Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0521adf7-48e0-39b6-bff6-ba490040ca7f.roa
File:                     0521adf7-48e0-39b6-bff6-ba490040ca7f.roa (raw, json)
Hash identifier:          AAqnwziKnl0vkN4rNVM08Ny373GQ5ckiUGXWQiXuyuM=
Subject key identifier:   A0:94:B4:D8:BE:9D:D6:A4:0C:0E:01:93:2A:78:86:F4:6B:A3:81:91
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285847F1180ABD53FB664A0B731200
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0521adf7-48e0-39b6-bff6-ba490040ca7f.roa
Signing time:             Wed 20 Nov 2024 11:58:12 +0000
ROA not before:           Wed 20 Nov 2024 11:58:12 +0000
ROA not after:            Tue 18 Feb 2025 11:58:12 +0000
asID:                     44559
IP address blocks:        104.164.137.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f1:18:0a:bd:53:fb:66:4a:0b:73:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Nov 20 11:58:12 2024 GMT
            Not After : Feb 18 11:58:12 2025 GMT
        Subject: CN=f662445f-6a8d-4114-afa7-90d73d8035e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e4:20:f3:d3:f6:f8:4c:73:50:95:ac:d3:8a:
                    77:f2:73:39:49:5d:5b:bb:7c:9a:36:1f:06:e5:a4:
                    c5:0e:15:c2:90:1e:0d:65:0c:32:73:7b:8a:46:ec:
                    04:e1:9c:5b:65:7c:7c:87:b8:7d:a2:fb:f3:ab:b1:
                    ad:fe:8a:59:39:e4:3d:74:53:d1:c4:dc:06:82:89:
                    a0:42:c2:5b:94:85:ef:de:f7:b9:bf:ad:54:68:8a:
                    dd:cc:08:55:be:60:6f:9d:c2:f2:7c:71:7e:04:10:
                    91:b5:56:c5:ea:22:1e:e2:f3:08:ec:4f:6e:67:05:
                    a8:c3:fb:41:f7:70:7f:cc:c2:50:82:b3:69:0f:4c:
                    3f:4d:40:33:47:43:37:8c:d7:02:73:cf:e3:c8:48:
                    84:3b:20:f1:29:22:0c:2d:77:f3:e2:08:62:39:2d:
                    52:42:ce:67:47:d3:5b:52:70:7f:70:b6:b3:e5:1b:
                    62:4b:35:a5:0b:09:fc:72:a0:87:05:ac:67:10:54:
                    7e:d6:08:97:ee:04:c5:92:77:ba:9c:00:40:db:54:
                    42:a6:5e:d6:68:fd:6d:dc:f8:ce:6e:ae:bc:ce:1d:
                    a7:31:de:ca:df:7e:98:68:60:47:85:7e:3b:1f:0e:
                    1c:3c:59:27:24:1d:c4:1c:5c:f2:b3:cf:e8:75:05:
                    c7:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:94:B4:D8:BE:9D:D6:A4:0C:0E:01:93:2A:78:86:F4:6B:A3:81:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0521adf7-48e0-39b6-bff6-ba490040ca7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:ef:8f:65:3d:41:b3:f9:2b:af:56:a0:ea:ef:c2:cf:09:7b:
         52:ba:a1:4d:bc:df:99:04:36:22:d5:8d:a5:89:31:8e:27:64:
         8d:e3:cd:50:25:01:90:5b:e2:82:b1:7a:c2:f7:8c:97:13:f9:
         27:28:c1:80:e7:4f:90:03:12:c6:e7:3a:ce:79:3c:d5:0d:48:
         be:98:cc:4a:89:83:ea:ac:e2:89:6b:dd:b4:a1:de:cb:95:8c:
         ae:c6:4b:01:7e:55:f7:64:60:cb:eb:85:84:38:99:87:9b:78:
         e1:9e:13:f4:02:11:0d:b8:80:6c:c3:be:51:69:16:b1:d2:c3:
         68:b8:cf:96:d2:96:f5:4a:24:bb:84:cb:d7:f5:d3:39:ef:f1:
         f8:f9:54:5f:b2:40:73:88:9b:5f:9f:88:d3:c9:c0:75:d1:a9:
         be:b1:a2:a0:f3:d3:c0:37:96:f7:a5:a1:00:30:cf:20:b7:d4:
         20:a1:b6:92:0b:73:d9:06:61:c2:8f:54:0b:51:18:a8:d6:31:
         e9:63:d5:e0:0a:89:bb:e8:12:9e:30:6d:3c:6b:71:9b:b3:55:
         eb:c0:2b:64:24:59:38:c7:0a:fa:d9:40:29:e2:ed:16:83:7d:
         06:09:46:29:7f:5a:17:82:81:8b:f9:9b:28:41:44:6b:6a:42:
         4c:6e:73:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:25:55 2024 by rpki-client on console-fra.rpki-client.org