Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3b466e38-9c91-3560-92c0-157c3018c8c6.roa
File:                     3b466e38-9c91-3560-92c0-157c3018c8c6.roa (raw, json)
Hash identifier:          roz0PY+Mo2n9rm7xOl5KPXGBmQHQbp7LK3hRfF5Q+Ao=
Subject key identifier:   AC:FA:FD:78:52:71:4B:0E:84:89:4A:8D:D8:CE:E6:CC:DD:C6:3F:1A
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285847EE8235DDE1AEC7330B49E880
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3b466e38-9c91-3560-92c0-157c3018c8c6.roa
Signing time:             Tue 19 Nov 2024 13:44:42 +0000
ROA not before:           Tue 19 Nov 2024 13:44:42 +0000
ROA not after:            Mon 17 Feb 2025 13:44:42 +0000
asID:                     16509
IP address blocks:        192.177.85.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ee:82:35:dd:e1:ae:c7:33:0b:49:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Nov 19 13:44:42 2024 GMT
            Not After : Feb 17 13:44:42 2025 GMT
        Subject: CN=b85b47a9-b111-4f8e-9a45-7b0953fa3b14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:61:1b:59:fe:f9:e7:a1:17:55:f5:26:20:89:
                    35:b6:1b:a8:d7:39:df:08:02:05:10:4c:5f:16:ee:
                    65:56:ca:b0:7c:fc:15:22:44:1a:ae:99:f6:bd:32:
                    9b:15:98:63:34:47:18:7b:c8:d9:cc:69:54:66:d1:
                    88:40:57:c3:91:f2:f9:8c:b5:60:06:e0:34:e6:dd:
                    fc:4f:2b:13:f7:c9:b5:a7:f1:09:0f:b1:cb:52:ec:
                    56:0e:3c:80:a7:9b:e6:6b:a7:33:5d:1f:87:e5:4d:
                    ea:16:2e:ca:33:d9:26:15:5a:05:8b:61:52:1c:b9:
                    42:a2:88:eb:63:b4:d5:cd:8c:30:fb:87:03:c3:98:
                    8a:c7:8c:8a:ba:c6:3d:b4:ab:97:7a:ed:70:37:ef:
                    d8:0b:1a:01:e3:09:f2:3b:79:88:4d:7c:64:e7:ff:
                    fa:e6:7b:90:50:8b:d2:39:b8:72:e7:fe:88:07:6c:
                    f5:54:d2:96:36:c8:d9:b3:1f:4c:23:12:9c:cb:57:
                    67:c2:94:b6:11:50:ae:23:b3:49:73:7b:c9:d3:b7:
                    52:b2:4c:87:15:92:25:35:b9:cc:de:26:ba:38:ef:
                    35:fe:69:c6:ca:00:3e:f6:dd:0c:17:20:63:dd:7f:
                    f9:0d:0e:f4:bc:17:b1:78:80:1c:86:b7:1c:1e:af:
                    95:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:FA:FD:78:52:71:4B:0E:84:89:4A:8D:D8:CE:E6:CC:DD:C6:3F:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3b466e38-9c91-3560-92c0-157c3018c8c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.177.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:64:a7:c7:22:1b:3e:73:c1:9e:ff:99:c1:62:18:61:58:3c:
         6d:7e:23:06:36:13:27:f1:f3:d0:28:7b:70:67:92:ef:47:c3:
         c3:89:8d:55:4a:89:ff:bc:a1:35:89:8f:3c:85:e1:f7:1f:de:
         cf:18:37:b6:70:5f:f3:d9:81:bf:34:64:24:44:79:ea:e0:61:
         0b:9a:9f:74:68:32:df:92:82:d4:45:74:18:ce:ea:9b:52:ea:
         6e:58:94:a8:54:47:81:40:57:32:3a:d8:d6:45:34:26:86:77:
         b0:0e:cc:3c:9f:2c:fe:10:e6:62:e5:40:a0:f0:5c:c9:df:65:
         aa:ab:a4:60:24:ab:29:82:c2:24:28:4e:7a:d0:ef:08:5d:72:
         1d:48:78:1d:85:75:d1:70:64:08:f2:d7:fd:22:64:37:5e:24:
         ef:a0:b2:94:6b:d4:b6:7e:3b:b8:f8:2f:b0:29:e7:64:a8:60:
         b9:0e:57:54:10:2d:44:9a:56:94:46:97:17:64:4b:f1:e0:18:
         da:61:56:4e:eb:32:3e:d2:c3:86:81:da:ce:1f:c6:dd:0b:82:
         42:bd:81:6e:23:ec:44:70:35:16:d2:d3:f1:ba:66:ac:be:3b:
         fc:49:bc:20:77:c1:ab:d8:74:22:7f:a3:3b:b7:30:24:f2:50:
         a4:5c:ee:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:33 2024 by rpki-client on console-fra.rpki-client.org