Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/277b2757-57cb-3198-b437-d291ac9f9a85.roa
File:                     277b2757-57cb-3198-b437-d291ac9f9a85.roa (raw, json)
Hash identifier:          Z1fU+4obIh8hm/RugwZElppxHgZgvAp8wsSGn9Esp2A=
Subject key identifier:   DF:AB:50:DA:25:36:0B:15:CA:15:6A:9B:D4:CD:B3:93:C2:36:E1:B4
Certificate issuer:       /CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969
Certificate serial:       010D0C9F43285845883DD42DFA5F4045A79AD500
Authority key identifier: DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/277b2757-57cb-3198-b437-d291ac9f9a85.roa
Signing time:             Sat 13 Apr 2024 13:00:34 +0000
ROA not before:           Sat 13 Apr 2024 13:00:34 +0000
ROA not after:            Fri 12 Jul 2024 13:00:34 +0000
asID:                     16509
IP address blocks:        45.42.138.0/24 maxlen: 24
                          45.42.137.0/24 maxlen: 24
                          45.42.136.0/24 maxlen: 24
                          45.42.139.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:88:3d:d4:2d:fa:5f:40:45:a7:9a:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969
        Validity
            Not Before: Apr 13 13:00:34 2024 GMT
            Not After : Jul 12 13:00:34 2024 GMT
        Subject: CN=4814a461-8d95-4de1-b92c-67b5a9a7514f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:76:5c:72:3c:38:e3:e5:fb:cb:eb:f6:d2:09:
                    83:9f:9a:b6:5c:db:a2:15:60:2c:e2:18:e6:3e:9b:
                    b7:2d:5d:8c:cf:00:4b:c6:b1:9c:eb:d6:24:54:78:
                    86:4b:b2:60:07:3c:65:85:27:f8:a9:41:35:54:17:
                    1a:73:0b:7e:71:cf:14:0c:af:6d:8b:bc:85:39:0b:
                    a9:80:03:b2:dc:40:6a:18:b7:91:20:ec:4b:d8:03:
                    5c:9b:13:af:a6:89:7e:f9:48:58:93:82:bd:ae:65:
                    b4:1d:ce:39:cc:d4:0b:72:84:03:54:67:9e:cd:88:
                    d2:14:a8:e5:d1:67:14:bb:1f:65:9a:2f:0c:9f:70:
                    ed:f5:56:f1:0d:60:28:b7:c3:ee:cb:57:cc:ee:93:
                    5d:59:27:9f:b7:e5:11:85:a8:ad:90:76:23:ca:bf:
                    bf:2e:fe:0d:ac:a0:fc:09:5f:da:07:d1:db:cf:cb:
                    ee:69:87:75:c9:ac:1e:39:8f:b8:8e:b1:ba:d5:f0:
                    ba:ef:5c:53:71:26:a5:42:d5:0a:01:f7:aa:76:78:
                    7f:05:d1:d0:5e:bd:c2:1b:b9:8d:50:31:8a:65:4c:
                    3c:a0:23:87:b8:60:5b:5a:48:c5:d5:1c:5c:79:86:
                    75:04:85:cb:c2:2e:8b:f1:37:8f:69:5a:9d:41:d7:
                    df:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:AB:50:DA:25:36:0B:15:CA:15:6A:9B:D4:CD:B3:93:C2:36:E1:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/277b2757-57cb-3198-b437-d291ac9f9a85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:36:94:59:e7:03:4a:2e:e3:11:f5:0f:ee:dc:86:f8:f8:62:
         dd:cb:93:71:20:00:71:a8:1d:16:51:a2:da:b9:75:3e:78:d9:
         56:ba:08:1c:1b:52:22:86:f9:07:c5:df:72:40:54:b6:79:0c:
         85:12:bb:03:15:8a:5e:3c:a4:58:00:05:68:2d:18:39:3e:68:
         d1:ef:75:43:f1:a9:b0:20:92:a7:9f:3d:4c:32:32:8f:6c:e2:
         13:57:54:db:a3:68:fc:a3:43:03:1a:b4:29:0b:6a:67:1d:90:
         ce:32:1f:23:02:a2:d6:e2:d4:72:3a:70:4d:77:36:6d:b8:0e:
         5f:5b:5c:ce:eb:00:e0:6f:3e:20:89:06:82:bf:df:c3:a7:e3:
         f2:37:6d:df:13:94:20:6d:3b:fb:82:dc:38:fe:0d:a0:95:38:
         0b:05:de:56:39:88:57:da:22:33:8d:64:69:20:a4:de:b8:df:
         e7:0d:2b:69:f2:51:bc:7b:52:30:b9:9a:44:56:bb:9b:54:e1:
         ac:76:fb:c8:a8:18:1f:7a:60:95:6d:79:66:be:a5:eb:42:27:
         63:ea:e7:cc:f3:a4:5a:b8:10:ba:ce:12:30:09:f3:9b:db:13:
         38:50:e2:97:38:f8:40:a7:41:3b:27:b3:44:8a:2c:19:e0:19:
         dc:db:61:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:16:59 2024 by rpki-client on console-fra.rpki-client.org