Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/40db65b2-c774-3d4a-a6c3-96eb4b10c1c4.roa
File:                     40db65b2-c774-3d4a-a6c3-96eb4b10c1c4.roa (raw, json)
Hash identifier:          J1vxM1F+lKe3+8k33ES25vpgGqE87aS43hNu8N35Ilo=
Subject key identifier:   13:95:1E:FA:1F:0E:D8:F9:61:0F:6D:C9:20:01:FB:B9:75:51:FC:24
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285845871E3B279C4E10D8193F9DC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/40db65b2-c774-3d4a-a6c3-96eb4b10c1c4.roa
Signing time:             Sat 13 Apr 2024 03:21:07 +0000
ROA not before:           Sat 13 Apr 2024 03:21:07 +0000
ROA not after:            Fri 12 Jul 2024 03:21:07 +0000
asID:                     13213
IP address blocks:        45.38.236.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:87:1e:3b:27:9c:4e:10:d8:19:3f:9d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 13 03:21:07 2024 GMT
            Not After : Jul 12 03:21:07 2024 GMT
        Subject: CN=857f2081-d12a-4556-bd06-b35152108f7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:86:14:cc:99:df:1e:4d:5f:3a:b2:02:b5:88:
                    53:41:e1:09:e9:69:09:15:26:d6:84:50:df:58:ba:
                    45:8a:55:5d:5e:41:37:89:7a:4b:09:aa:01:1c:db:
                    52:cf:78:6f:63:b8:2f:ca:db:4e:cf:58:45:97:c3:
                    56:c5:c1:03:86:57:59:35:eb:75:67:2c:d1:d6:74:
                    af:8d:c5:41:fd:c8:ec:4c:83:d8:25:12:37:f1:b2:
                    9b:54:60:91:9a:80:1c:1b:b8:43:6e:65:b9:7a:c8:
                    b7:f2:98:a0:00:62:bc:9a:ae:4d:6e:f1:c1:46:69:
                    ae:c2:fe:10:7d:dd:d6:3e:b5:48:ed:59:2b:d6:e1:
                    f2:11:41:d8:b2:84:5a:ef:4b:19:f4:bd:8b:b7:7e:
                    62:ca:01:d2:9d:c7:60:b8:c1:a7:6f:96:ec:e9:26:
                    56:85:03:10:d7:36:8e:9c:49:c6:55:8a:4b:77:20:
                    e1:9c:b0:ee:8c:bd:53:86:5d:67:ba:08:e5:45:78:
                    1c:a4:1e:ca:b1:a4:45:1a:03:63:e1:9b:18:51:eb:
                    99:60:f3:ee:42:77:cc:f2:84:a3:1d:33:36:e9:62:
                    eb:94:94:14:35:7b:23:ea:cf:b4:db:4d:13:14:b7:
                    de:e3:93:f8:31:86:a2:2a:87:a0:1a:58:6f:61:77:
                    ca:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:95:1E:FA:1F:0E:D8:F9:61:0F:6D:C9:20:01:FB:B9:75:51:FC:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/40db65b2-c774-3d4a-a6c3-96eb4b10c1c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:4b:d4:33:1c:af:7c:5b:4e:59:55:ca:d6:c7:ce:ac:43:0d:
         55:8e:0b:25:57:58:fe:c9:92:86:fd:1f:92:6c:2e:2d:e1:1a:
         85:56:80:05:15:7b:c1:71:83:14:ed:71:5b:f6:4f:20:02:cd:
         6b:76:f0:dc:c5:2d:44:eb:4d:bc:fc:7b:11:f8:ab:be:f7:e5:
         20:3c:83:69:72:64:7d:08:94:97:fa:ee:57:eb:9c:6c:15:43:
         15:86:80:30:64:b2:45:0b:2b:b3:b6:2a:c4:e8:14:69:14:34:
         5a:b3:6e:8b:a9:32:3f:23:d2:d5:af:b9:10:42:d9:55:bc:57:
         05:fb:a3:7a:9a:aa:01:04:28:5a:47:be:79:f0:a2:58:d0:7d:
         0f:78:e1:98:ce:a5:b7:c9:22:a9:18:79:04:80:1a:c7:a1:14:
         f3:c9:73:08:0b:28:1d:57:1f:ad:4e:3c:23:b7:a5:bf:bd:28:
         44:84:26:8a:73:6c:80:cb:06:dc:65:d6:fb:11:10:d3:0a:89:
         89:f5:ee:41:ea:71:9a:9a:76:44:90:d0:da:ae:ab:b0:fb:7c:
         73:f4:cb:c7:ca:d2:37:34:ab:f1:90:97:00:8a:94:c9:e1:f5:
         49:51:f8:0b:a6:6b:a9:60:3d:f3:81:7c:78:e3:35:dc:2d:60:
         51:9d:bf:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 07:04:31 2024 by rpki-client on console-ams.rpki-client.org