Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7879b30d-9792-3b6e-9f83-620a58dc99fc.roa
File:                     7879b30d-9792-3b6e-9f83-620a58dc99fc.roa (raw, json)
Hash identifier:          84eKnKbyNn/kw91HmO7a52LD3J0CdRLgRrUT+Fl+LEc=
Subject key identifier:   66:33:DE:09:60:1D:80:01:8C:E5:C0:41:C6:5D:DA:1D:33:2C:3F:A6
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285847D834C32313FC8EFC37953800
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7879b30d-9792-3b6e-9f83-620a58dc99fc.roa
Signing time:             Mon 11 Nov 2024 14:00:39 +0000
ROA not before:           Mon 11 Nov 2024 14:00:39 +0000
ROA not after:            Sun 09 Feb 2025 14:00:39 +0000
asID:                     3257
IP address blocks:        142.111.185.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d8:34:c3:23:13:fc:8e:fc:37:95:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Nov 11 14:00:39 2024 GMT
            Not After : Feb  9 14:00:39 2025 GMT
        Subject: CN=6165fa9e-944e-4f88-a3c6-355f357741cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:0c:a7:47:f4:a2:a5:ca:c6:fa:1d:d3:b1:e7:
                    50:35:5d:9c:27:98:ea:68:e6:ec:8f:84:b5:f8:a4:
                    53:d5:ce:12:9a:86:8e:2b:e9:a9:77:d2:37:01:86:
                    12:96:57:f6:04:fe:43:37:c8:b6:9c:95:ff:d4:23:
                    c6:c8:2a:39:ae:6d:fa:17:8f:cf:5c:e3:01:e2:6c:
                    38:8a:a0:93:50:2e:c3:12:73:fe:82:a3:b8:5b:3a:
                    13:de:6f:85:9c:df:ad:d3:2e:77:65:a4:e7:23:4b:
                    96:ad:76:74:83:0b:1d:5a:12:aa:c8:0e:12:90:0c:
                    5d:91:d9:b0:6a:ad:80:d7:93:ca:1c:e8:c0:99:8c:
                    01:eb:52:39:67:9d:24:d5:5f:17:db:fa:da:f6:e1:
                    9a:a3:06:e4:78:e9:87:3a:6b:c2:1d:3f:cf:c9:6a:
                    2a:bb:7a:98:e0:9d:93:8c:d8:bd:3f:01:31:7d:02:
                    7c:1f:95:7f:74:d0:42:14:6a:27:54:17:43:25:28:
                    ed:36:96:f7:7a:34:1b:54:4e:6b:50:c8:dd:98:54:
                    9e:23:a0:c8:a7:46:ab:ab:4f:19:32:29:de:39:81:
                    6a:31:d6:b1:25:68:7c:d3:e7:d3:b4:56:a5:ef:40:
                    10:8b:29:22:c2:61:2f:ce:e3:8e:be:e7:75:29:62:
                    5f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:33:DE:09:60:1D:80:01:8C:E5:C0:41:C6:5D:DA:1D:33:2C:3F:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7879b30d-9792-3b6e-9f83-620a58dc99fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:1d:3c:4d:40:6b:13:ac:11:e7:3e:17:af:02:58:16:74:6c:
         f3:40:cd:9a:2d:21:bc:28:b8:a5:b2:ed:63:5e:10:bd:4a:f3:
         17:16:33:45:92:01:6b:f7:47:9a:9a:3e:83:77:43:6a:6d:7e:
         2b:d1:c8:35:89:32:bb:83:20:f5:cc:45:d6:c1:b6:64:20:86:
         e5:60:1d:81:85:a9:a7:63:9d:ac:5f:ed:10:32:da:fb:a1:21:
         97:a2:3a:c8:fc:8a:94:6c:e7:59:a4:58:48:a9:4b:7c:17:57:
         a0:da:b9:a4:c3:87:00:44:a1:e8:57:04:c7:a4:72:12:af:29:
         4f:6a:b3:5b:54:93:95:a1:61:6e:1c:d7:81:5d:59:62:54:78:
         52:b5:d6:d7:d2:f0:05:6d:e1:da:00:fc:0f:45:6d:3e:31:ed:
         5f:5a:92:8e:2a:ce:95:5b:ef:92:84:9a:3d:2a:26:6c:c1:fd:
         3b:23:c9:42:ed:b0:39:f6:65:fe:21:99:0f:45:25:31:4b:b6:
         bc:69:c1:1c:da:fa:9e:af:50:c3:82:08:04:8e:a7:27:a9:c4:
         26:51:c6:9c:b8:4d:55:d6:0f:3b:a6:c1:2d:6b:2a:cf:b6:2b:
         fd:11:86:59:80:b3:28:a6:e9:e9:19:7f:e4:74:c2:05:6e:38:
         de:73:5b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:36:32 2024 by rpki-client on console-ams.rpki-client.org