Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0f49bf67-4789-3d9c-8233-e924afe35970.roa
File:                     0f49bf67-4789-3d9c-8233-e924afe35970.roa (raw, json)
Hash identifier:          S4aIdRB9umV+RT6L/IzKrZoYrQ6k7TZesi8yM6ue6Gc=
Subject key identifier:   80:3E:A5:87:0A:B5:73:56:CC:36:73:2A:D6:5D:FE:1D:18:50:F5:11
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285847F11CBD7D8758788E7CA5C600
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0f49bf67-4789-3d9c-8233-e924afe35970.roa
Signing time:             Wed 20 Nov 2024 12:07:40 +0000
ROA not before:           Wed 20 Nov 2024 12:07:40 +0000
ROA not after:            Tue 18 Feb 2025 12:07:40 +0000
asID:                     44893
IP address blocks:        142.252.169.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f1:1c:bd:7d:87:58:78:8e:7c:a5:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Nov 20 12:07:40 2024 GMT
            Not After : Feb 18 12:07:40 2025 GMT
        Subject: CN=59ab0b57-0956-47ad-a858-7fadb2977b67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:bf:ff:e0:84:fa:d6:3f:7c:85:8e:d5:bc:12:
                    97:23:31:8e:e6:52:06:8b:d5:96:2d:ea:9b:d5:b6:
                    ee:94:9d:32:c6:ba:55:e9:63:69:6a:cb:11:7d:c9:
                    b3:02:74:6e:a8:e2:45:b4:f8:ef:6f:e6:0c:6c:10:
                    43:cd:7e:7f:ce:07:93:e9:97:46:3a:7e:1f:ea:b9:
                    b9:70:46:46:40:8c:bf:40:c4:1f:a2:19:81:3b:d5:
                    1f:73:e5:4d:ed:05:ed:81:62:27:64:29:1f:72:0a:
                    93:84:3c:5b:58:36:e5:f5:1c:37:c9:ed:06:ac:d3:
                    ad:32:5f:f9:8d:d9:57:a4:a4:30:7b:7f:77:4f:a9:
                    cf:dc:05:59:9e:54:d0:3c:cc:c6:e5:bf:50:3e:e1:
                    24:1c:a0:f9:2f:92:37:f2:0b:a4:a8:4f:07:c5:62:
                    0d:b7:f2:6d:d3:ee:e8:d2:2a:f9:84:94:d1:ad:14:
                    3a:03:b2:71:8e:14:96:0a:9b:b3:9c:ab:c3:49:f2:
                    ef:ba:a7:50:e4:aa:c5:70:50:26:aa:8c:f6:98:bc:
                    98:86:df:d9:d7:0a:80:91:87:21:78:01:81:16:d7:
                    33:9e:d9:49:25:aa:b9:61:86:87:70:ea:35:e0:87:
                    02:ae:48:f4:a5:78:aa:d0:d7:fa:ae:2a:85:9c:f3:
                    cd:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:3E:A5:87:0A:B5:73:56:CC:36:73:2A:D6:5D:FE:1D:18:50:F5:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0f49bf67-4789-3d9c-8233-e924afe35970.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:d5:9d:0f:ae:d4:60:37:d7:87:af:63:81:10:37:05:69:17:
         01:f1:95:33:46:07:88:68:32:ce:72:11:d9:80:52:75:12:6e:
         92:e3:4e:31:a3:ad:f6:3b:b2:db:ea:33:a8:f2:d9:6f:f8:5c:
         07:a0:d5:29:71:d0:c4:68:4e:11:03:7f:f9:74:9e:d6:8b:49:
         b6:a6:c1:7c:9d:a0:ba:d4:dc:4a:94:c6:ab:0f:c0:34:c7:fa:
         f8:7a:82:07:19:04:a3:e0:02:79:bb:7c:a8:6c:35:85:15:4d:
         30:30:d3:d6:a5:7f:10:49:f4:5c:40:4b:88:a2:81:50:ae:89:
         f2:df:c3:ea:8d:23:e8:08:22:5c:be:e2:60:8c:cd:22:17:51:
         04:c8:dc:64:bd:67:0a:32:23:ed:d5:72:fb:3e:5a:e1:7c:ec:
         81:98:8f:c5:11:2f:61:98:e2:cb:6a:a4:00:1c:7a:26:02:c7:
         09:81:fe:6f:b7:07:74:df:25:e7:ba:35:1a:c4:3b:de:e2:b0:
         05:6f:a2:ad:a5:8f:9f:a0:a9:4b:78:54:76:63:d0:6e:b1:3f:
         7c:fa:af:4a:0c:cb:cc:92:6a:30:53:d0:26:64:8a:08:12:89:
         f9:0d:ee:99:19:17:25:7a:66:4e:14:a3:4f:ba:d7:d9:1d:3c:
         9c:30:b3:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:41:45 2024 by rpki-client on console-ams.rpki-client.org