Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb3f9cae-c3ca-43a8-b103-4f2e03730626/50101c89-1f20-33a5-ae9d-1a9a92d4acd1.roa
File:                     50101c89-1f20-33a5-ae9d-1a9a92d4acd1.roa (raw, json)
Hash identifier:          sz7C4erjlg3Ius1HcJRpu3WmQ8c0sNcAv1Fde3am51w=
Subject key identifier:   AE:41:19:5F:3A:47:B2:29:D3:93:5B:EF:52:B8:21:9D:9E:7C:F2:C7
Certificate issuer:       /CN=fb3f9cae-c3ca-43a8-b103-4f2e03730626
Certificate serial:       010D0C9F432858450D8580DCF52D26C0B2E41440
Authority key identifier: E2:78:AB:85:FC:AE:54:2E:B1:AF:F2:8B:02:5E:E7:E9:D5:53:FF:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb3f9cae-c3ca-43a8-b103-4f2e03730626.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb3f9cae-c3ca-43a8-b103-4f2e03730626/50101c89-1f20-33a5-ae9d-1a9a92d4acd1.roa
Signing time:             Thu 29 Feb 2024 14:00:31 +0000
ROA not before:           Thu 29 Feb 2024 14:00:31 +0000
ROA not after:            Wed 29 May 2024 13:00:31 +0000
asID:                     16509
IP address blocks:        45.95.209.0/24 maxlen: 24
                          203.57.88.0/24 maxlen: 24
                          141.193.71.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb3f9cae-c3ca-43a8-b103-4f2e03730626/fb3f9cae-c3ca-43a8-b103-4f2e03730626.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb3f9cae-c3ca-43a8-b103-4f2e03730626/fb3f9cae-c3ca-43a8-b103-4f2e03730626.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb3f9cae-c3ca-43a8-b103-4f2e03730626.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0d:85:80:dc:f5:2d:26:c0:b2:e4:14:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb3f9cae-c3ca-43a8-b103-4f2e03730626
        Validity
            Not Before: Feb 29 14:00:31 2024 GMT
            Not After : May 29 13:00:31 2024 GMT
        Subject: CN=5139af43-021f-4f98-a19e-6a9448d8e87c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:99:02:24:38:dd:b6:cf:87:9a:25:a4:09:63:
                    ef:f9:d6:ff:dc:17:21:0e:51:2c:fe:b1:ca:cb:66:
                    27:d1:10:cf:fd:33:f4:64:02:56:53:b9:af:d0:70:
                    77:11:69:c3:7e:4a:a3:65:05:28:4a:f8:46:e4:cb:
                    b7:e3:2b:f8:03:5c:96:c6:d0:ff:ab:56:68:29:02:
                    0b:d2:1e:ee:6d:57:3b:73:9e:86:4c:b2:94:9d:2d:
                    b0:54:bf:cc:47:d4:69:68:8d:88:1e:0b:9d:18:6e:
                    6d:90:84:e9:ce:4a:5b:b9:3d:9e:99:e2:b1:60:7e:
                    de:5a:fd:52:72:7e:39:f7:1d:15:ee:48:32:f2:e9:
                    d1:25:18:71:ee:ec:a0:51:d3:02:1f:f0:b4:c0:3f:
                    9a:c2:b7:a2:70:2a:5d:9f:94:60:f1:29:09:ff:15:
                    03:8e:6a:50:a1:85:e1:8b:fe:24:ef:5d:e7:48:93:
                    df:19:52:8d:c6:fc:2f:10:9f:d1:75:51:13:3a:5e:
                    f7:8d:aa:8c:6b:27:74:25:5c:b8:5c:11:d1:eb:5f:
                    89:4b:37:1f:4a:1f:4b:3c:51:88:53:38:57:bd:60:
                    9b:10:ed:15:9d:37:23:e5:75:40:fb:87:d7:80:40:
                    db:5c:f1:d7:0f:47:13:2c:1c:9d:2a:d9:ef:44:a4:
                    1b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:41:19:5F:3A:47:B2:29:D3:93:5B:EF:52:B8:21:9D:9E:7C:F2:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb3f9cae-c3ca-43a8-b103-4f2e03730626/50101c89-1f20-33a5-ae9d-1a9a92d4acd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb3f9cae-c3ca-43a8-b103-4f2e03730626/fb3f9cae-c3ca-43a8-b103-4f2e03730626.crl

            X509v3 Authority Key Identifier:
                keyid:E2:78:AB:85:FC:AE:54:2E:B1:AF:F2:8B:02:5E:E7:E9:D5:53:FF:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb3f9cae-c3ca-43a8-b103-4f2e03730626.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.95.209.0/24
                  141.193.71.0/24
                  203.57.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:70:ce:a7:62:84:58:5b:6c:7a:fd:04:a0:f6:86:29:2f:11:
         4c:8f:b8:3d:98:08:4b:7b:91:6d:c5:8c:bc:b0:3e:75:76:b4:
         85:36:21:e5:83:74:1d:49:30:fd:34:7e:1d:d6:61:22:66:27:
         6e:0a:33:c0:f7:23:ba:d7:bc:e5:c5:fe:cf:2e:82:dd:13:b3:
         4a:9f:c4:85:62:c8:64:66:e2:3f:09:3a:b8:91:46:3a:7b:2e:
         73:e2:92:12:16:ea:2a:fc:48:f6:22:ca:0f:8e:0f:6b:64:5b:
         bf:f9:1b:cc:20:3b:de:72:e4:52:48:e5:53:00:31:e5:40:27:
         7a:10:83:de:23:48:d0:e4:3f:de:b9:a1:93:ce:bf:03:bf:41:
         4c:dc:3d:29:39:e8:b2:ae:af:79:32:29:3e:27:62:eb:76:94:
         9d:f1:a4:f7:a7:2d:d7:ac:7b:0a:cd:87:0f:e8:45:10:a0:49:
         da:e1:7d:65:cc:45:71:66:fd:c8:04:be:07:c4:9e:2e:e2:84:
         f3:5a:16:f1:ff:34:af:fa:f3:41:6f:ab:50:f7:18:7c:48:17:
         1b:4b:3a:99:ab:8c:53:b7:b0:7a:44:5a:34:a0:c1:c7:13:60:
         03:7c:7f:5c:24:dc:fa:1a:e7:d0:2a:af:4b:c7:40:12:57:e1:
         35:07:52:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:30:11 2024 by rpki-client on console-ams.rpki-client.org