Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7386a929-f478-34d0-af3f-060d4ca687f8.roa
File:                     7386a929-f478-34d0-af3f-060d4ca687f8.roa (raw, json)
Hash identifier:          TbL3hs2zS1rvAB7X4Iq6jp5t27ri0hEjHphhQOZxxGk=
Subject key identifier:   E9:81:68:2C:5E:54:23:58:90:93:27:4F:12:75:AB:ED:4F:F2:5D:AE
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584746EB605B0F7FEBC2527C22C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7386a929-f478-34d0-af3f-060d4ca687f8.roa
Signing time:             Fri 20 Sep 2024 13:00:42 +0000
ROA not before:           Fri 20 Sep 2024 13:00:42 +0000
ROA not after:            Thu 19 Dec 2024 14:00:42 +0000
asID:                     18779
IP address blocks:        45.38.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:46:eb:60:5b:0f:7f:eb:c2:52:7c:22:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 20 13:00:42 2024 GMT
            Not After : Dec 19 14:00:42 2024 GMT
        Subject: CN=e68df325-823e-45a7-9f6a-83d72007fa96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2f:f6:ea:e3:21:50:37:16:45:25:73:61:b8:
                    86:37:56:8c:4a:f8:81:c5:85:dd:15:ae:29:b4:5d:
                    7a:9b:85:f4:f3:9a:f6:57:d1:58:3e:8e:1a:5e:0b:
                    a3:93:66:5e:6c:bd:e6:f4:f6:98:1c:10:8a:a5:43:
                    42:95:30:3f:a5:54:65:80:ec:99:eb:e8:31:5a:2c:
                    f8:65:57:d0:4f:0c:9d:43:4c:62:e5:89:b5:c9:70:
                    ad:4f:33:61:a8:39:dd:f5:80:ba:f5:cf:a2:10:14:
                    7b:35:65:75:e6:25:7a:35:25:fc:7d:1c:3a:7f:c7:
                    1f:57:be:ef:7c:67:4f:f7:6f:74:a7:d6:d8:f4:45:
                    64:ec:b9:a4:f4:9d:c0:66:ce:4e:5a:86:cc:00:51:
                    a6:d1:4e:94:79:71:d6:39:a5:0b:1b:3e:bd:22:00:
                    79:e1:6c:81:70:82:19:d8:e8:e2:93:f7:e9:bb:85:
                    ad:ec:cd:cb:d0:c2:15:28:af:81:47:80:35:be:4a:
                    24:c1:b2:68:48:62:f0:01:71:f3:e7:1a:a4:e7:fb:
                    e2:4c:31:1d:13:c7:c7:37:f6:6e:47:0b:00:26:21:
                    aa:25:fd:33:25:fb:81:5d:3d:bc:92:20:fa:da:55:
                    c2:95:5f:d5:0f:31:3d:b5:66:4e:3b:a5:c6:8e:a3:
                    8c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:81:68:2C:5E:54:23:58:90:93:27:4F:12:75:AB:ED:4F:F2:5D:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7386a929-f478-34d0-af3f-060d4ca687f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:c3:f4:ee:0d:8f:bf:c0:6d:b2:62:00:d6:29:4b:66:0d:7d:
         41:03:4b:86:0d:d8:3a:d1:a0:ae:e9:ac:96:d8:09:01:cd:c7:
         51:32:8b:d7:1a:a4:99:fb:ac:b9:fe:5b:23:73:0b:4d:90:f7:
         89:98:c2:41:12:56:b6:37:de:58:cd:97:a3:d1:86:03:d9:fa:
         d7:fb:14:a9:aa:b5:ca:fb:c3:50:f6:d4:3b:3d:a5:3a:48:1a:
         a9:a5:03:de:8a:f7:32:98:91:0b:aa:fb:31:9c:af:cc:46:07:
         0f:7a:68:a6:45:0d:7b:42:57:0c:fa:b9:ec:71:7d:28:3f:68:
         59:d7:c6:f3:15:33:80:ed:99:61:2c:b2:30:b4:11:39:ea:2c:
         0d:1a:ea:43:2b:48:b5:1d:9d:76:db:d9:77:01:1b:c4:70:d5:
         ce:e1:5d:42:c1:25:99:fd:9d:3b:db:8e:16:c9:54:72:3b:bc:
         4c:88:5f:79:bc:d4:c3:fd:1e:50:02:1b:8f:47:78:b5:83:d9:
         82:4d:c4:2f:4a:75:03:c4:36:29:c8:32:36:5b:d9:a3:f1:e8:
         3d:f4:5c:11:4a:78:19:42:01:a2:6a:d0:82:54:4e:3e:47:3c:
         4d:32:b8:4e:e2:ea:e0:c0:18:9f:91:b4:64:8e:37:a6:aa:62:
         d8:b6:71:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:34 2024 by rpki-client on console-fra.rpki-client.org