Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/cca05db9-9692-36af-b0cb-468d8d7c7d0f.roa
File:                     cca05db9-9692-36af-b0cb-468d8d7c7d0f.roa (raw, json)
Hash identifier:          BZ796SgtRkYecrb7KrK7CgIJZZbw57NKdUq2tdg/MBI=
Subject key identifier:   A3:68:E9:1E:19:11:25:45:FD:54:CB:80:09:AF:CA:66:28:F5:0D:9A
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A0C2547E7EC3E97634DC00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/cca05db9-9692-36af-b0cb-468d8d7c7d0f.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     54157
IP address blocks:        184.75.125.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:c2:54:7e:7e:c3:e9:76:34:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=f06a47e9-0f11-4e49-a966-283f9fa1fc46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:bd:c2:cb:3d:de:8d:75:6a:a7:a4:29:93:0f:
                    79:16:d7:fd:6d:ad:43:c3:80:27:f6:50:da:54:1e:
                    44:d3:ed:d1:d5:0c:c7:6f:71:90:45:d9:3f:75:b8:
                    a9:a8:df:af:2d:1b:54:10:12:24:de:a2:89:ed:7f:
                    dd:c9:61:59:9d:02:fd:f7:87:7b:09:74:c3:e3:0b:
                    5e:c8:87:50:94:54:56:7c:bf:1d:38:05:b3:80:43:
                    81:26:2e:62:7c:22:96:67:fc:41:60:db:78:a4:15:
                    c4:ff:a0:0b:28:09:ac:21:74:28:b6:8f:4e:90:b5:
                    3d:b1:2c:3c:ec:00:93:32:c1:5a:bd:04:87:6f:fe:
                    c1:16:73:bd:cd:20:89:67:08:44:90:63:3e:81:6c:
                    d3:bb:64:9f:3f:f7:a4:c1:8f:14:c5:d3:b6:a8:b0:
                    05:c3:54:bd:82:3e:88:c8:90:c0:57:c2:c7:ed:03:
                    76:36:ad:cb:ee:95:5d:b4:a7:39:38:9a:99:1b:13:
                    ff:cb:d9:a5:4e:f1:e6:bb:35:3c:75:49:f2:4d:52:
                    53:c9:54:fb:8f:eb:69:dc:22:28:c6:44:6e:60:cb:
                    a7:37:36:3a:63:df:e5:ac:1c:e9:73:44:9b:5f:09:
                    21:a8:09:75:b8:e5:c7:70:ca:c0:9d:80:16:fe:c1:
                    6c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:68:E9:1E:19:11:25:45:FD:54:CB:80:09:AF:CA:66:28:F5:0D:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/cca05db9-9692-36af-b0cb-468d8d7c7d0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.75.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:57:bd:78:c7:4f:d5:cc:85:94:72:59:b8:1e:29:84:b4:1b:
         a3:62:7b:53:b1:a2:c8:f5:06:9a:f8:a5:f5:f3:1f:56:c5:34:
         a6:9e:ed:2f:07:b7:fa:87:f3:56:c5:f7:55:8b:1c:88:96:fd:
         28:c5:a4:d8:f5:17:c1:e0:32:cf:c1:d3:73:01:78:ad:c0:8b:
         ab:6a:65:0c:19:6f:29:0e:59:64:34:ee:00:86:10:61:83:b9:
         35:48:77:7a:2c:96:13:83:72:62:1b:72:b9:e8:11:2a:53:f8:
         40:b8:9e:ab:da:df:14:8c:a1:6d:cc:01:29:dd:0c:c2:81:83:
         5f:a4:81:8d:7a:1a:d6:2d:32:49:41:35:f5:f6:53:17:63:79:
         81:4a:4b:c1:f5:8b:73:2d:6c:1d:e6:cb:86:49:fb:e1:e4:c3:
         52:6c:2c:1d:2c:c0:f5:a4:2b:91:fb:10:f3:cb:26:cb:e8:b0:
         7f:cb:fc:da:ee:f3:2f:3f:09:82:ab:3a:d5:6b:a8:c6:23:b8:
         b1:92:f4:8d:e6:b1:30:cf:30:39:83:5c:7e:3b:48:c5:51:7b:
         ed:e9:e5:e4:18:49:38:be:65:b1:07:48:49:88:f7:19:a5:14:
         d6:68:10:4f:b4:39:7b:c6:8e:ec:7d:b7:23:c1:8e:7a:72:98:
         45:b4:55:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:41:38 2024 by rpki-client on console-ams.rpki-client.org