Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/939ab8c6-33fc-37a1-86c6-b9889699541f.roa
File:                     939ab8c6-33fc-37a1-86c6-b9889699541f.roa (raw, json)
Hash identifier:          wX6PlJPR0K4QwtWBtyxZ+9WlolU9DXdu31n+37dKKUc=
Subject key identifier:   40:CD:75:31:B1:27:EE:B0:1E:3F:B8:DD:05:1C:73:AF:7A:E7:45:84
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285847F11CC7DDCE6EA4BD7E69EC80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/939ab8c6-33fc-37a1-86c6-b9889699541f.roa
Signing time:             Wed 20 Nov 2024 12:07:45 +0000
ROA not before:           Wed 20 Nov 2024 12:07:45 +0000
ROA not after:            Tue 18 Feb 2025 12:07:45 +0000
asID:                     44893
IP address blocks:        142.252.166.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f1:1c:c7:dd:ce:6e:a4:bd:7e:69:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Nov 20 12:07:45 2024 GMT
            Not After : Feb 18 12:07:45 2025 GMT
        Subject: CN=862f651f-971c-4ba0-a9cc-b9d42cb0afac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:8b:6a:46:68:d7:dc:61:f9:51:ab:1a:98:4a:
                    28:72:f9:3c:7a:70:99:13:e4:1e:c8:85:3d:4c:3b:
                    0d:79:62:b1:27:98:8d:44:a7:17:24:4c:9f:d4:b1:
                    a5:f1:9d:b5:b4:19:83:70:94:5f:4e:cf:e8:ce:3e:
                    d6:d5:28:ae:1e:79:39:60:87:28:0c:11:c6:9f:9c:
                    5b:64:d7:61:aa:5e:be:d1:b2:be:b5:2a:7c:04:b1:
                    5f:25:f0:39:bd:50:02:5e:d0:eb:55:24:33:f4:45:
                    fd:82:53:2e:52:44:db:68:69:93:bf:da:62:43:0d:
                    b9:fe:b3:9a:9f:f6:74:ba:59:c7:df:59:8c:1e:ac:
                    96:c7:f5:b8:c3:80:c0:d0:d1:89:73:2c:32:d9:c0:
                    ee:bf:04:a8:7a:b3:5b:44:7e:0c:e8:f9:1b:05:8e:
                    7b:23:9d:87:2e:54:08:d5:68:c1:69:a7:f7:53:e4:
                    9c:0f:98:25:70:a5:46:23:f4:a5:da:69:80:be:6d:
                    73:a6:d8:30:0b:0e:b8:c8:e6:1b:33:d1:82:64:b5:
                    3f:30:72:e4:63:4d:72:2a:cb:d2:51:20:48:a5:55:
                    bd:4c:51:0d:6c:11:08:73:99:6a:9b:22:ab:a9:97:
                    6d:30:14:ab:cc:7d:f1:e7:4e:59:98:26:2c:43:13:
                    55:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:CD:75:31:B1:27:EE:B0:1E:3F:B8:DD:05:1C:73:AF:7A:E7:45:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/939ab8c6-33fc-37a1-86c6-b9889699541f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:73:a2:63:d3:53:f6:0d:3a:60:46:70:1c:02:92:ea:37:96:
         76:52:55:7f:07:d6:0a:e1:6d:f8:e8:07:c6:84:d6:b9:45:da:
         95:d8:c8:56:49:e3:0c:c5:fa:9f:da:eb:05:df:9e:93:64:59:
         10:e1:ec:2c:02:c5:a2:46:d9:48:1a:54:e5:0a:31:9e:61:06:
         46:c0:f2:5b:d8:bc:da:08:65:76:69:82:15:35:c3:5d:cd:18:
         7b:da:10:0b:a0:4b:67:1b:ca:cc:fe:92:21:90:b1:71:3f:99:
         f0:f6:03:64:65:02:7c:cb:02:10:86:bc:81:95:0d:33:2b:48:
         f8:99:20:b6:88:d2:44:3b:d2:17:98:25:b8:a7:c1:dd:30:e6:
         77:06:9a:66:7c:e8:78:42:72:22:26:47:c3:43:a3:81:70:d2:
         e4:ce:9b:fc:2a:35:54:b9:3f:86:87:a8:d6:3b:33:4c:3d:28:
         ca:54:7a:fd:e0:67:ae:ab:68:26:73:d6:d5:ca:f1:db:5d:48:
         32:8b:9a:54:07:d0:6e:1a:6e:b5:25:99:d4:7f:11:fe:22:96:
         93:91:f3:db:b4:67:61:ee:0d:03:53:1f:81:80:41:b3:c0:01:
         f2:75:0d:c2:91:fb:5f:4b:fb:ea:62:d4:95:17:46:ad:6d:6a:
         e2:17:77:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:25:59 2024 by rpki-client on console-fra.rpki-client.org