Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7f8b8c1e-d8d2-3753-8885-3a9a5d58e7eb.roa
File:                     7f8b8c1e-d8d2-3753-8885-3a9a5d58e7eb.roa (raw, json)
Hash identifier:          FGkTtaO67pC/sVGq8x7dRB6S6Dunh2DEsnOrvlRQwzg=
Subject key identifier:   6A:86:DD:B3:02:1F:F8:01:53:B4:FA:67:6D:83:47:99:41:C3:18:86
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858472B7F626ABE9DA6C30C485D80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7f8b8c1e-d8d2-3753-8885-3a9a5d58e7eb.roa
Signing time:             Tue 10 Sep 2024 17:16:22 +0000
ROA not before:           Tue 10 Sep 2024 17:16:22 +0000
ROA not after:            Mon 09 Dec 2024 18:16:22 +0000
asID:                     50131
IP address blocks:        45.38.198.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:7f:62:6a:be:9d:a6:c3:0c:48:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 10 17:16:22 2024 GMT
            Not After : Dec  9 18:16:22 2024 GMT
        Subject: CN=0d651315-45f6-4538-ba71-278b0e384160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:0c:b5:7f:46:87:2c:f8:d4:c1:d8:c3:a1:66:
                    a0:1f:c3:e1:a1:fb:cd:16:41:11:55:ea:13:04:90:
                    87:22:24:e3:fa:17:7b:9e:f4:19:9a:9a:cd:dc:44:
                    ed:47:62:bc:aa:a5:0c:55:81:6b:5f:92:92:73:ac:
                    84:99:b9:ef:71:5b:91:19:ca:60:e7:dd:f7:13:1c:
                    07:20:26:fa:cd:00:13:cc:9c:c9:d2:3c:9b:1d:d7:
                    84:84:ff:26:33:e9:6a:78:0c:cf:38:29:ba:8e:19:
                    bb:df:f3:7e:c1:0f:a5:51:21:c5:ce:47:ca:d2:f6:
                    80:94:cd:10:75:34:30:d4:5a:c7:80:58:3d:c9:bf:
                    93:04:aa:ff:9a:c6:59:f5:ff:41:3f:30:28:4a:99:
                    13:3e:cf:51:f0:3b:0d:20:0f:e4:58:87:a5:ae:2f:
                    0a:ed:68:71:51:05:93:05:3f:bd:5a:1a:b5:23:cc:
                    1c:46:53:ad:ac:37:fe:2a:80:66:4b:91:b8:67:30:
                    14:ba:11:c7:f5:e2:a8:b5:5d:9b:c6:88:e7:7c:c3:
                    89:69:df:9a:fd:c9:9d:32:5b:66:fa:4f:9a:9a:27:
                    25:cf:f4:ec:9a:7a:91:94:dc:4a:06:02:8d:37:24:
                    e3:1d:af:0d:ca:eb:ea:29:af:4d:a9:b9:5e:3c:7a:
                    ac:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:86:DD:B3:02:1F:F8:01:53:B4:FA:67:6D:83:47:99:41:C3:18:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7f8b8c1e-d8d2-3753-8885-3a9a5d58e7eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:3e:73:47:a1:f5:36:9e:59:63:6d:82:5a:be:22:3c:e2:3b:
         9a:82:c1:a3:97:00:be:81:ff:23:18:d1:df:57:c6:31:ff:8c:
         7c:8a:68:25:7f:f8:c0:06:10:0c:57:4a:5d:94:ed:f3:38:f8:
         74:5f:c6:fb:23:d1:60:72:50:7e:7f:f7:a2:8a:60:4a:b9:48:
         f9:fd:a4:4f:68:e9:08:9b:b2:58:8c:46:05:e8:e9:2d:32:56:
         ed:46:ea:3d:a3:95:a5:38:8f:33:a4:b1:58:de:49:f5:52:60:
         bc:1d:fe:d1:07:08:f6:fc:6d:56:88:73:f8:7f:b3:b9:b9:8d:
         2d:a4:6c:2f:19:a5:94:fc:c7:2a:0c:b4:7e:a3:ab:6f:97:69:
         a4:ef:26:e4:1c:30:60:1e:88:f4:7b:ca:fe:20:b9:87:93:5e:
         72:08:80:29:60:38:3d:dd:0d:11:0e:00:27:bd:40:51:84:b4:
         7a:ed:22:b5:59:1e:74:78:69:99:ae:5d:65:2f:97:8d:0a:99:
         1f:5a:ca:b5:4b:9b:94:b5:bc:5f:42:83:81:a2:45:20:b8:84:
         bb:d4:38:93:ec:f3:f2:fa:3b:7f:fd:f9:90:3c:ae:18:fa:53:
         7d:58:65:fc:2a:4c:1d:ac:d6:25:0e:43:90:d9:93:e3:3d:55:
         e1:92:68:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:25:59 2024 by rpki-client on console-fra.rpki-client.org