Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/29b0cff3-6e51-3a3d-bc91-ef40530d24fa.roa
File:                     29b0cff3-6e51-3a3d-bc91-ef40530d24fa.roa (raw, json)
Hash identifier:          S6npHFesutHboCUgN6BXm38a63HCodTRqkVYNjiv8UA=
Subject key identifier:   F2:06:18:93:6B:0E:1D:C2:68:E9:8A:50:F2:FA:4E:4C:0E:B3:7D:8F
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285847E3AEF5A8A3A19EFC19ECF280
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/29b0cff3-6e51-3a3d-bc91-ef40530d24fa.roa
Signing time:             Fri 15 Nov 2024 16:40:58 +0000
ROA not before:           Fri 15 Nov 2024 16:40:58 +0000
ROA not after:            Thu 13 Feb 2025 16:40:58 +0000
asID:                     7922
IP address blocks:        45.38.208.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e3:ae:f5:a8:a3:a1:9e:fc:19:ec:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Nov 15 16:40:58 2024 GMT
            Not After : Feb 13 16:40:58 2025 GMT
        Subject: CN=a21b90b1-7b4a-4cfb-9413-356a9f9a9051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ef:cd:6c:49:ab:b4:5e:f7:a9:bc:c7:93:80:
                    9f:79:a5:31:85:3b:c8:c8:63:91:9e:94:5b:e0:40:
                    80:02:bd:12:77:a5:50:f5:5d:34:e0:63:ad:f2:86:
                    ca:d1:c1:33:62:30:b1:23:7a:d8:6e:00:a5:9f:ef:
                    56:4d:fd:dc:46:6c:bf:00:ee:2d:95:d3:7a:51:de:
                    14:fb:5a:0d:7e:ba:05:56:86:a3:37:80:c6:53:cd:
                    b7:00:52:90:e9:f2:57:93:3c:9c:6e:77:e5:a7:11:
                    4e:24:93:a4:00:b7:0a:dc:bf:5d:a5:c5:21:18:f0:
                    97:05:3a:06:ca:5f:82:05:a5:68:01:f8:74:76:79:
                    f2:d7:2e:0d:d6:c6:5b:ca:83:00:e3:19:75:cb:39:
                    4a:34:c3:c2:4d:5b:d8:de:d3:c5:1a:4f:68:0a:57:
                    a2:77:b5:b5:c6:6d:eb:1f:ff:82:ee:78:1d:3b:3b:
                    90:73:a2:03:10:2c:ea:13:18:9c:6a:04:c2:89:5a:
                    af:0b:bc:70:50:7e:a7:69:3d:34:17:44:e4:ea:4b:
                    b7:4f:18:b5:6e:2b:41:12:ae:2c:e2:8d:a9:ff:95:
                    d8:7a:8f:fb:7c:de:ff:bc:ae:9b:5d:f2:50:4f:20:
                    53:89:4a:41:32:ad:72:bc:8d:f9:57:7d:3b:1c:42:
                    40:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:06:18:93:6B:0E:1D:C2:68:E9:8A:50:F2:FA:4E:4C:0E:B3:7D:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/29b0cff3-6e51-3a3d-bc91-ef40530d24fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:8a:08:0a:81:a3:89:81:02:f2:94:da:61:12:cb:98:cc:f3:
         9d:f7:de:e4:b9:5b:59:21:4a:59:f2:97:25:be:aa:4a:f0:b0:
         b7:d8:2e:14:25:dd:d0:10:b6:30:be:e0:8b:b6:de:1b:b1:b4:
         6e:3e:99:71:44:7c:6e:6d:a1:31:7d:7c:cf:7b:66:27:27:42:
         7b:f0:19:08:7d:0c:b7:09:e0:ff:2d:28:eb:77:1a:71:e5:68:
         29:41:a2:b0:42:a3:20:ce:17:6d:5f:58:c3:b9:2f:06:ec:44:
         41:79:8a:9c:c2:c4:80:be:3a:18:98:26:d0:3a:ab:2c:30:a1:
         96:cd:5b:ec:10:b7:0d:76:89:4e:1c:e1:cb:d2:91:92:2f:01:
         3d:02:44:7e:0e:83:94:ab:da:55:f1:04:e4:25:fa:ce:f1:21:
         6b:f1:75:06:34:58:33:97:0f:b1:3e:44:46:83:ee:d3:c2:79:
         f1:a5:17:77:90:e7:3c:6a:62:3d:73:0f:7c:f6:0b:95:8a:a1:
         60:10:9e:30:ff:65:b9:1a:df:ad:0b:ba:22:b4:ee:4d:3c:d6:
         e3:de:43:27:34:c5:e7:1c:e5:80:7c:74:fa:f1:63:c2:05:d4:
         0c:18:b5:38:91:2b:6e:77:4d:bf:01:6c:8f:e3:ab:e0:e3:b0:
         67:67:7d:5a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfjrvWoo6Ge/Bns8oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI0MTExNTE2NDA1OFoXDTI1MDIxMzE2NDA1OFowLzEtMCsGA1UEAxMk
YTIxYjkwYjEtN2I0YS00Y2ZiLTk0MTMtMzU2YTlmOWE5MDUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+/NbEmrtF73qbzHk4CfeaUxhTvIyGORnpRb
4ECAAr0Sd6VQ9V004GOt8obK0cEzYjCxI3rYbgCln+9WTf3cRmy/AO4tldN6Ud4U
+1oNfroFVoajN4DGU823AFKQ6fJXkzycbnflpxFOJJOkALcK3L9dpcUhGPCXBToG
yl+CBaVoAfh0dnny1y4N1sZbyoMA4xl1yzlKNMPCTVvY3tPFGk9oCleid7W1xm3r
H/+C7ngdOzuQc6IDECzqExicagTCiVqvC7xwUH6naT00F0Tk6ku3Txi1bitBEq4s
4o2p/5XYeo/7fN7/vK6bXfJQTyBTiUpBMq1yvI35V307HEJAZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPIGGJNrDh3CaOmKUPL6TkwOs32PMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMjliMGNmZjMtNmU1MS0z
YTNkLWJjOTEtZWY0MDUzMGQyNGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSbQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACmKCAqBo4mBAvKU2mESy5jM85333uS5W1khSlnylyW+qkrwsLfYLhQl
3dAQtjC+4Iu23huxtG4+mXFEfG5toTF9fM97ZicnQnvwGQh9DLcJ4P8tKOt3GnHl
aClBorBCoyDOF21fWMO5LwbsREF5ipzCxIC+OhiYJtA6qywwoZbNW+wQtw12iU4c
4cvSkZIvAT0CRH4Og5Sr2lXxBOQl+s7xIWvxdQY0WDOXD7E+REaD7tPCefGlF3eQ
5zxqYj1zD3z2C5WKoWAQnjD/Zbka360LuiK07k081uPeQyc0xecc5YB8dPrxY8IF
1AwYtTiRK253Tb8BbI/jq+DjsGdnfVo=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:45:50 2024 by rpki-client on console-ams.rpki-client.org