Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b4659e1a-7d3d-362e-a176-a44690281d0a.roa
File:                     b4659e1a-7d3d-362e-a176-a44690281d0a.roa (raw, json)
Hash identifier:          tu2KkPrnMgpCZL6hOQQrx6WzwXIl5kt5XKjsBegPE74=
Subject key identifier:   50:32:25:A5:06:AC:21:97:66:C4:86:15:78:B5:16:2B:B8:F9:47:CB
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858476DC4F1819854106E7CA2F660
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b4659e1a-7d3d-362e-a176-a44690281d0a.roa
Signing time:             Fri 04 Oct 2024 10:59:53 +0000
ROA not before:           Fri 04 Oct 2024 10:59:53 +0000
ROA not after:            Thu 02 Jan 2025 11:59:53 +0000
asID:                     400536
IP address blocks:        142.252.28.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6d:c4:f1:81:98:54:10:6e:7c:a2:f6:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  4 10:59:53 2024 GMT
            Not After : Jan  2 11:59:53 2025 GMT
        Subject: CN=780e3c81-f09b-4fe0-860a-ee7b8175e0a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:2e:b5:ff:e0:1d:44:6e:7f:18:41:ff:e8:a8:
                    06:bb:bf:3b:06:39:e0:dd:4c:2b:f5:8d:08:fb:9b:
                    ad:c0:21:1d:d4:05:ee:76:3a:78:44:34:8f:f8:3e:
                    93:ae:59:14:83:6e:8c:36:81:db:ff:bc:a0:cd:80:
                    81:39:cc:f3:ad:5c:5f:c5:91:71:04:f6:fe:1c:d0:
                    ec:1a:43:ae:b2:f4:68:09:8e:d8:e7:b0:ae:83:6f:
                    a2:d8:7a:67:22:00:7a:ae:e9:65:09:a8:11:b5:21:
                    5a:f8:3b:07:80:25:f4:34:f4:07:fd:99:5f:46:26:
                    81:d0:34:b1:58:30:e6:ad:d5:5a:48:3e:e1:b2:08:
                    42:35:4b:0b:d2:91:2d:b7:1d:b9:22:4b:86:fa:8b:
                    47:b1:8e:2d:1a:b0:36:b5:b6:ca:0e:a2:7d:d3:4c:
                    e4:fb:35:84:4e:c0:ea:b4:bc:1e:c1:ec:53:c7:f8:
                    ba:79:b7:8c:3c:77:5d:2f:76:43:33:e7:e9:ff:0f:
                    eb:b4:38:e6:1b:cf:da:a1:6d:7c:03:f7:0a:50:23:
                    3c:52:ac:40:d5:bb:44:1c:66:99:f8:d8:fc:00:9d:
                    db:8f:31:f8:92:35:6c:f6:8b:7f:cd:48:eb:92:93:
                    6a:c0:50:d6:08:bf:04:7c:f3:a5:86:b4:42:d4:24:
                    43:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:32:25:A5:06:AC:21:97:66:C4:86:15:78:B5:16:2B:B8:F9:47:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b4659e1a-7d3d-362e-a176-a44690281d0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:ee:9b:00:f2:87:69:9f:6d:fd:b6:42:7d:18:8c:1c:c3:3f:
         aa:0f:81:93:c0:ef:3c:2c:89:cd:80:cc:e0:8d:19:1c:23:27:
         c4:d8:5e:61:0b:63:68:93:e2:27:2e:02:41:45:03:70:1f:71:
         d4:07:82:0a:b6:5d:7c:fb:f1:fb:58:19:c6:9b:bc:57:67:63:
         3c:33:a1:3e:41:05:d2:6f:92:0c:9a:56:a8:a4:fd:00:c8:b6:
         34:6a:0a:7c:1e:79:e3:e5:b9:9b:21:3c:ab:ef:85:17:66:2a:
         ad:f2:4c:e7:8c:5d:24:d9:12:53:05:8c:bd:5c:03:31:1d:2b:
         30:37:bc:cb:b7:42:98:36:c0:5e:41:53:15:ab:45:8f:ad:1c:
         0f:9e:63:10:e2:fe:bc:e3:39:c7:a9:2a:f3:0f:e6:c3:a5:1e:
         32:22:fb:e0:11:c3:97:82:37:ab:3c:dc:4c:ef:b0:b4:d1:39:
         b6:bc:04:e4:66:2c:0f:1a:f8:c6:fe:cc:96:bc:e7:59:1d:51:
         f6:75:2a:b3:ff:12:82:40:f2:3d:0d:07:5d:b8:80:ea:83:ff:
         61:93:12:57:40:78:c8:cc:2b:86:8c:30:20:60:fb:4e:35:ef:
         01:e8:77:c1:3d:c8:16:bb:d5:40:17:9b:74:f4:34:98:6c:10:
         1d:ba:75:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:26:00 2024 by rpki-client on console-fra.rpki-client.org