Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/14ed442b-e9c9-3ad5-8b75-d3b881f12623.roa
File:                     14ed442b-e9c9-3ad5-8b75-d3b881f12623.roa (raw, json)
Hash identifier:          4D0npcRTcHnyfZLR7T65BlgrnPRCyMChsVk+0yj4xzM=
Subject key identifier:   C6:96:D3:DF:4D:71:59:EE:BC:7A:4E:39:BF:50:E6:D5:8E:DD:FE:00
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858478FBF7213DEB7006E50030B00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/14ed442b-e9c9-3ad5-8b75-d3b881f12623.roa
Signing time:             Wed 16 Oct 2024 15:06:17 +0000
ROA not before:           Wed 16 Oct 2024 15:06:17 +0000
ROA not after:            Tue 14 Jan 2025 16:06:17 +0000
asID:                     44477
IP address blocks:        104.164.153.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8f:bf:72:13:de:b7:00:6e:50:03:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct 16 15:06:17 2024 GMT
            Not After : Jan 14 16:06:17 2025 GMT
        Subject: CN=0b21d333-2e2c-46b5-b636-61e1a129ff38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f8:ef:e6:90:ae:dc:47:33:7d:d9:5e:d9:5b:
                    9c:98:da:40:cf:c7:31:73:ca:1c:9f:4c:a5:68:fc:
                    8a:80:40:94:db:84:8c:5e:03:28:e1:68:82:b9:9c:
                    da:a5:8f:eb:e5:fe:af:d8:4b:16:c7:7f:68:1a:53:
                    bb:36:d6:0d:89:1d:66:3e:7f:52:73:bd:ea:9f:ff:
                    fb:d4:a7:79:2b:11:bb:17:1b:64:38:32:8a:66:ad:
                    53:02:89:c2:0b:4d:a7:51:29:c4:77:d4:e0:33:25:
                    b9:f5:3b:87:c0:44:de:1c:40:4c:24:bc:54:e6:94:
                    a1:0f:a3:3c:71:ff:8e:af:36:08:a2:45:ff:9b:6e:
                    ff:73:b8:65:10:7b:8b:9d:09:cb:25:ee:ba:9d:c4:
                    53:05:d7:82:23:32:e2:14:de:14:8d:e4:0d:6e:5f:
                    19:99:89:1e:5e:49:f3:d8:e0:a1:a9:10:29:85:cb:
                    b8:42:9b:bf:eb:69:93:d0:53:45:70:35:fc:89:5a:
                    c0:14:18:05:e3:35:77:c1:74:d6:88:03:b2:c7:74:
                    4e:a4:a3:1e:06:a5:fd:a0:63:cc:cf:6a:4a:ab:4f:
                    81:fa:6a:be:34:c2:63:8e:8a:92:4c:b3:0c:77:01:
                    2d:23:77:52:9b:48:5e:5a:43:32:da:9e:e2:d4:08:
                    45:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:96:D3:DF:4D:71:59:EE:BC:7A:4E:39:BF:50:E6:D5:8E:DD:FE:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/14ed442b-e9c9-3ad5-8b75-d3b881f12623.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:7e:9b:54:bf:a5:76:a5:01:b7:91:a9:be:3d:e8:75:cb:29:
         51:e5:d0:e2:23:f8:11:45:ad:b2:59:3a:bd:2a:cb:d3:fd:06:
         36:e8:cc:7e:38:9c:b3:b5:37:36:30:d1:5f:38:76:a8:7d:78:
         c4:13:31:25:3f:b2:f8:26:b1:a3:6a:50:c2:17:0d:cf:2b:ad:
         c3:95:8c:ba:1d:04:72:9f:dc:21:fd:0f:ca:d9:91:87:d6:66:
         42:77:73:5a:d6:84:58:8e:a0:88:08:e2:76:b6:87:aa:33:75:
         dd:56:b8:58:ce:7a:4d:54:02:5f:05:91:93:cd:aa:10:f4:41:
         9c:77:b4:e5:7f:d6:dc:54:79:8d:7e:44:db:0f:67:be:b8:ba:
         fc:21:f7:9b:ab:ff:31:68:fa:83:ad:37:f8:c4:18:f3:63:4e:
         97:dc:99:6f:b6:76:86:89:29:6e:65:e9:5b:d6:3a:40:ec:2c:
         34:8a:92:1c:f6:fb:5d:ed:b2:ad:c6:52:e1:e9:d6:c4:0c:33:
         ea:13:fe:d3:49:1b:71:9f:f3:3a:25:a5:69:83:9d:0f:ca:de:
         b0:60:ce:6d:c2:27:65:59:5b:f3:b6:06:f4:b0:0b:89:52:b7:
         1d:d3:d5:a8:00:bb:9c:71:46:21:24:0f:00:30:14:bc:77:18:
         99:d4:a6:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:25:55 2024 by rpki-client on console-fra.rpki-client.org