Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8445cbb9-9550-3139-812b-ec6391a7300e.roa
File:                     8445cbb9-9550-3139-812b-ec6391a7300e.roa (raw, json)
Hash identifier:          mA891TkgGHLML+nDBEaCoZ4xfvEUWWayR2DmfnUxC9A=
Subject key identifier:   B9:44:F0:63:F2:E3:17:EF:0B:3D:EE:1E:4B:50:68:B6:82:2D:77:95
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285847EFEF8FB89A035D15B69B9BD8
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8445cbb9-9550-3139-812b-ec6391a7300e.roa
Signing time:             Wed 20 Nov 2024 02:00:39 +0000
ROA not before:           Wed 20 Nov 2024 02:00:39 +0000
ROA not after:            Tue 18 Feb 2025 02:00:39 +0000
asID:                     3561
IP address blocks:        142.111.182.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ef:ef:8f:b8:9a:03:5d:15:b6:9b:9b:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Nov 20 02:00:39 2024 GMT
            Not After : Feb 18 02:00:39 2025 GMT
        Subject: CN=66f727d3-31dc-401e-b777-088347db3a7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:53:ae:60:b0:89:4f:ca:19:64:fd:dc:93:63:
                    8a:3d:33:1f:29:d8:21:df:74:e8:da:26:3e:a9:42:
                    00:81:9c:ea:a9:27:56:ae:55:e2:8c:73:50:38:40:
                    9b:71:ba:76:c3:30:d5:57:00:8f:c1:81:f6:ca:16:
                    86:b1:2f:2b:e4:51:68:e1:8e:d8:e3:94:61:3f:e1:
                    a9:d1:45:ce:77:a7:88:42:b5:ee:dc:91:95:16:34:
                    1a:3d:16:e5:e3:f8:e9:66:ed:17:87:d1:52:04:e1:
                    a3:46:6b:b5:ee:08:17:3b:b5:c2:e9:e3:bc:25:82:
                    6c:3f:d7:d6:a6:97:b1:e3:07:54:50:98:17:21:3e:
                    f3:6e:68:1a:02:9a:7f:0a:a6:d0:a9:2f:70:ac:8f:
                    08:5c:38:d0:2e:af:d6:50:f3:6e:a3:df:f8:5d:7e:
                    ca:03:18:92:64:7b:12:be:bc:67:44:38:13:29:58:
                    31:fe:fe:a1:d7:a5:ef:9d:36:9d:6a:21:56:a0:a4:
                    79:50:af:9d:2f:15:f0:fe:51:81:dc:6d:14:57:d8:
                    a4:f9:33:0e:e2:4e:fc:0c:7b:b9:4f:a6:78:af:bd:
                    55:d1:2a:4d:5b:0a:12:db:3e:89:2b:09:0f:df:2c:
                    11:33:53:06:52:82:f2:b0:08:63:69:22:6b:85:46:
                    ba:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:44:F0:63:F2:E3:17:EF:0B:3D:EE:1E:4B:50:68:B6:82:2D:77:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8445cbb9-9550-3139-812b-ec6391a7300e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:fd:46:ec:a0:2d:8a:60:52:7a:fa:1e:fd:af:57:51:35:ff:
         86:7d:e4:4d:77:9c:89:d2:13:4e:2f:dd:b3:8a:3b:cd:0a:11:
         3a:a9:35:b9:78:15:c2:27:dc:13:37:7e:d2:96:0b:c0:38:18:
         00:5e:ee:b9:25:82:39:b9:22:dd:37:5d:53:8a:34:4a:1f:c7:
         30:21:d9:28:63:8e:c9:03:b4:93:0f:b5:c9:55:e5:cc:eb:ac:
         3c:76:63:0c:4f:f7:ec:ef:96:af:1f:18:8b:be:ee:86:6c:f6:
         f3:69:14:f3:5b:42:fd:d9:c8:3e:c2:4a:83:b3:64:ea:54:6c:
         2b:b9:66:30:50:74:0a:e7:0e:86:bf:5f:29:73:08:20:5a:40:
         a7:80:22:a6:75:be:67:34:4d:4c:85:c0:62:eb:ab:b1:72:60:
         54:a4:fd:b4:8f:ce:c0:b0:2a:f5:b6:94:92:31:41:ea:95:ce:
         70:a7:ed:90:f3:a6:0b:b0:31:f5:99:bb:be:cd:dd:cf:4d:8f:
         8c:39:fb:4a:b9:74:f2:8e:56:f3:ad:d8:e4:49:10:40:91:b5:
         6b:9b:10:7a:37:42:bb:69:f2:6d:95:cd:ff:b5:3b:6c:3b:e9:
         57:7e:67:9a:95:0d:fd:cd:61:90:e7:37:1b:e9:52:f1:29:67:
         69:3e:f8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 20:58:44 2024 by rpki-client on console-fra.rpki-client.org