Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/40f220f8-666d-38bc-9193-ce9c51f944a1.roa
File:                     40f220f8-666d-38bc-9193-ce9c51f944a1.roa (raw, json)
Hash identifier:          vDtE7q3UfFrUZq9BBcOAiVplhHPSZzKx6QUS/l+z4tw=
Subject key identifier:   27:A9:60:45:38:2A:CE:60:6C:98:B3:94:6B:95:14:BE:52:27:52:F5
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285847F11D06E570FB276F9DA90500
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/40f220f8-666d-38bc-9193-ce9c51f944a1.roa
Signing time:             Wed 20 Nov 2024 12:08:15 +0000
ROA not before:           Wed 20 Nov 2024 12:08:15 +0000
ROA not after:            Tue 18 Feb 2025 12:08:15 +0000
asID:                     44893
IP address blocks:        142.252.202.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f1:1d:06:e5:70:fb:27:6f:9d:a9:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Nov 20 12:08:15 2024 GMT
            Not After : Feb 18 12:08:15 2025 GMT
        Subject: CN=da2c2dd9-4d9e-43e3-9587-97731a4e7d42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fd:23:36:c6:da:b6:35:4f:e5:56:35:02:d3:
                    c5:9f:50:f8:58:6a:71:5d:dc:50:dc:bc:33:7c:ab:
                    3e:67:4b:d1:c2:c1:5f:a3:f5:b5:8c:ef:d0:4e:b2:
                    ec:3a:50:e7:cd:a5:20:a9:29:34:a0:f5:8b:af:4d:
                    22:4a:be:e6:88:f3:8c:c6:ad:2f:28:f0:1b:2a:1b:
                    e5:cc:90:80:7a:d5:d0:88:61:54:bc:b0:39:aa:77:
                    98:55:3a:76:24:64:e2:30:48:cd:a4:b6:6c:cf:c2:
                    ce:12:3e:a8:38:e6:98:74:60:bb:91:f6:c8:85:e0:
                    fa:2b:0b:06:34:d0:d7:ef:dd:b4:e5:c7:08:97:3b:
                    3a:00:dd:e4:ca:a7:11:04:9a:74:08:b9:00:d5:71:
                    9f:45:0e:3e:c7:36:19:3f:07:03:6d:c1:64:ee:39:
                    df:bf:50:5f:0c:49:24:80:7d:7b:b0:92:f3:98:72:
                    29:af:ea:ac:9c:c2:07:82:32:0a:81:53:a2:05:84:
                    c5:18:c9:c6:f6:9b:1b:26:c6:ea:35:da:37:21:38:
                    6c:c5:42:7d:9f:ec:26:89:2e:5b:87:d5:50:2a:5e:
                    e8:89:04:6d:22:ef:7f:af:8a:09:b1:f6:72:74:53:
                    8c:a4:36:3b:b6:bb:29:1b:bd:c4:76:3c:24:f2:d6:
                    24:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:A9:60:45:38:2A:CE:60:6C:98:B3:94:6B:95:14:BE:52:27:52:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/40f220f8-666d-38bc-9193-ce9c51f944a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:8c:6e:a3:7a:21:4d:eb:05:18:46:ef:0a:cf:29:d1:d6:2f:
         9f:2f:34:a9:b8:f1:c4:14:3d:d5:8f:91:85:88:82:6a:08:fa:
         41:bb:af:70:b5:a6:4a:62:2c:07:af:f1:fa:3c:ee:cc:7e:2c:
         f4:1e:69:f4:59:cc:1c:43:48:1c:80:50:0b:da:70:c4:ef:5c:
         47:36:cf:b1:4e:22:9b:75:18:36:c2:22:df:bd:3b:60:bc:00:
         ca:b3:ac:6e:6c:6e:7d:d6:dd:42:f5:10:a2:f6:34:8a:5c:35:
         ba:d8:6a:ca:f8:08:86:b5:b1:2d:52:b0:3c:48:28:4e:73:d8:
         1a:ec:16:8d:c6:30:8f:46:4c:bf:a3:eb:6b:50:b0:24:b1:aa:
         67:8e:11:cc:dc:26:95:1a:66:6c:6d:e0:31:0c:02:d7:16:8b:
         4c:56:7d:69:f1:bd:73:9f:18:72:66:79:66:dc:91:e1:27:43:
         ed:57:bf:47:f5:d6:b9:ac:b3:fb:f0:17:ec:7a:72:40:96:83:
         08:e0:0c:87:0f:6f:e5:e2:42:09:ee:21:98:1e:45:a2:0a:6a:
         1d:d8:8a:0c:55:52:cf:69:55:30:8b:a4:3f:d3:0f:e6:07:c9:
         c9:5b:a3:65:9e:44:9a:9f:43:6e:b0:06:18:b5:5c:74:23:b2:
         d2:e0:2c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:25:57 2024 by rpki-client on console-fra.rpki-client.org