Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8c4bdcfb-47a2-3067-95a9-d488d2630d89.roa
File:                     8c4bdcfb-47a2-3067-95a9-d488d2630d89.roa (raw, json)
Hash identifier:          8V4nbsNlwBRWrFH0ev4t25n4cumVGO3qTQjBycFSByg=
Subject key identifier:   EB:40:2E:7E:B7:06:61:01:5F:06:89:C2:30:24:51:C1:D9:AE:87:AC
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285847E0772C65295AE400ABFA7E00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8c4bdcfb-47a2-3067-95a9-d488d2630d89.roa
Signing time:             Thu 14 Nov 2024 13:01:08 +0000
ROA not before:           Thu 14 Nov 2024 13:01:08 +0000
ROA not after:            Wed 12 Feb 2025 13:01:08 +0000
asID:                     5650
IP address blocks:        45.39.171.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:77:2c:65:29:5a:e4:00:ab:fa:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Nov 14 13:01:08 2024 GMT
            Not After : Feb 12 13:01:08 2025 GMT
        Subject: CN=bab8d764-e6ce-4949-91b8-5f852510abbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:16:44:a4:f6:5d:e7:0b:60:18:4f:f1:39:0d:
                    c0:01:d8:09:46:dc:2e:94:0b:52:0e:f0:8a:33:9a:
                    06:ba:53:af:4f:9b:0e:96:5b:98:7b:8f:27:d0:43:
                    5c:fd:32:85:2e:2f:ad:b5:19:4a:98:78:47:ea:25:
                    dc:3f:3f:5d:c9:16:96:ef:3d:a0:a4:c2:1d:14:2b:
                    4b:d2:05:3b:bc:7d:ef:3e:80:4f:80:3c:34:a4:ee:
                    8b:a6:34:97:b9:20:a7:e2:5a:a3:ff:0b:1c:b1:0f:
                    54:bb:47:e5:de:88:8a:29:d7:98:c8:ac:a3:00:32:
                    ca:e7:11:0d:c3:18:af:2e:c4:3b:d8:ce:76:fa:75:
                    6c:f7:d4:17:bb:95:b2:34:55:26:97:d1:7f:77:c0:
                    71:51:21:52:6e:ab:f5:99:53:c1:e2:c9:8c:6f:b7:
                    bf:94:60:75:e5:98:00:0f:e8:b0:7d:32:70:f7:d4:
                    d4:95:a8:e8:8d:18:10:dc:fc:1e:45:d3:9d:51:f7:
                    34:8e:63:e3:c4:62:14:78:c6:4d:01:97:fa:ca:1c:
                    83:58:a3:b5:e9:58:d3:97:7c:b5:e9:24:46:54:28:
                    f2:2f:b1:ea:77:e0:e9:29:bd:03:6f:29:6c:73:8b:
                    d8:0c:fd:8c:4f:6a:01:92:ad:40:2c:ef:d4:0d:ea:
                    b4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:40:2E:7E:B7:06:61:01:5F:06:89:C2:30:24:51:C1:D9:AE:87:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8c4bdcfb-47a2-3067-95a9-d488d2630d89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:ee:fa:95:81:a6:3a:82:1a:ed:15:54:b6:58:f4:81:d3:f2:
         61:35:b7:22:82:85:fa:a5:5b:25:36:85:c1:8b:de:4d:45:3f:
         96:ab:67:38:00:38:99:e7:c3:e2:7d:58:a2:35:40:f0:94:37:
         f9:8d:f6:0e:67:5a:34:6d:ed:57:f0:d6:c9:d9:98:07:15:a2:
         bd:c7:8a:40:a3:75:c1:e1:e7:f5:fa:24:5f:68:54:05:33:8e:
         53:05:c9:aa:68:e1:24:0f:25:3c:7c:95:3a:c4:a1:fd:bd:e7:
         69:62:62:4c:a3:82:a3:9e:9b:81:ef:2f:4a:e6:c3:2c:0e:8a:
         da:d2:30:11:a9:65:93:75:47:6d:e4:29:66:55:f7:83:60:30:
         49:9a:71:ad:fe:dc:54:3a:b4:d4:db:b1:2f:33:92:e2:e8:6f:
         7a:fd:8c:12:7c:4c:87:36:64:31:16:f9:80:9b:b3:e3:fd:be:
         1d:2c:53:c5:81:96:59:ad:07:d2:36:e7:fe:56:8a:ca:96:ba:
         9a:9d:40:84:44:97:c4:4a:5b:1b:02:49:63:5d:6c:af:d0:3c:
         5b:b5:cb:2f:71:3c:15:89:d2:0e:d3:cf:88:e3:8c:6d:58:97:
         a3:7e:59:62:61:a6:ad:d9:12:8a:f2:a6:81:21:74:8a:1c:b2:
         fa:7e:a0:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:25:59 2024 by rpki-client on console-fra.rpki-client.org