:b8:cb:a7:96:60:aa:4e:21:1f:4e:
         87:d7:2c:37:6c:ea:eb:90:d8:f7:86:71:a9:ed:68:c8:74:d8:
         be:bb:e9:36:57:15:de:10:be:8a:40:02:3a:eb:89:58:cc:08:
         58:af:2b:02:44:3d:4e:8e:37:14:a0:3e:de:17:48:a0:02:36:
         51:8d:61:50:55:fb:9c:94:78:b5:3e:62:25:1c:cf:b5:4d:0b:
         b6:f4:03:ef:a2:44:f4:c2:dc:11:73:9b:29:20:6c:08:7c:ca:
         a5:70:4a:6b:c5:01:f8:90:ed:51:70:9c:a6:cf:a9:66:dc:ad:
         e5:25:2c:5b:22:aa:d6:16:9a:9a:cb:c3:c9:fb:e0:6a:2b:e6:
         c9:5b:08:2d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETCJQ2qanu8cOAh/4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDk3ODEzYmUtNDk4ZS00MTI5LWE2MjctMjI1Zjk3ZDBl
MmI1MB4XDTI0MDIwMjE0MDAzMVoXDTI0MDUwMjEzMDAzMVowLzEtMCsGA1UEAxMk
MzA5N2IxYTEtZGZkZC00MjhhLTg0N2ItODEwOGMwZGNjY2VjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvNxS77Z+f31/XhwuYLoFfZWUzgvvoughZDm
XLJvOOG7h0x/ffKmQlWIaG3lVgZSBkcKgPenhLdwQk3Nsmb+hH6x/v+h0DQiUsdl
37zXZ4d2OwQJasMuTPOxLr3PnJZlhKOlYWlC9B+/c1rNUOFGjntyYsuBSHezKd5g
wFq1d052lwldZ55fhMEQ9BiaFIRItYLYSlRMV+gAcsCLvg4VgVKgkfp47is1+9Km
WRQlYwAxlc3EIYJnjFkI787vwDL8a0l7l/Uub5V+RzF1I3f9dB2eIUEqX5exsppM
LTb9PdxNwKx2Gp22LLCeBhK+eOc4Z52tGpmHxseVDITGNN5wLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJBf7lOQkMGcVp2pUOPTisPZ9YLqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80OTc4
MTNiZS00OThlLTQxMjktYTYyNy0yMjVmOTdkMGUyYjUvY2U0N2M5NjgtMGExNi0z
MTcwLTk0OGQtYTJjZmFlM2ViOGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDk3ODEzYmUtNDk4ZS00MTI5LWE2
MjctMjI1Zjk3ZDBlMmI1LzQ5NzgxM2JlLTQ5OGUtNDEyOS1hNjI3LTIyNWY5N2Qw
ZTJiNS5jcmwwHwYDVR0jBBgwFoAUuDd7Tk8D/gmswblAiz+e8Eyi/yEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS80OTc4MTNiZS00OThlLTQxMjktYTYyNy0yMjVm
OTdkMGUyYjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLS2wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACZFBhiJIvVMeF47b4odCEnWYijDlqCJVxyNgiqbGbu/fQoxQQWlu2mZ
yP2dNyAMWlmKA1rB0IzkryD94v3pV92fKjNB3Wp1ZwNFhNj0h/DO5Cdbreh9olkO
5jnoNK7Xm3v5wfhnw6UrRfZFBfpPynlYHLyBuMunlmCqTiEfTofXLDds6uuQ2PeG
cantaMh02L676TZXFd4QvopAAjrriVjMCFivKwJEPU6ONxSgPt4XSKACNlGNYVBV
+5yUeLU+YiUcz7VNC7b0A++iRPTC3BFzmykgbAh8yqVwSmvFAfiQ7VFwnKbPqWbc
reUlLFsiqtYWmprLw8n74Gor5slbCC0=
-----END CERTIFICATE-----
Generated at Thu Mar 28 02:05:35 2024 by rpki-client on console-fra.rpki-client.org