Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/aa2771b9-5acd-3ac1-9438-c59b7ab7954f.roa
File:                     aa2771b9-5acd-3ac1-9438-c59b7ab7954f.roa (raw, json)
Hash identifier:          wxKeQN7MuD2/B+xjEhhHp0ygfo1cchxH1ZCLzrNcOqc=
Subject key identifier:   9D:12:BA:D5:02:5B:A5:B3:25:9D:D3:3F:A7:BE:F8:2A:1B:9E:A3:A8
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858459121BDDD91CFD06A5E0A31C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/aa2771b9-5acd-3ac1-9438-c59b7ab7954f.roa
Signing time:             Tue 16 Apr 2024 17:26:16 +0000
ROA not before:           Tue 16 Apr 2024 17:26:16 +0000
ROA not after:            Mon 15 Jul 2024 17:26:16 +0000
asID:                     18779
IP address blocks:        142.252.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:91:21:bd:dd:91:cf:d0:6a:5e:0a:31:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 16 17:26:16 2024 GMT
            Not After : Jul 15 17:26:16 2024 GMT
        Subject: CN=c48a3e3b-6b88-46bd-bdab-a6c96c9ae735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:26:92:ec:aa:b6:d9:98:bd:56:fe:95:fd:bd:
                    c1:90:88:1f:dc:9e:37:94:ac:2e:e4:73:bd:0a:45:
                    21:07:49:35:31:e8:39:ff:f6:e9:30:9d:da:48:ee:
                    fb:3d:42:80:49:86:0f:45:44:99:e4:c7:7e:b5:29:
                    31:98:23:a9:d3:2c:cb:cf:3e:b0:de:85:39:07:47:
                    31:f5:83:d6:27:f0:ff:8a:5f:ea:a1:bb:e2:05:f8:
                    a0:04:ad:94:2f:a9:8d:8d:cd:ed:72:82:3e:cb:8f:
                    47:7e:fc:da:14:c2:98:a7:0a:66:8e:df:a7:f9:e6:
                    0a:69:ed:1a:10:ab:87:f4:9b:47:bf:7b:fb:15:63:
                    5d:a1:e3:d9:a5:94:a1:0b:92:e4:88:a4:78:2c:1e:
                    e0:b9:04:08:67:25:03:81:bf:a4:83:1a:70:71:a2:
                    85:d4:79:75:6c:f7:b8:d4:b6:a4:0e:87:bc:c3:78:
                    54:83:55:2e:1b:21:cd:40:fc:ee:25:2a:6a:3b:57:
                    0d:31:3c:cf:0c:30:09:b7:8f:89:ea:ce:15:70:35:
                    e2:7e:ac:2a:98:9d:ad:36:b6:a1:33:5a:b6:12:fc:
                    eb:e2:b0:ec:1d:a5:78:8b:7f:d2:20:d9:e2:95:fe:
                    8e:cd:3d:99:00:d1:d6:6c:84:90:e6:a0:5b:48:d5:
                    d6:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:12:BA:D5:02:5B:A5:B3:25:9D:D3:3F:A7:BE:F8:2A:1B:9E:A3:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/aa2771b9-5acd-3ac1-9438-c59b7ab7954f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:f9:8d:8f:23:c1:25:27:c4:48:5c:7c:6a:43:a0:52:4f:79:
         c3:69:72:9c:87:c0:c9:03:e0:69:f3:98:3e:f3:15:1d:c0:25:
         8c:e0:8b:9e:fe:27:9d:ea:08:37:03:1d:10:f9:40:c3:04:0c:
         4f:61:ae:12:a3:b0:72:5a:8b:c8:54:4f:b6:cd:36:b9:e0:95:
         b4:6a:7e:96:09:5f:6a:ab:73:9c:2c:6d:54:e2:f1:92:c9:66:
         b0:8d:d7:4c:3e:db:cb:80:ff:42:37:e3:54:aa:d2:23:7e:00:
         ca:28:68:72:1a:09:0c:36:a5:19:04:30:14:cf:08:5b:31:45:
         55:67:cd:aa:42:c0:c9:1f:b3:fb:d4:9f:b3:60:ad:a9:83:2f:
         27:da:bc:c1:0a:54:10:cf:d9:0d:09:16:1e:7c:42:c5:46:d9:
         f3:16:90:59:2d:4f:b6:c8:3c:5a:26:9c:79:62:1a:bd:70:9e:
         a3:cf:34:97:55:75:0b:22:f6:dd:3b:73:88:41:34:a9:6c:ee:
         4f:22:d0:11:cf:cc:e2:3c:7b:a9:db:ec:10:da:eb:d0:d4:1c:
         58:bf:b2:b4:d4:3e:76:c9:35:32:aa:90:50:08:c5:37:64:1e:
         ca:92:a6:b5:fe:22:8e:01:dd:fa:18:d7:e4:a1:79:0c:43:c4:
         13:e0:20:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:08:18 2024 by rpki-client on console-ams.rpki-client.org