Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b2e2fe6e-2634-308a-8cb0-f946e1ab0c25.roa
File:                     b2e2fe6e-2634-308a-8cb0-f946e1ab0c25.roa (raw, json)
Hash identifier:          2Xs2gaRjyvGmc1If7gal9KgICmE2D7iIzCsIE2ybeko=
Subject key identifier:   BD:79:C6:9D:FD:B3:12:6E:95:17:3C:6C:18:A2:B2:BD:6C:E9:70:3A
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584533BB0E2441F2BDB14BDA4F00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b2e2fe6e-2634-308a-8cb0-f946e1ab0c25.roa
Signing time:             Thu 14 Mar 2024 06:29:12 +0000
ROA not before:           Thu 14 Mar 2024 06:29:12 +0000
ROA not after:            Wed 12 Jun 2024 06:29:12 +0000
asID:                     400402
IP address blocks:        45.38.157.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:33:bb:0e:24:41:f2:bd:b1:4b:da:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 14 06:29:12 2024 GMT
            Not After : Jun 12 06:29:12 2024 GMT
        Subject: CN=715972b3-1a83-409c-a5cc-aac4e1a5760f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4e:ed:1a:91:32:5a:c3:d2:df:91:74:b2:fc:
                    ef:15:2d:e4:58:16:69:25:76:d4:51:0b:e2:7f:81:
                    5d:d1:c4:65:c5:1c:73:d3:ce:e8:bf:b6:40:6f:17:
                    bf:da:9d:8b:b8:aa:0e:1b:2b:76:c3:c4:23:a9:7c:
                    90:59:b2:ac:69:8e:25:97:46:74:91:02:28:b7:0c:
                    9e:34:f0:12:75:51:10:47:c0:18:d9:cb:17:33:e8:
                    ab:ee:79:75:e3:98:03:f3:39:7c:e1:cd:1b:5c:c7:
                    f7:08:5c:0d:e8:74:07:e7:6f:be:c8:92:e6:2e:d1:
                    64:80:c6:77:2e:89:c9:8f:fb:8a:86:7c:7d:ee:25:
                    67:d6:da:30:bd:30:a9:26:be:13:34:aa:e1:d9:e2:
                    27:7a:a4:2d:fd:39:35:3c:ac:9c:b2:f0:23:17:d9:
                    6d:4f:3e:32:e4:34:31:89:cf:97:f0:8f:90:8c:71:
                    d5:a4:2e:99:6d:89:41:f1:a6:e4:66:55:74:4f:28:
                    15:83:11:d7:fe:35:6c:fa:12:48:06:fc:0c:79:aa:
                    d3:ef:57:31:ee:c6:3e:85:59:f6:2f:51:df:80:84:
                    fa:97:c0:cc:e2:8e:4a:51:bb:f5:a4:88:7e:6e:09:
                    4e:3c:6e:59:50:84:66:c0:82:e0:55:80:17:4d:b4:
                    fb:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:79:C6:9D:FD:B3:12:6E:95:17:3C:6C:18:A2:B2:BD:6C:E9:70:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b2e2fe6e-2634-308a-8cb0-f946e1ab0c25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:ea:a2:19:09:bf:0a:6f:0f:74:93:1b:70:eb:33:84:7d:c0:
         50:89:d5:14:27:b1:0b:84:b9:31:83:38:23:f6:d1:b5:fc:8a:
         10:31:e9:4f:f5:2d:3d:a5:67:86:16:db:43:11:18:83:20:6b:
         da:e1:69:c8:5a:24:51:f2:7a:94:4d:9f:62:a2:30:ca:f5:f0:
         a3:6c:c3:2d:be:2f:7f:33:b3:4e:33:d6:c3:89:27:b8:74:85:
         6d:e1:6b:49:39:e8:93:da:04:ad:c9:35:00:1f:4f:e7:14:8c:
         66:e3:5e:20:a6:91:79:6d:60:0c:48:f7:79:48:44:99:86:cd:
         57:d3:e3:02:c0:20:82:f1:e1:b9:78:22:34:72:06:10:d5:1f:
         fd:a5:91:c6:16:72:05:41:dc:7e:a8:80:c7:15:19:f4:40:a9:
         55:86:37:a8:fe:a7:a3:02:cc:5d:1d:94:52:cd:1a:d3:9e:01:
         de:13:31:1d:15:89:2c:78:8f:d2:dd:10:77:53:1d:f4:ba:15:
         f7:18:a0:ff:fd:dc:11:11:fc:55:13:9a:2e:5a:6f:3d:7a:b4:
         bb:11:99:4a:49:00:ad:16:7e:24:8d:72:ca:cf:38:85:8f:04:
         bb:a2:5f:51:3c:f3:7a:b1:c6:c9:66:05:7f:be:37:a9:66:58:
         29:b3:f1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 15:02:28 2024 by rpki-client on console-fra.rpki-client.org