Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b9cb651e-e6a4-3778-8b35-0f16ad3354b3.roa
File:                     b9cb651e-e6a4-3778-8b35-0f16ad3354b3.roa (raw, json)
Hash identifier:          v84uaYnyoGO49/3pNrZg7QniDhfFO8ij0FqqfSCIUkM=
Subject key identifier:   97:AD:8B:77:EC:D5:44:73:06:5A:26:D6:1D:18:AD:D7:05:81:07:0E
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285847CFD4DD860CACFDE22DDE0F00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b9cb651e-e6a4-3778-8b35-0f16ad3354b3.roa
Signing time:             Fri 08 Nov 2024 14:00:39 +0000
ROA not before:           Fri 08 Nov 2024 14:00:39 +0000
ROA not after:            Thu 06 Feb 2025 14:00:39 +0000
asID:                     18779
IP address blocks:        142.111.154.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:d4:dd:86:0c:ac:fd:e2:2d:de:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Nov  8 14:00:39 2024 GMT
            Not After : Feb  6 14:00:39 2025 GMT
        Subject: CN=bc3e35c3-8831-4e62-b7f3-4393107d1ee4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d6:00:34:a0:21:8f:65:be:98:d2:91:71:77:
                    01:8a:07:03:fd:9d:f0:47:2d:00:4d:0c:b3:f6:7b:
                    14:a3:e9:23:ca:34:68:95:f2:f9:00:fa:43:27:f4:
                    a2:69:ac:bb:e1:79:ca:3b:6b:2d:15:20:fc:e0:f8:
                    eb:ae:e5:8d:22:38:e3:1a:bd:c5:1d:27:03:0f:dd:
                    f9:17:29:4f:2c:1d:4a:39:4d:b7:65:be:c9:41:d5:
                    03:e4:f3:1f:31:3a:46:a4:42:dd:33:f7:7a:a4:58:
                    c7:82:59:9a:0c:da:4c:12:3e:f3:1a:ac:be:d8:45:
                    e8:f4:36:07:38:76:c9:c7:c7:a0:90:df:83:eb:02:
                    9d:94:2c:b1:00:9e:47:a2:f8:9e:05:77:5c:66:f3:
                    48:7d:82:37:20:38:a1:bd:77:52:31:b3:e0:9d:d0:
                    60:b6:24:b6:f2:d4:f2:f9:f2:75:00:ec:63:dd:47:
                    16:e7:3b:ca:e2:87:13:78:ac:36:6e:30:95:e8:98:
                    1f:1a:80:22:34:7f:97:fd:99:6a:5f:3f:d3:33:1d:
                    17:3e:41:90:7d:fc:e3:c4:52:06:95:e8:6f:54:b6:
                    35:27:46:20:11:d7:14:50:02:b7:11:19:7f:3f:00:
                    a6:68:b6:d4:7c:61:77:3f:4f:2f:9f:12:dc:57:5c:
                    07:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:AD:8B:77:EC:D5:44:73:06:5A:26:D6:1D:18:AD:D7:05:81:07:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b9cb651e-e6a4-3778-8b35-0f16ad3354b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:35:de:77:1a:48:df:65:1a:c4:b9:37:3b:34:13:eb:78:33:
         e3:91:a5:2d:85:d2:31:d8:93:46:66:a1:bb:0c:d2:2d:7f:66:
         19:5b:77:8b:fe:3a:5c:8c:02:2b:4c:33:dd:06:41:a4:6e:c1:
         88:87:5e:ff:fe:17:ec:51:cb:17:fd:ae:30:13:33:d6:21:c9:
         08:36:56:61:fb:d5:8d:bc:7f:21:29:b1:f9:d9:7f:20:19:f4:
         a7:ca:78:7e:25:91:b1:44:5e:f4:58:82:68:3d:02:4c:22:60:
         8c:bc:8d:28:ad:1f:11:66:12:32:8e:45:4c:c4:59:84:61:0f:
         5e:f2:dc:db:2a:a7:bf:d2:b4:65:cb:4f:e2:13:06:e6:c0:13:
         ee:d5:94:88:e9:f5:81:5e:30:e4:89:fb:de:11:04:57:da:da:
         7a:87:b9:9b:e4:1d:1b:5b:24:3a:bc:04:9b:85:23:82:9a:4a:
         4f:6e:24:fb:ed:88:eb:f5:60:b3:4d:44:78:29:64:8a:14:b4:
         0d:4f:75:1d:32:6b:49:5e:a6:fa:5d:45:8c:c4:ae:67:02:f2:
         7a:6c:e6:6e:e1:cf:0a:1a:1a:84:62:1e:e2:3e:aa:68:7c:f1:
         07:94:24:11:be:75:6b:47:71:0f:0c:4c:c4:db:4b:37:32:63:
         56:76:21:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:35:57 2024 by rpki-client on console-fra.rpki-client.org