Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3e8207cd-745f-349b-88a8-1dbdaee62d41.roa
File:                     3e8207cd-745f-349b-88a8-1dbdaee62d41.roa (raw, json)
Hash identifier:          1vkWNjdFCT9lO6X3FwHURs3Q0eNvW9lv8uMfundFiyo=
Subject key identifier:   97:88:E4:DC:C9:9E:74:AA:02:47:61:7D:31:12:B6:BD:4C:2F:AC:9E
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285847E3A41658B359FD6D82A0DA40
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3e8207cd-745f-349b-88a8-1dbdaee62d41.roa
Signing time:             Fri 15 Nov 2024 16:19:04 +0000
ROA not before:           Fri 15 Nov 2024 16:19:04 +0000
ROA not after:            Thu 13 Feb 2025 16:19:04 +0000
asID:                     7029
IP address blocks:        104.253.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e3:a4:16:58:b3:59:fd:6d:82:a0:da:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Nov 15 16:19:04 2024 GMT
            Not After : Feb 13 16:19:04 2025 GMT
        Subject: CN=8b053e58-e99a-4303-a796-db322dae910a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:de:99:0c:4e:d1:d2:ba:1b:0a:02:b1:4a:cf:
                    d8:a8:d7:af:45:35:15:96:59:0d:c4:85:1f:e8:23:
                    14:31:c0:73:75:cd:23:08:fc:4c:14:71:30:26:4b:
                    52:4b:fd:ef:40:f6:d3:77:aa:59:ef:2b:ee:f0:de:
                    26:9a:2e:59:4c:ad:90:a5:04:53:19:4b:d7:18:ad:
                    e7:f6:59:d4:28:04:60:bb:3c:65:88:19:6c:01:d2:
                    95:45:17:a5:63:ac:ab:db:ea:ad:fc:2a:e8:8c:24:
                    d1:c4:47:b9:ee:4c:29:9e:30:0d:42:21:de:ef:1d:
                    f1:c6:05:75:a5:7c:06:78:77:09:ae:96:8c:33:a5:
                    f1:dd:31:13:11:73:f2:66:a5:bf:7e:08:b9:80:0e:
                    d6:d4:86:c8:fb:f9:05:37:ea:cb:66:f8:b7:68:95:
                    9e:fe:a4:b4:8f:22:b7:3a:71:a5:6b:05:50:80:dc:
                    08:31:7b:4b:4e:4e:77:5d:16:ed:a4:e3:8b:64:6a:
                    41:14:1d:35:1c:f8:ca:7c:ab:dc:72:be:66:e1:59:
                    61:92:63:2e:73:98:03:7b:f2:c6:a3:07:fc:ca:4a:
                    2d:39:52:2d:64:ca:fb:42:bc:c0:3a:1c:64:fd:98:
                    5d:2f:85:69:d4:27:44:af:c4:b1:7c:4d:01:c5:89:
                    c8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:88:E4:DC:C9:9E:74:AA:02:47:61:7D:31:12:B6:BD:4C:2F:AC:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3e8207cd-745f-349b-88a8-1dbdaee62d41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:3f:1f:a2:e2:0d:5e:21:28:76:1a:92:57:6a:17:3d:2c:25:
         3d:c7:9f:b0:54:4a:53:65:51:08:14:e6:ab:08:0d:0c:c2:bf:
         62:61:ff:96:ed:45:e0:b1:44:97:23:d2:d3:1a:9b:44:78:d5:
         1d:9d:c4:4d:81:7c:70:f1:1e:ba:49:b8:24:43:a0:7c:09:a1:
         85:05:88:f5:78:75:8b:ef:1e:3b:67:f9:a0:9c:1b:dc:67:41:
         5d:ef:e3:1a:c2:9c:f0:c6:98:97:e9:c1:34:dc:e9:e9:a2:d4:
         83:ba:fe:64:6d:bd:0a:a5:c2:bb:9c:ba:af:c9:22:0a:73:b4:
         23:df:eb:39:44:2a:2e:51:e6:c1:d7:ac:71:ef:ec:31:48:c7:
         71:8d:ea:4c:de:cf:36:bd:45:18:e0:4b:00:b5:e6:a6:ca:46:
         17:18:37:92:c7:31:1d:52:6d:b0:49:d3:d0:02:99:5a:79:ed:
         47:a5:75:db:b3:db:fb:73:a6:b5:86:c0:a0:02:86:02:f4:a9:
         2b:ea:80:fd:c8:51:77:07:a8:bd:23:37:24:3d:3b:a6:59:03:
         a1:1d:ba:7a:d4:73:c5:c9:39:7a:42:b8:cb:82:dc:36:5b:86:
         55:bf:58:61:55:e8:06:21:58:ea:d6:4a:b2:f4:8f:a7:6f:57:
         86:a4:c0:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:45:54 2024 by rpki-client on console-ams.rpki-client.org