Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6d6414e5-1656-3bed-9398-5787e5fcfccd.roa
File:                     6d6414e5-1656-3bed-9398-5787e5fcfccd.roa (raw, json)
Hash identifier:          YpIjjPPZVV0FunY9BvbCY6TuxkmpI1bkYxkZhS1ARRU=
Subject key identifier:   CC:24:90:E6:EF:D3:84:C2:9A:65:E4:93:51:EC:1E:90:CF:DE:DE:5E
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285847CAACFACED61392B019B93240
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6d6414e5-1656-3bed-9398-5787e5fcfccd.roa
Signing time:             Wed 06 Nov 2024 17:41:46 +0000
ROA not before:           Wed 06 Nov 2024 17:41:46 +0000
ROA not after:            Tue 04 Feb 2025 17:41:46 +0000
asID:                     149440
IP address blocks:        192.177.76.0/24 maxlen: 24
                          192.177.171.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:ac:fa:ce:d6:13:92:b0:19:b9:32:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Nov  6 17:41:46 2024 GMT
            Not After : Feb  4 17:41:46 2025 GMT
        Subject: CN=c32f6301-4478-4b24-8e72-2367283aab15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fb:6a:18:63:10:0d:ae:b2:f4:5a:d5:9c:30:
                    74:8e:0d:11:99:6a:cd:d8:d3:e0:4d:2b:db:19:84:
                    ac:dd:84:7f:8c:2d:8c:0a:64:99:ba:aa:23:f8:8e:
                    67:33:80:9b:2e:22:63:72:9b:5a:4e:51:38:54:58:
                    9b:5e:e1:1f:8d:66:09:bc:68:5e:f2:8c:cb:f5:31:
                    17:63:47:a7:18:f6:98:a0:bc:d5:56:94:01:cd:f4:
                    03:ca:6e:11:a3:be:d3:ce:b2:1a:d4:c7:1f:f8:5b:
                    bc:7a:73:68:1f:a4:8d:a8:f9:bf:a2:09:ca:a8:12:
                    85:3a:3e:31:88:46:64:83:d0:70:53:de:04:00:ff:
                    39:ec:9d:52:4f:ad:db:86:3d:25:e1:39:8e:d0:9c:
                    f3:72:95:a7:00:dc:2f:12:10:a0:0e:e8:0c:fc:32:
                    0a:51:fe:e4:1c:72:00:ab:7e:96:58:e5:ef:91:37:
                    3f:f7:33:8b:f6:34:c5:35:1b:dc:d8:35:16:aa:6e:
                    7f:9f:f1:6d:b2:d6:d1:3e:fb:64:ed:a0:c4:92:2e:
                    8b:74:f2:75:aa:92:93:0d:cc:fa:0f:04:94:09:c0:
                    ad:ae:b0:f4:8a:1b:1d:48:d7:02:f5:68:6b:be:d0:
                    41:f9:d5:f9:97:41:25:7b:d1:fe:8a:e1:4a:0c:55:
                    d8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:24:90:E6:EF:D3:84:C2:9A:65:E4:93:51:EC:1E:90:CF:DE:DE:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6d6414e5-1656-3bed-9398-5787e5fcfccd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.177.76.0/24
                  192.177.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:9c:07:02:75:46:e9:ce:4e:69:7b:8b:f4:d0:09:a5:f2:d6:
         4a:cd:4a:a2:da:be:52:2a:36:12:5c:4e:7c:0d:ea:83:81:6f:
         40:fa:78:f0:bb:c5:7d:7b:07:2e:38:4e:0d:ed:95:9a:6d:b2:
         38:d1:dc:f2:9c:21:8b:b5:b4:9e:8e:68:6f:86:b6:f2:3a:c2:
         08:09:54:16:1f:bb:1a:99:37:8a:d3:77:df:93:02:91:3b:81:
         d5:0a:0f:07:56:b0:6f:a3:11:68:20:39:ac:13:f7:3c:9e:5f:
         0b:cf:05:fb:31:de:2b:26:e4:ca:eb:71:49:58:20:6a:51:d2:
         5c:02:db:b5:b8:0a:90:50:48:3c:41:51:90:ae:76:a0:be:97:
         de:d8:5d:13:1a:a0:06:ab:f3:f4:ee:a4:f9:54:41:d8:7d:bf:
         e7:41:2c:a7:53:71:0c:f1:8f:4e:79:e6:63:b6:0c:46:fd:32:
         ef:28:ca:b0:35:1b:26:e6:ce:3a:74:73:0f:c0:43:fa:bf:6f:
         5e:37:a5:73:f3:06:86:99:27:3b:7c:e8:4b:a7:40:61:dd:f0:
         bd:ed:9e:65:50:ea:36:56:e7:49:41:86:66:9d:0a:e1:db:35:
         ba:2d:8e:95:c7:44:4e:d4:dd:a5:8b:e6:21:a0:9a:15:c2:83:
         89:a1:7b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:25:58 2024 by rpki-client on console-fra.rpki-client.org