Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/9a345ea0-cf7e-3f0c-a663-c83259740862.roa
File:                     9a345ea0-cf7e-3f0c-a663-c83259740862.roa (raw, json)
Hash identifier:          mLgHJhHDtQwquIJRpsN7yzgy3oTr8WhI/5HG4MTPV1U=
Subject key identifier:   F2:41:72:45:FD:05:63:15:DE:F9:9F:36:BE:98:06:99:87:23:44:71
Certificate issuer:       /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial:       010D0C9F43285847E62A27171C5B169C33013100
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/9a345ea0-cf7e-3f0c-a663-c83259740862.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     31898
IP address blocks:        168.225.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:27:17:1c:5b:16:9c:33:01:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=4971ad30-ee79-40f6-ab70-eb549769690d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:33:27:2e:a1:1e:0f:06:be:64:61:18:7c:80:
                    77:d8:06:d4:66:d0:94:43:72:d7:c8:97:88:33:49:
                    da:86:e8:60:7c:23:0f:71:1b:98:26:06:fb:31:8d:
                    af:0f:fe:d7:ee:4a:32:b9:eb:89:b7:b8:39:c8:45:
                    c7:f6:ac:a1:b3:0a:02:f8:e6:2e:0e:03:7c:e9:62:
                    27:aa:e4:cd:e4:7b:b4:ab:aa:c8:41:70:cd:73:13:
                    7c:c7:7f:04:0d:b5:9d:91:36:23:fb:fc:ea:66:5f:
                    94:70:f4:c5:2a:67:aa:b7:f8:92:66:48:2b:a6:df:
                    3c:1f:53:a6:9c:2e:1b:e1:82:54:30:ad:26:2b:dc:
                    89:4f:18:9f:f8:26:28:67:28:93:00:07:91:0f:c7:
                    c6:af:d8:66:0f:13:74:33:0a:c0:6f:55:74:cc:dd:
                    ce:b9:f7:c5:7f:c0:48:5d:08:38:ee:58:5c:e6:be:
                    14:33:cc:b4:20:ac:f4:91:3d:24:fb:bb:4c:e0:f3:
                    0b:ed:10:2d:b2:fb:e3:04:b3:70:01:85:f3:91:69:
                    cd:90:6e:4b:35:85:60:fd:8e:22:61:b1:d5:10:f1:
                    bd:8f:c1:ca:95:90:69:df:8f:aa:1f:f2:30:83:08:
                    fb:78:73:7b:c4:98:fc:a8:06:04:4c:1d:d6:77:f0:
                    a8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:41:72:45:FD:05:63:15:DE:F9:9F:36:BE:98:06:99:87:23:44:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/9a345ea0-cf7e-3f0c-a663-c83259740862.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl

            X509v3 Authority Key Identifier:
                keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.225.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:da:f5:7d:42:bf:71:84:c9:84:94:54:9f:0d:dc:7f:5f:1b:
         7f:fa:03:e2:ce:b2:74:60:80:95:a8:dc:25:b1:d4:d9:09:20:
         e5:87:00:37:f8:52:eb:7c:d5:c0:69:78:d6:15:10:9f:02:94:
         56:f0:a6:48:2e:6e:5d:bf:05:ea:64:d8:15:88:bc:8f:9d:25:
         d5:ec:58:e4:91:17:d4:38:e5:7d:cc:22:39:51:72:fb:b5:ca:
         58:19:a8:08:b8:e1:ac:e3:ab:93:31:9b:1b:93:93:7c:94:7c:
         1e:90:7c:45:d7:92:a4:97:09:1c:75:a9:25:ed:9d:e3:7a:b9:
         f0:5e:6d:67:9c:b1:62:e5:72:63:b7:2a:6c:c2:8b:4c:27:fc:
         d8:8c:48:6c:fe:8e:36:c4:17:9e:3f:10:3c:93:3a:5b:95:bf:
         7d:fa:60:73:a3:17:3e:ff:27:16:83:f0:e3:bd:cd:8d:99:98:
         43:11:f5:b8:27:58:a2:cd:b8:7d:b4:9a:06:23:a0:df:be:e3:
         b4:7b:b1:0b:61:c8:47:68:a3:20:3d:01:49:e6:24:65:a6:40:
         eb:2e:d3:08:10:ee:91:9f:dd:65:cd:06:da:0d:19:c8:9d:31:
         06:81:a3:bd:0a:40:39:4a:e2:b3:bf:74:4f:07:6d:8f:e1:a0:
         24:c7:19:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:05 2024 by rpki-client on console-fra.rpki-client.org