Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/65dcc8e0-a4d9-336e-8273-b85fab9d85ed.roa
File:                     65dcc8e0-a4d9-336e-8273-b85fab9d85ed.roa (raw, json)
Hash identifier:          A85k1Bg+s4lUeqYQQdJgpAcOkmgcpaSnK/bPn3FO2kw=
Subject key identifier:   C3:E3:96:6B:89:BD:38:26:9A:EB:C1:CE:A1:77:68:91:CD:A1:7C:A2
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285847F1634654CA2B7EEC88272F80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/65dcc8e0-a4d9-336e-8273-b85fab9d85ed.roa
Signing time:             Wed 20 Nov 2024 14:29:47 +0000
ROA not before:           Wed 20 Nov 2024 14:29:47 +0000
ROA not after:            Tue 18 Feb 2025 14:29:47 +0000
asID:                     48031
IP address blocks:        45.38.225.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f1:63:46:54:ca:2b:7e:ec:88:27:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Nov 20 14:29:47 2024 GMT
            Not After : Feb 18 14:29:47 2025 GMT
        Subject: CN=b90defc6-e8ff-4f70-972f-f323d12fe32f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c6:a4:3a:c9:6b:ac:08:e5:d5:f8:a8:93:99:
                    0d:26:36:b6:38:e3:49:5a:41:20:a9:db:a1:08:86:
                    7d:44:38:49:33:dd:c9:c5:50:1b:bd:02:c0:59:a0:
                    85:81:88:f5:36:0b:a7:84:73:b9:9c:2c:95:48:29:
                    19:c3:c0:18:11:0c:f5:a0:6b:07:90:a7:7b:43:27:
                    0c:89:b8:8f:47:0c:8a:c2:54:2a:18:b3:82:c4:ca:
                    1c:12:9f:05:11:12:d8:3c:76:a6:de:a7:d9:bc:85:
                    9a:16:41:9d:9d:4b:b9:a8:67:49:88:6c:5b:c0:a6:
                    05:6a:76:49:3f:19:18:29:8f:20:cb:3e:73:bf:17:
                    2e:c3:da:47:c7:f3:cd:53:d3:45:43:a2:11:27:ab:
                    cf:21:2a:39:8d:78:e0:5d:25:86:2b:0e:c1:ae:0c:
                    a4:15:11:6a:e7:ee:a0:e2:8a:e3:e3:a6:85:37:21:
                    e2:5d:d6:68:4a:37:21:4c:74:bc:1e:78:c5:7a:50:
                    12:79:b0:3d:2c:9e:e9:0b:7d:d5:f8:65:a4:32:2a:
                    f6:a9:76:8d:cb:17:62:ab:93:73:bd:94:a8:3c:67:
                    e2:8b:ed:33:3b:7d:ee:f8:85:34:48:bc:b1:c1:b6:
                    8d:f6:8d:54:58:86:2f:7c:1b:dc:c5:8b:c2:e7:81:
                    2c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:E3:96:6B:89:BD:38:26:9A:EB:C1:CE:A1:77:68:91:CD:A1:7C:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/65dcc8e0-a4d9-336e-8273-b85fab9d85ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:e8:14:0f:92:80:34:88:bc:25:05:8c:b3:62:d7:4c:9b:34:
         b1:06:24:1e:b4:2d:08:55:d9:0d:57:8a:6b:29:35:3a:50:e3:
         51:b4:6c:98:a4:be:68:de:e2:38:5d:b7:bd:f1:f8:80:f5:65:
         e2:cc:5e:66:4c:bc:4f:72:a6:a0:42:97:37:8c:2c:11:4a:fd:
         40:ad:f4:65:ea:75:87:0c:86:8e:b7:00:a2:54:4a:18:45:cb:
         77:71:51:5b:84:6c:2b:c6:aa:f2:bf:46:e8:8f:bb:29:33:c1:
         0d:f1:e5:21:73:3d:41:67:a2:d3:3a:18:0c:54:5d:37:6b:40:
         bd:03:08:a7:0f:bc:ec:57:22:40:19:33:f1:68:42:6f:7e:ae:
         11:d3:5b:32:04:cd:c0:41:8a:05:96:93:88:c4:44:89:2e:1f:
         79:47:af:71:3e:b6:e1:7c:76:52:99:4d:9d:c3:f6:7e:bd:5e:
         c9:12:7a:54:f8:d4:c4:27:59:7c:be:88:ab:23:8f:5b:07:84:
         38:c4:39:ae:3f:f4:e6:cb:3b:34:99:0a:4a:84:8d:12:df:09:
         f6:13:54:6b:8f:38:73:61:ee:0d:7b:a8:63:68:e7:6a:0c:89:
         b9:09:e7:f3:93:c0:b8:81:ed:a7:2d:73:32:d0:61:41:fd:d0:
         d9:e7:3e:97
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxY0ZUyit+7IgnL4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI0MTEyMDE0Mjk0N1oXDTI1MDIxODE0Mjk0N1owLzEtMCsGA1UEAxMk
YjkwZGVmYzYtZThmZi00ZjcwLTk3MmYtZjMyM2QxMmZlMzJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8akOslrrAjl1fiok5kNJja2OONJWkEgqduh
CIZ9RDhJM93JxVAbvQLAWaCFgYj1NgunhHO5nCyVSCkZw8AYEQz1oGsHkKd7QycM
ibiPRwyKwlQqGLOCxMocEp8FERLYPHam3qfZvIWaFkGdnUu5qGdJiGxbwKYFanZJ
PxkYKY8gyz5zvxcuw9pHx/PNU9NFQ6IRJ6vPISo5jXjgXSWGKw7BrgykFRFq5+6g
4orj46aFNyHiXdZoSjchTHS8HnjFelASebA9LJ7pC33V+GWkMir2qXaNyxdiq5Nz
vZSoPGfii+0zO33u+IU0SLyxwbaN9o1UWIYvfBvcxYvC54EslQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMPjlmuJvTgmmuvBzqF3aJHNoXyiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNjVkY2M4ZTAtYTRkOS0z
MzZlLTgyNzMtYjg1ZmFiOWQ4NWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSbhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJDoFA+SgDSIvCUFjLNi10ybNLEGJB60LQhV2Q1XimspNTpQ41G0bJik
vmje4jhdt73x+ID1ZeLMXmZMvE9ypqBClzeMLBFK/UCt9GXqdYcMho63AKJUShhF
y3dxUVuEbCvGqvK/RuiPuykzwQ3x5SFzPUFnotM6GAxUXTdrQL0DCKcPvOxXIkAZ
M/FoQm9+rhHTWzIEzcBBigWWk4jERIkuH3lHr3E+tuF8dlKZTZ3D9n69XskSelT4
1MQnWXy+iKsjj1sHhDjEOa4/9ObLOzSZCkqEjRLfCfYTVGuPOHNh7g17qGNo52oM
ibkJ5/OTwLiB7actczLQYUH90NnnPpc=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:25:58 2024 by rpki-client on console-fra.rpki-client.org