Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5c18dfd3-5de0-391f-b4c6-5e6af55e5fee.roa
File:                     5c18dfd3-5de0-391f-b4c6-5e6af55e5fee.roa (raw, json)
Hash identifier:          xZakBObMitDe5XFa8ZDNAwP/IKWojtcqqFAYkS9hqFI=
Subject key identifier:   2B:48:B5:EF:35:C2:16:A4:2B:B2:42:4D:A3:E2:24:08:94:B9:4C:68
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285847B53155E284DBD8C10E66D100
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5c18dfd3-5de0-391f-b4c6-5e6af55e5fee.roa
Signing time:             Wed 30 Oct 2024 01:00:32 +0000
ROA not before:           Wed 30 Oct 2024 01:00:32 +0000
ROA not after:            Tue 28 Jan 2025 02:00:32 +0000
asID:                     10796
IP address blocks:        142.254.232.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b5:31:55:e2:84:db:d8:c1:0e:66:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 30 01:00:32 2024 GMT
            Not After : Jan 28 02:00:32 2025 GMT
        Subject: CN=9e9f7f23-9871-4f2e-8aae-84def2c4e006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b8:83:e0:52:f5:aa:69:4e:e9:67:3e:2c:71:
                    e0:f3:2b:06:28:e6:ea:1d:28:af:98:a2:1e:4a:67:
                    03:3d:c0:ce:ab:a5:43:c8:d4:57:b4:34:46:82:9a:
                    64:68:09:00:40:ad:75:f5:63:3b:bf:8a:03:85:d5:
                    2f:c8:c1:2c:2d:a6:cd:32:67:30:55:ef:0d:ee:21:
                    97:fc:35:74:71:74:65:ff:99:3b:8b:4b:b1:40:d7:
                    6d:58:08:a4:ff:ae:a7:eb:62:7f:0c:98:e0:77:76:
                    d6:ef:ba:00:6f:4c:15:fd:29:a5:17:70:1b:63:1b:
                    e3:93:67:56:57:c5:52:7d:3b:45:09:d1:ae:94:24:
                    17:fd:f1:aa:3b:4e:69:2e:a7:32:07:ac:c3:94:60:
                    f7:16:d3:34:75:b5:d3:e6:ed:0f:e3:18:8b:7a:aa:
                    53:1b:95:b2:f4:3e:8e:5f:f2:af:af:65:23:b0:19:
                    68:e1:0f:87:89:39:b7:a1:30:b0:f1:e5:af:48:3e:
                    ef:b7:63:41:5c:d5:8e:f7:8c:dc:de:29:f1:37:a2:
                    06:5f:41:2b:18:34:89:dc:d6:da:59:da:ea:82:f1:
                    ec:f5:1a:03:f1:2f:73:bc:e0:11:5e:29:35:90:d6:
                    35:26:36:c3:4d:24:04:cc:50:e4:54:08:2a:97:60:
                    3f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:48:B5:EF:35:C2:16:A4:2B:B2:42:4D:A3:E2:24:08:94:B9:4C:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5c18dfd3-5de0-391f-b4c6-5e6af55e5fee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.254.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:53:ba:d8:cf:2a:62:d3:4d:1e:0a:58:3a:09:e4:4f:8b:fa:
         b7:09:c4:1a:85:3e:37:b2:c0:0d:57:34:d9:74:80:57:72:2a:
         49:7d:a9:61:3b:e4:d6:e3:b2:f4:62:d3:11:a0:a2:d8:85:15:
         08:71:4c:90:dd:1d:10:2f:09:d3:d9:6d:66:30:2f:91:6a:ee:
         49:87:4f:dc:5d:6e:5c:e5:82:ae:77:1d:6d:96:6d:51:6c:17:
         17:50:31:d3:15:43:2c:27:76:d5:b3:94:b4:49:26:41:72:71:
         51:b6:84:f5:1d:33:7f:45:cf:df:4e:7e:e6:3b:72:1e:3c:f1:
         27:19:06:2f:3a:ce:bf:b8:88:92:f8:18:5b:1f:e0:ac:b7:6b:
         f9:24:20:c4:7e:10:a6:2f:fc:e9:3d:50:c7:b3:38:3c:2a:2c:
         5e:38:e2:e4:fa:e1:a2:ed:5e:bd:9c:e7:ce:e5:e7:cc:bb:77:
         74:8a:16:3b:8c:2c:b1:8a:b6:4a:09:77:c0:f6:9b:ba:24:35:
         76:e6:a3:8a:dc:f7:45:45:76:22:e7:6e:bd:5d:eb:28:77:ef:
         f0:cb:cc:7d:09:4d:0c:5c:dc:c1:3e:59:44:d7:40:8f:97:21:
         d4:12:1e:b3:af:db:22:2e:59:47:ab:93:f7:bf:3f:01:f9:19:
         23:17:7d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:41:10 2024 by rpki-client on console-ams.rpki-client.org