Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/09fe1dc2-a5ff-3229-b515-32793dbe3460.roa
File:                     09fe1dc2-a5ff-3229-b515-32793dbe3460.roa (raw, json)
Hash identifier:          Y1eJpb5FtSWkKZ4Uv0wgrkrRBWmOeTQimvg/fo3uJ4s=
Subject key identifier:   BD:D9:25:B0:14:7B:E8:CF:2B:58:E2:78:11:6F:85:75:02:9B:BB:EA
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285847E357C4F5B6C6582F9A53FDC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/09fe1dc2-a5ff-3229-b515-32793dbe3460.roa
Signing time:             Fri 15 Nov 2024 13:45:17 +0000
ROA not before:           Fri 15 Nov 2024 13:45:17 +0000
ROA not after:            Thu 13 Feb 2025 13:45:17 +0000
asID:                     6939
IP address blocks:        104.165.12.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e3:57:c4:f5:b6:c6:58:2f:9a:53:fd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Nov 15 13:45:17 2024 GMT
            Not After : Feb 13 13:45:17 2025 GMT
        Subject: CN=b2c90dfb-eaca-436b-95e0-1b2f6457852b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:31:0a:04:a9:e9:36:05:7b:d8:d6:10:a6:e7:
                    bc:1e:e2:7b:55:6b:61:fa:fa:92:0d:b7:33:c9:d4:
                    ae:7e:1e:f7:e6:07:d7:62:b2:dc:2d:90:c8:10:f9:
                    bd:1b:bd:54:7f:8f:8d:7d:cc:e3:e8:da:3c:36:cc:
                    10:8f:6f:60:21:40:d8:32:41:7d:e1:0c:81:7d:2c:
                    0e:57:11:51:df:60:f2:43:4c:0b:4a:1e:2a:c1:21:
                    9e:05:24:be:82:9a:bb:58:d7:29:ad:c8:e9:24:ad:
                    5e:0c:29:b9:45:fb:d9:26:7f:f8:d3:08:bf:1d:42:
                    17:ad:92:a9:5d:15:40:6d:d1:2d:90:bb:89:d4:0d:
                    b6:1a:14:59:7f:3a:52:17:48:51:0c:27:c4:de:58:
                    a0:83:f6:84:d0:4f:dd:5a:ea:2b:a2:d8:f3:09:3d:
                    ec:24:21:4a:8a:97:78:c4:8e:a0:f6:fd:a5:3a:5a:
                    a5:60:f3:6f:07:49:6a:c0:d9:32:8a:f4:83:66:65:
                    0e:cb:0f:84:07:04:8a:d9:73:b9:58:eb:f6:b4:65:
                    0b:8a:56:e8:52:b8:a5:97:38:07:a7:41:3a:71:19:
                    99:41:8f:c3:7f:75:24:2b:57:a3:67:f9:b4:cb:ce:
                    65:e9:48:f0:ab:b4:6f:f5:eb:aa:6d:d7:5b:7b:de:
                    e9:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:D9:25:B0:14:7B:E8:CF:2B:58:E2:78:11:6F:85:75:02:9B:BB:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/09fe1dc2-a5ff-3229-b515-32793dbe3460.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:e8:a2:b5:86:30:6d:8a:51:7b:c8:6b:5a:b1:7c:e7:d8:8c:
         cb:20:6f:a2:89:2b:b9:30:3e:ea:ad:27:8d:9e:4b:e3:12:2a:
         30:64:31:04:9d:16:f7:5e:89:de:2c:f8:bb:cf:8e:8e:b9:c8:
         39:dd:51:7e:55:fb:90:53:92:61:66:3b:35:0e:77:2d:70:ee:
         f7:c5:8e:6b:81:ce:8f:c6:a8:a3:bf:a3:1b:3c:54:d7:01:eb:
         dd:2c:ff:0d:c9:92:86:6a:48:63:de:da:dd:34:ac:a6:e2:4c:
         95:ad:64:7d:fe:97:ea:c6:17:fe:c2:e5:0a:48:f4:81:f7:5f:
         15:a6:da:29:5f:82:4b:51:38:b8:4b:22:f6:97:31:11:78:21:
         37:96:f2:44:a8:3c:f1:1a:e1:96:2f:fc:45:7c:43:72:90:8f:
         af:d0:09:bf:39:40:23:d1:58:8c:d2:92:43:5e:a2:fa:3f:fc:
         2e:ae:ab:83:fe:c0:68:53:4e:dc:dc:7a:42:43:f4:26:08:02:
         60:4e:2b:be:73:7f:53:1e:73:8f:7d:14:ee:b5:c4:1b:e3:b3:
         aa:b2:24:a0:b7:49:cc:e3:20:b1:dd:b0:8e:0e:50:7c:f0:fa:
         98:02:6f:94:ab:fd:00:71:59:a3:a8:c5:c3:30:fc:2d:6d:59:
         6c:21:16:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:25:55 2024 by rpki-client on console-fra.rpki-client.org