Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/192d8837-e406-39f4-a5ca-afa05e4918b3.roa
File:                     192d8837-e406-39f4-a5ca-afa05e4918b3.roa (raw, json)
Hash identifier:          59N2CFYeGZ/mWN8/b20/37/ZsAukEkB53NzrxLXY+TI=
Subject key identifier:   BD:F5:B7:51:A9:69:58:9D:9D:5E:FD:E0:E4:39:E0:EE:EC:20:3B:8D
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285847C05C10413E293FB1AA741C00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/192d8837-e406-39f4-a5ca-afa05e4918b3.roa
Signing time:             Sun 03 Nov 2024 01:00:36 +0000
ROA not before:           Sun 03 Nov 2024 01:00:36 +0000
ROA not after:            Sat 01 Feb 2025 02:00:36 +0000
asID:                     7018
IP address blocks:        142.111.101.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c0:5c:10:41:3e:29:3f:b1:aa:74:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Nov  3 01:00:36 2024 GMT
            Not After : Feb  1 02:00:36 2025 GMT
        Subject: CN=773dd44e-d9fd-402a-86c8-cb5bb9de2eb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b8:21:78:c1:cc:16:6c:3a:25:8a:67:7a:06:
                    b4:14:f3:0c:06:ea:01:26:57:68:ba:de:41:f3:c2:
                    0e:ec:69:be:a5:84:7e:e5:14:4e:3b:2c:2c:b8:c1:
                    b2:80:66:42:78:0e:60:ea:3f:5f:1c:e0:22:df:a7:
                    aa:5d:83:7f:dc:d3:7d:29:88:cb:6a:15:09:e8:57:
                    ec:7f:77:95:d5:eb:c8:d2:0f:bc:16:08:8d:46:f6:
                    f1:69:0d:a6:4b:53:91:84:3e:c8:92:08:15:bc:bf:
                    97:50:cc:98:9a:32:57:c9:31:08:35:db:67:de:08:
                    ea:83:16:2f:a9:d9:88:a5:26:7a:99:be:65:ab:99:
                    d5:e9:04:9f:93:f9:9a:1a:4e:78:76:06:80:df:50:
                    2f:9f:34:2d:e3:30:6c:ed:90:f3:cd:17:60:90:e0:
                    8b:c7:f3:c5:2f:43:9f:9d:03:4d:23:92:6c:24:00:
                    d7:c0:8a:fe:7d:36:d6:c8:9b:4f:88:f7:b6:bd:bf:
                    eb:4c:fe:9b:4f:67:64:92:c0:ef:15:6a:3c:2e:f2:
                    11:d3:e2:f3:70:5c:47:fb:2a:68:27:b0:ad:2d:64:
                    f2:37:58:5e:6e:fd:1f:bd:68:52:2b:4a:cd:f7:52:
                    40:56:ee:47:ea:10:e7:11:f9:52:ce:16:8e:3e:39:
                    4a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:F5:B7:51:A9:69:58:9D:9D:5E:FD:E0:E4:39:E0:EE:EC:20:3B:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/192d8837-e406-39f4-a5ca-afa05e4918b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:52:7e:96:60:60:42:e0:dd:bc:d1:e9:5e:35:db:f9:b8:49:
         0c:9e:d2:3a:68:35:27:9a:84:ed:2a:68:60:64:bb:d4:2f:e8:
         91:b6:64:48:56:1a:ab:2a:85:f7:f2:31:82:d1:f4:64:2c:f4:
         92:4d:f8:f1:1d:51:5e:91:6a:8f:a5:61:f2:e6:29:f1:7b:1d:
         94:e3:d2:d9:48:82:5b:bb:a1:10:d8:ae:70:57:b2:56:bb:9a:
         76:58:52:4f:8c:8c:b6:c8:98:fe:1a:d3:64:0a:3e:a2:9c:8b:
         0c:50:a1:3a:bc:c9:9f:ca:f2:78:b4:e3:4e:2e:6b:0c:30:71:
         d0:88:62:c6:b1:3a:95:94:b5:11:43:46:64:6a:6a:98:df:cf:
         62:50:a7:26:d5:ea:0b:92:aa:af:08:d0:b6:43:d9:13:3d:54:
         83:54:92:9a:c6:d5:8a:e3:0b:50:8c:ed:f3:68:47:44:7e:71:
         d4:97:d7:ce:28:66:44:5b:d4:9e:3e:a9:08:54:db:2e:67:0c:
         ad:0f:d0:97:14:00:34:1b:ee:42:a0:18:a1:76:ea:c8:1e:fc:
         f6:5e:0e:d1:92:b0:e5:aa:6b:82:f8:7d:93:e6:44:38:d0:27:
         ad:11:fd:c8:7c:34:ab:68:0b:a1:7f:5e:b0:88:ca:90:9c:8c:
         45:a2:24:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 20:58:41 2024 by rpki-client on console-fra.rpki-client.org