Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9b290a96-080f-3c3a-9615-972c9eff9451.roa
File:                     9b290a96-080f-3c3a-9615-972c9eff9451.roa (raw, json)
Hash identifier:          R4zPEhR77PVTbF40C/JtLXu3PwHK2KGPjE4XXPo31X4=
Subject key identifier:   1B:BB:DD:02:6B:63:C0:58:D1:E2:08:DA:63:23:91:81:E7:14:AE:B6
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285847B961782650B7BC859814D780
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9b290a96-080f-3c3a-9615-972c9eff9451.roa
Signing time:             Thu 31 Oct 2024 13:00:41 +0000
ROA not before:           Thu 31 Oct 2024 13:00:41 +0000
ROA not after:            Wed 29 Jan 2025 14:00:41 +0000
asID:                     10557
IP address blocks:        142.252.12.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b9:61:78:26:50:b7:bc:85:98:14:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct 31 13:00:41 2024 GMT
            Not After : Jan 29 14:00:41 2025 GMT
        Subject: CN=14c414e1-8cdd-4a45-bd8d-40b2f29ec9cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6f:f7:06:fa:68:39:db:3b:4f:45:6d:0a:38:
                    b6:ed:5a:c9:b9:bb:91:3b:3d:ac:b3:43:ea:56:47:
                    5b:65:cd:ff:c9:d7:ae:5e:f8:7d:87:d1:4c:e2:b7:
                    44:a9:ea:5f:e1:95:2b:67:1c:8a:31:a2:c8:1d:fd:
                    1d:e9:c0:31:91:47:b5:80:06:10:94:5e:73:ac:b6:
                    e5:bf:48:42:28:82:34:94:c2:ce:df:b7:04:63:f7:
                    aa:39:3b:f1:9a:15:50:ce:1d:01:f2:10:eb:b8:73:
                    8b:c1:bc:5e:af:82:ea:9d:d1:3e:7d:29:f4:15:96:
                    68:28:bd:3e:9f:ee:64:2f:8b:0a:38:cd:5d:42:a1:
                    b9:de:28:04:11:a1:e2:d2:68:25:5d:8b:1b:a6:45:
                    74:94:09:0b:6e:af:cb:cb:0f:4d:34:ca:18:7b:e5:
                    15:14:92:76:b1:08:93:a2:42:ce:a3:0b:53:85:a6:
                    c0:d9:da:1d:d7:73:62:e3:98:c1:de:98:41:a0:b4:
                    7d:cd:e6:a6:16:6a:eb:03:ce:12:aa:f5:34:df:4a:
                    fb:3d:80:03:9b:c6:f3:f7:d5:40:f2:25:46:69:c3:
                    67:34:09:35:ff:03:09:d0:2b:9c:32:01:5d:4e:34:
                    ff:59:e8:d2:92:76:89:b7:d1:06:d1:14:84:8f:ef:
                    3b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:BB:DD:02:6B:63:C0:58:D1:E2:08:DA:63:23:91:81:E7:14:AE:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9b290a96-080f-3c3a-9615-972c9eff9451.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:f3:5f:17:8c:99:c2:78:31:79:32:22:54:c7:a6:c7:45:7d:
         95:90:b1:9a:a9:21:59:14:b3:22:71:1a:47:fe:f0:52:3c:28:
         4a:9e:31:42:5d:4d:c0:2f:eb:40:28:9c:1f:6e:17:1f:ca:cf:
         da:ae:ff:71:c7:cd:51:ca:38:89:f7:25:34:d4:e0:2f:e9:55:
         1a:f0:08:55:31:0f:82:e6:df:d8:ff:88:78:da:d4:b8:2d:c0:
         7c:5f:31:da:45:36:30:24:f3:fd:5c:05:2c:64:c9:e4:0d:79:
         69:95:e1:7f:f1:a8:77:01:a2:c1:19:ec:17:8e:db:ab:cf:be:
         f5:f5:cc:3e:0b:a7:09:ae:1c:30:0c:bd:9f:6a:54:e9:76:8f:
         9c:39:9f:50:17:33:8e:03:97:f7:f6:2e:c4:56:3c:68:f1:ae:
         34:c7:c6:e9:39:a0:32:21:67:22:75:5d:cd:d7:8b:14:d8:d6:
         85:3e:1a:9d:dd:d3:c7:9a:fb:1e:b4:de:0b:48:55:70:24:86:
         48:0d:31:4a:8f:99:ca:ee:9b:81:2a:15:52:2e:05:a5:97:f8:
         bb:58:bf:d2:22:ba:e5:50:08:f8:b6:a6:f8:ff:7a:32:77:6a:
         c8:fa:43:32:74:07:67:92:0d:e2:62:90:e2:e7:1d:a2:8d:e7:
         6e:f6:31:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:25:59 2024 by rpki-client on console-fra.rpki-client.org