Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/33da125d-1a99-37fa-88bb-df1ae5abd926.roa
File:                     33da125d-1a99-37fa-88bb-df1ae5abd926.roa (raw, json)
Hash identifier:          Wc43kkuUzke6vXSUYXasTqc80b1wekxu4wXRBemrQMg=
Subject key identifier:   ED:9D:00:7E:DF:8A:CD:DA:D0:01:71:CF:90:2A:49:4F:EF:D0:34:9A
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858472B7C54C892CCBD0F23696C00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/33da125d-1a99-37fa-88bb-df1ae5abd926.roa
Signing time:             Tue 10 Sep 2024 17:10:13 +0000
ROA not before:           Tue 10 Sep 2024 17:10:13 +0000
ROA not after:            Mon 09 Dec 2024 18:10:13 +0000
asID:                     6830
IP address blocks:        104.253.170.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:7c:54:c8:92:cc:bd:0f:23:69:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 10 17:10:13 2024 GMT
            Not After : Dec  9 18:10:13 2024 GMT
        Subject: CN=7d7f2593-e014-45c2-bae0-96d95fd765af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:46:0c:f1:02:f3:c5:98:d5:16:f5:37:0a:6b:
                    43:84:54:e7:4f:06:3d:2c:3b:92:15:f9:52:e2:24:
                    0a:c9:ec:d7:8b:ca:91:e7:dd:dc:ec:18:03:35:04:
                    ef:0f:f8:17:8c:27:30:04:b4:cb:10:c3:23:a1:1f:
                    05:5b:60:b0:b5:4f:fa:fb:0c:0b:60:f2:7a:98:64:
                    13:8e:ce:b5:df:67:eb:fd:97:f7:ce:5c:da:3e:ee:
                    bb:5c:9a:a4:2f:ff:b4:37:6a:fc:6a:1f:f5:10:16:
                    bd:7e:75:07:a0:cb:d0:ef:18:ad:ec:e4:5d:08:f9:
                    bd:61:5e:dd:a8:75:f9:a5:d4:d3:9d:e7:c3:01:ec:
                    4a:48:45:2e:ff:40:0b:44:b3:b2:1e:b7:1c:d9:4d:
                    b6:84:a3:65:3e:f8:91:1d:d4:0c:9f:b8:87:1a:53:
                    d3:6b:20:33:b6:46:ba:af:c6:e2:81:18:53:8a:cc:
                    de:37:b7:fa:36:8c:d3:2d:aa:74:6d:cd:92:84:c6:
                    98:c9:c0:0c:75:51:78:6f:bd:de:1a:dd:ee:dd:b3:
                    fc:28:1a:c9:2d:5e:88:b4:e0:3b:5f:59:10:48:06:
                    1c:9b:0c:5c:fd:0e:ca:71:9c:12:e4:48:d2:b8:a0:
                    65:c5:c6:85:a6:cd:50:61:8a:9f:a3:e8:0c:6a:5f:
                    03:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:9D:00:7E:DF:8A:CD:DA:D0:01:71:CF:90:2A:49:4F:EF:D0:34:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/33da125d-1a99-37fa-88bb-df1ae5abd926.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:62:4c:36:70:eb:c9:85:78:56:b7:83:f8:5d:05:35:3c:da:
         c9:55:2a:b3:80:a6:53:dc:56:45:f2:3f:29:14:b0:08:4f:24:
         90:92:7c:6c:f8:c4:cd:a3:6c:a1:b6:fc:22:93:76:d2:03:c1:
         70:11:83:00:84:88:ae:18:cc:43:43:4c:83:cd:26:a5:79:12:
         e9:a6:38:5e:5e:d8:d5:c5:0d:bb:76:cc:a8:d9:da:12:7b:48:
         f5:29:cd:67:a9:1b:b0:04:cb:98:7b:6d:24:0a:bd:3c:ad:8d:
         70:a9:84:b4:99:e9:7e:a1:e1:ff:db:61:05:d5:be:c6:61:1a:
         5c:4b:b4:72:1a:8d:d3:bd:e4:4e:45:e8:e4:20:0e:85:17:a0:
         7f:63:d2:2f:bc:21:b7:cb:1d:df:64:84:c0:19:ea:3a:8f:32:
         8e:d5:91:22:be:ee:3b:b3:be:26:44:54:ea:ef:9f:c0:1e:ae:
         5f:fb:85:e1:43:cf:2c:29:af:2a:a4:fd:63:8f:62:3b:1e:ec:
         30:ab:80:0d:ab:78:da:4d:09:ad:9c:d8:32:fb:dc:d8:39:6a:
         9b:0a:ee:29:c3:80:69:4b:2d:73:1d:6d:bd:fd:2e:5e:06:d8:
         27:21:68:e1:a9:a3:fb:c2:c4:3d:e8:e7:72:dc:53:d1:ca:75:
         d8:44:69:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:41:47 2024 by rpki-client on console-ams.rpki-client.org