Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0198caa8-4227-3e0d-80c0-c5f3f01de6f0.roa
File:                     0198caa8-4227-3e0d-80c0-c5f3f01de6f0.roa (raw, json)
Hash identifier:          BsspUpksck8gHu+MmoSRowDok8JUaZvJOYGa9/CdU+E=
Subject key identifier:   B6:E8:60:4F:A0:38:5A:36:8E:2D:2D:84:DD:2D:A1:06:3E:BE:91:9B
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285847F111B35292CE4568ED476580
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0198caa8-4227-3e0d-80c0-c5f3f01de6f0.roa
Signing time:             Wed 20 Nov 2024 11:45:26 +0000
ROA not before:           Wed 20 Nov 2024 11:45:26 +0000
ROA not after:            Tue 18 Feb 2025 11:45:26 +0000
asID:                     44477
IP address blocks:        45.38.167.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f1:11:b3:52:92:ce:45:68:ed:47:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Nov 20 11:45:26 2024 GMT
            Not After : Feb 18 11:45:26 2025 GMT
        Subject: CN=7e833c36-19fc-4665-b80c-0eae0c0918fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:60:58:c5:24:eb:d8:59:bb:13:ce:91:43:43:
                    f3:13:54:7d:94:2e:55:62:37:d0:a5:74:02:47:c0:
                    d0:a5:ce:2c:23:31:0f:67:69:14:14:cb:77:6c:94:
                    6a:04:50:a9:1d:92:07:35:20:40:b7:1d:63:6f:67:
                    8d:d8:9b:ea:87:00:b0:7a:54:6e:fc:93:9d:aa:f8:
                    f9:73:bb:ab:f3:66:01:88:91:c5:e1:51:ff:04:d9:
                    0e:ea:68:00:53:39:8f:68:94:81:0e:f5:1d:4c:c7:
                    2d:b5:91:b2:7c:1a:f1:03:7c:e9:f6:04:f0:12:58:
                    ca:8f:1f:f6:49:bc:25:24:49:32:62:a8:5c:10:72:
                    2f:b5:95:fe:9c:94:f4:7a:8f:9b:56:c6:07:0f:b9:
                    37:54:44:50:a4:76:30:05:44:9d:00:27:3e:9a:21:
                    85:f0:95:4e:cc:54:15:aa:7a:d0:4f:31:f9:f3:c3:
                    19:b5:62:26:d4:b1:ec:fc:7c:56:a0:c4:37:77:df:
                    01:2f:58:59:4d:d5:94:23:64:3c:92:ea:4c:77:c1:
                    6e:f5:d5:9b:45:ab:36:bc:96:04:c8:fd:96:d0:4a:
                    67:a8:9c:38:f3:06:81:9e:45:9a:48:ec:20:55:b1:
                    15:3f:70:6e:9a:2e:ff:d0:90:24:e0:c9:f8:ac:71:
                    a3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:E8:60:4F:A0:38:5A:36:8E:2D:2D:84:DD:2D:A1:06:3E:BE:91:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0198caa8-4227-3e0d-80c0-c5f3f01de6f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:ee:b8:a0:50:81:c7:02:71:ff:2f:31:4c:75:f7:4f:af:32:
         8a:ba:db:0b:b9:11:8e:ed:b5:98:3b:be:e6:68:c5:8f:b8:6f:
         43:96:64:b2:8a:40:c2:25:ce:9e:e2:6d:ab:79:9e:e5:8e:fa:
         80:b2:ef:4e:11:76:94:dc:4d:1d:a6:d6:4e:61:a3:5f:42:83:
         ca:f3:6a:92:9e:d6:98:6a:2b:e7:9c:40:9e:b3:35:e5:74:8a:
         2d:77:af:b0:7d:80:fb:bb:a5:fb:90:c4:6e:71:12:63:5f:b8:
         74:94:0e:57:7e:fb:88:4d:a5:33:0d:07:7f:e3:3e:f6:1c:a2:
         e4:46:75:d4:74:b8:c4:fe:f7:80:84:9b:77:c7:e5:1b:d2:b5:
         42:92:28:a4:dd:e0:0c:52:19:69:f5:87:0f:e8:5f:18:c2:4b:
         95:d8:33:dd:72:65:4a:b7:15:83:5e:38:4d:45:ae:f6:3b:fd:
         9e:4c:65:fe:0b:81:71:21:b4:ed:60:a0:d6:88:15:24:0e:52:
         8e:6d:d5:9f:0d:92:82:bd:4d:e1:31:16:3d:23:84:69:6b:df:
         7a:bc:78:77:c9:75:e1:1f:53:bf:1a:80:6c:0d:57:e4:32:38:
         4d:e4:9e:94:e1:a8:39:a9:74:3c:18:f0:8d:ef:49:f7:d5:90:
         dd:00:f8:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:41:45 2024 by rpki-client on console-ams.rpki-client.org