Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a9fe0365-2647-3e99-b56f-302f40037d8d.roa
File:                     a9fe0365-2647-3e99-b56f-302f40037d8d.roa (raw, json)
Hash identifier:          Vd75mTUnXG7Jvo9Z6tQ5u46ZwIbmN2FxtQXcUQvIEAY=
Subject key identifier:   FE:43:62:49:DB:BA:90:D5:31:C9:4E:FF:9C:2C:55:9C:EA:81:45:44
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858477ECADF7CBDCFBAABFE947AD6
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a9fe0365-2647-3e99-b56f-302f40037d8d.roa
Signing time:             Thu 10 Oct 2024 13:20:34 +0000
ROA not before:           Thu 10 Oct 2024 13:20:34 +0000
ROA not after:            Wed 08 Jan 2025 14:20:34 +0000
asID:                     2914
IP address blocks:        172.252.49.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7e:ca:df:7c:bd:cf:ba:ab:fe:94:7a:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct 10 13:20:34 2024 GMT
            Not After : Jan  8 14:20:34 2025 GMT
        Subject: CN=bc732e40-6a79-4dfb-8d6b-ee69454d88b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f6:7f:a8:b5:d4:91:07:74:3a:c6:4d:bc:f9:
                    dd:15:ff:27:11:87:4b:6a:9e:62:a5:79:bb:bc:bf:
                    8e:7b:0d:96:f4:04:78:35:a3:97:04:05:79:9f:81:
                    3a:d6:a3:9d:44:09:da:0d:3f:08:fb:73:76:39:7a:
                    0e:03:ee:54:c1:0c:6c:bf:8d:f6:85:93:51:2a:13:
                    98:ff:18:69:df:c1:e5:70:20:bc:63:d3:b9:e2:0c:
                    1c:1f:23:f6:bc:e6:71:94:33:ed:1f:73:7c:62:8e:
                    c5:dc:f9:f3:a8:50:49:7d:73:2a:37:e3:50:82:57:
                    84:8c:25:ac:f1:e0:4a:cc:39:98:e0:a9:22:7f:88:
                    13:35:f5:e5:7e:f9:de:d2:58:e3:e7:47:f8:95:3a:
                    72:35:57:af:06:ae:94:4c:37:26:d8:33:80:9b:0a:
                    b5:90:8e:86:0e:18:3f:b3:83:f5:fc:0e:63:3e:c1:
                    8b:fa:e3:ab:0e:14:43:4b:e2:59:a8:58:04:2c:16:
                    66:d5:8b:44:b1:8d:40:c8:c6:c0:91:67:ad:9b:8f:
                    8c:c9:d4:60:c2:68:25:71:5f:a0:d7:b2:05:b6:83:
                    a8:ac:98:1b:7c:73:a7:80:7c:16:9b:02:68:d0:39:
                    5d:8d:3f:b9:c4:a2:b4:70:75:d3:88:8f:89:f9:b8:
                    15:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:43:62:49:DB:BA:90:D5:31:C9:4E:FF:9C:2C:55:9C:EA:81:45:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a9fe0365-2647-3e99-b56f-302f40037d8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:23:a3:76:94:2c:43:a1:d8:e5:e2:73:3b:d0:5f:86:47:48:
         d0:0f:57:75:a3:17:7f:ce:c9:20:29:14:04:cb:8e:19:15:2e:
         20:09:e9:5e:d5:a8:f8:ee:ec:39:d8:43:d7:e6:0d:10:72:55:
         4b:52:38:6b:42:4b:36:01:06:f0:73:af:66:33:4a:96:81:7b:
         10:8f:11:42:7d:a7:6e:9c:7b:a3:ee:89:13:3d:db:63:b1:e3:
         10:cf:6a:df:0f:11:34:cc:06:e9:e0:09:1c:62:28:de:92:c2:
         7b:1a:f5:67:9c:8f:d3:b5:0c:47:71:35:fa:e9:c1:00:8b:d3:
         3f:7a:2f:a3:f0:09:10:1d:4b:1e:c4:eb:b1:a3:87:53:07:7c:
         45:ba:d7:e5:ef:28:d1:2f:49:a2:af:de:1c:26:95:b2:d9:4a:
         b9:a6:1c:ef:7c:78:11:9b:62:10:f2:2d:72:1c:c2:fd:6e:4e:
         86:8d:46:de:2e:46:5e:76:39:f7:25:5e:8a:6f:01:49:6f:34:
         41:2c:bc:f6:a6:ec:32:63:87:e2:b3:0a:41:ca:2a:48:dd:5f:
         ee:78:dd:bd:fd:73:55:9b:fe:e6:aa:29:e2:fc:f0:a2:58:7d:
         0e:f5:fb:2e:4f:0e:69:2a:b3:1b:49:c4:3e:17:3c:9f:2b:7b:
         77:c5:f4:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:36 2024 by rpki-client on console-fra.rpki-client.org