Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6fa84370-a981-3591-9e15-d3d00ce3b16e.roa
File:                     6fa84370-a981-3591-9e15-d3d00ce3b16e.roa (raw, json)
Hash identifier:          2PPf4B13/jxyj/GPWsm/skSuWVn/no/j+TJNEf2K0g0=
Subject key identifier:   07:E2:A2:74:0A:3A:7B:C3:77:19:42:8D:92:69:68:9D:59:4D:39:2F
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285847E620C811089C4B9A6F0E4880
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6fa84370-a981-3591-9e15-d3d00ce3b16e.roa
Signing time:             Sat 16 Nov 2024 13:41:55 +0000
ROA not before:           Sat 16 Nov 2024 13:41:55 +0000
ROA not after:            Fri 14 Feb 2025 13:41:55 +0000
asID:                     10557
IP address blocks:        104.252.9.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:20:c8:11:08:9c:4b:9a:6f:0e:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Nov 16 13:41:55 2024 GMT
            Not After : Feb 14 13:41:55 2025 GMT
        Subject: CN=6254e31d-d77f-4e1d-92ff-e1f4bf561326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:4f:20:31:ac:14:e9:7f:5d:16:d4:44:bd:27:
                    65:c5:aa:7f:1f:c3:1f:e6:37:4e:68:2a:51:d2:61:
                    54:d6:4d:d7:3d:64:19:fd:63:ed:b8:89:92:6b:8a:
                    95:dd:73:7e:80:90:e6:58:27:74:6c:0b:85:ac:68:
                    60:4f:fa:94:06:5f:38:2c:7f:f0:19:02:99:31:3d:
                    42:f2:2e:75:a9:8d:96:1d:1e:3d:5a:32:99:92:05:
                    9c:c5:cc:1d:08:49:4d:e4:07:43:f6:8d:8b:09:ea:
                    e0:92:f8:28:06:47:58:9e:3e:b6:b3:ef:8e:c0:29:
                    ed:d5:be:e8:74:67:03:14:71:5c:21:79:63:d4:03:
                    c3:47:d1:a1:06:a8:86:c2:b9:d4:db:82:9f:37:04:
                    24:c8:26:60:87:11:72:1b:0c:d7:17:70:53:45:32:
                    13:8a:76:08:11:80:31:97:e1:b0:23:29:ab:b6:c8:
                    dc:8f:c6:e9:bd:fc:6b:43:16:74:72:98:be:df:50:
                    cf:4e:14:98:cf:63:0f:35:fb:59:db:89:27:b0:0e:
                    4a:fb:1e:de:0e:a7:a8:8e:ce:0d:de:b6:6d:da:d3:
                    f4:55:a4:30:1b:50:7f:d7:51:47:a1:07:be:4e:43:
                    c5:9a:51:6c:03:fc:b0:3a:5a:ad:6a:24:bc:bf:85:
                    ac:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:E2:A2:74:0A:3A:7B:C3:77:19:42:8D:92:69:68:9D:59:4D:39:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6fa84370-a981-3591-9e15-d3d00ce3b16e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:7d:8d:e9:9e:30:f5:d2:57:f7:05:03:7c:d2:fb:8c:04:8c:
         ee:55:60:0f:87:5f:8f:ff:fc:99:d5:8a:47:5e:87:af:be:5b:
         e4:98:b4:0f:5c:63:8d:ce:24:5b:a9:5f:aa:93:03:41:cb:72:
         78:42:3b:52:1c:27:f1:7b:1c:f4:4b:af:02:8c:f0:c0:cd:60:
         d4:e7:d6:53:34:2f:2e:15:ae:03:5a:80:e2:05:39:16:1e:04:
         06:3f:89:7c:e4:43:4c:34:9d:de:af:e7:bc:f3:6d:03:21:2a:
         ef:05:c8:ce:0f:ef:c8:bd:a9:f1:f8:be:47:6e:9f:eb:12:e8:
         7c:96:66:a1:d2:8a:56:1e:c2:00:11:6d:a7:89:2b:5b:ab:ef:
         03:9a:36:4c:44:f4:ff:6b:6f:81:d9:5d:e7:b2:c8:17:7d:14:
         f7:8e:84:d1:4d:7d:09:65:a7:30:36:29:1d:7e:e7:fd:f2:22:
         6e:0f:2b:ce:2b:e0:1b:8f:4c:15:a5:81:46:e2:61:7e:b8:76:
         b0:78:82:64:87:67:df:3e:bb:80:a7:75:fb:45:20:27:e4:ba:
         3d:bb:4d:f9:f4:2a:78:40:10:96:10:9c:24:ea:99:45:3b:13:
         75:cd:e2:ff:5d:37:fc:aa:55:dd:48:cb:62:fb:f0:c6:05:17:
         9a:94:72:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:41:50 2024 by rpki-client on console-ams.rpki-client.org