Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b4c35882-7d63-3efd-a4a8-353c6cee48dd.roa
File:                     b4c35882-7d63-3efd-a4a8-353c6cee48dd.roa (raw, json)
Hash identifier:          KI3GDyjRIYP7xZTsFIZKYd8r/C8cVHIE3m4eQ61eg2E=
Subject key identifier:   64:2E:08:F7:50:3F:72:38:A8:19:C8:2B:21:3A:7C:6D:9B:D7:A0:6F
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285847BCA2EDC22DB1DBEAAC06CF00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b4c35882-7d63-3efd-a4a8-353c6cee48dd.roa
Signing time:             Fri 01 Nov 2024 17:00:12 +0000
ROA not before:           Fri 01 Nov 2024 17:00:12 +0000
ROA not after:            Thu 30 Jan 2025 18:00:12 +0000
asID:                     400536
IP address blocks:        45.38.11.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:bc:a2:ed:c2:2d:b1:db:ea:ac:06:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Nov  1 17:00:12 2024 GMT
            Not After : Jan 30 18:00:12 2025 GMT
        Subject: CN=b0950d8a-2b46-4cd8-8efd-4319adc3d8df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:06:6e:47:9a:38:67:2f:5c:34:40:84:83:a8:
                    b2:24:64:b7:b9:cb:7e:0b:95:6b:69:a3:8c:41:42:
                    14:09:c4:2f:b6:2b:da:bb:40:4f:8a:b8:0b:ef:87:
                    52:80:c9:7c:77:81:8c:fb:d0:1a:b6:4a:bb:cf:44:
                    fe:4e:92:79:56:92:ee:b4:1a:99:c4:ca:c3:a6:b3:
                    53:c2:a9:4a:fa:24:1b:30:51:17:c6:50:8c:9b:5e:
                    29:f4:60:66:14:4a:68:70:d5:7f:a0:67:7d:05:44:
                    a1:32:37:44:d4:9c:d2:63:75:51:6b:36:ac:4d:b0:
                    5f:59:5b:60:66:c4:78:34:8d:b1:4a:0a:6e:80:86:
                    03:98:70:8e:bf:0b:94:43:6e:84:41:10:fb:48:af:
                    c7:56:85:23:c4:ae:d8:43:08:9f:28:1b:f5:8b:52:
                    d7:54:56:a5:15:36:86:aa:46:b1:25:53:29:cb:87:
                    d5:f2:10:3f:c1:82:15:5a:57:65:22:41:74:fe:a3:
                    ca:4a:d8:f3:4d:da:81:c4:fb:b3:b7:48:b8:4c:ca:
                    be:4e:34:36:3c:17:e2:f7:c6:17:ab:15:3d:01:72:
                    34:c7:11:8c:a1:62:63:17:57:e9:14:92:c0:71:79:
                    a7:89:92:01:8e:c5:75:32:58:02:cc:d8:f2:d1:59:
                    1d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:2E:08:F7:50:3F:72:38:A8:19:C8:2B:21:3A:7C:6D:9B:D7:A0:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b4c35882-7d63-3efd-a4a8-353c6cee48dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:5f:94:bf:8f:17:ce:8a:57:29:4a:9b:00:db:3f:c3:69:77:
         28:0e:f0:fc:f9:eb:60:9d:c2:fa:78:f2:c1:a5:21:cc:e7:3d:
         e1:5e:5c:38:c6:f8:ee:71:df:c4:b5:8f:cb:47:99:d0:f8:e1:
         18:25:37:e8:e0:fd:d9:4b:38:6e:d8:c3:4d:f0:39:12:35:ba:
         52:d8:44:9b:85:a7:21:84:50:c7:f8:86:5c:ec:9e:c8:ad:78:
         c0:8b:85:db:62:55:41:72:c2:1f:5b:67:6e:20:2f:cb:b2:ca:
         21:48:91:1e:e8:53:b8:e0:65:3d:50:8f:86:22:bc:89:82:d0:
         0a:0a:dd:5e:b0:1e:af:fb:64:a3:b0:4c:15:b0:8c:d8:5b:94:
         b2:d3:50:20:e6:65:a7:af:e9:a8:36:93:9c:32:bd:ea:de:e7:
         2c:8a:41:57:82:de:d7:7a:7b:24:b4:d5:83:1a:1f:8f:37:5e:
         3b:96:aa:03:ea:df:ef:df:d4:0e:f5:f2:2e:18:3e:fa:60:f6:
         4c:0e:27:d9:7e:26:49:a9:a0:47:4d:e7:e7:77:e7:be:88:1f:
         01:2d:12:f7:f1:da:5e:66:8f:6f:e9:49:97:50:6a:28:0b:3e:
         dc:9c:ce:c9:fa:d2:e2:5f:eb:00:44:77:0e:02:be:c0:84:59:
         be:36:a6:b5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe8ou3CLbHb6qwGzwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI0MTEwMTE3MDAxMloXDTI1MDEzMDE4MDAxMlowLzEtMCsGA1UEAxMk
YjA5NTBkOGEtMmI0Ni00Y2Q4LThlZmQtNDMxOWFkYzNkOGRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQZuR5o4Zy9cNECEg6iyJGS3uct+C5VraaOM
QUIUCcQvtivau0BPirgL74dSgMl8d4GM+9Aatkq7z0T+TpJ5VpLutBqZxMrDprNT
wqlK+iQbMFEXxlCMm14p9GBmFEpocNV/oGd9BUShMjdE1JzSY3VRazasTbBfWVtg
ZsR4NI2xSgpugIYDmHCOvwuUQ26EQRD7SK/HVoUjxK7YQwifKBv1i1LXVFalFTaG
qkaxJVMpy4fV8hA/wYIVWldlIkF0/qPKStjzTdqBxPuzt0i4TMq+TjQ2PBfi98YX
qxU9AXI0xxGMoWJjF1fpFJLAcXmniZIBjsV1MlgCzNjy0VkdhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGQuCPdQP3I4qBnIKyE6fG2b16BvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYjRjMzU4ODItN2Q2My0z
ZWZkLWE0YTgtMzUzYzZjZWU0OGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSYLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA9flL+PF86KVylKmwDbP8NpdygO8Pz562Cdwvp48sGlIcznPeFeXDjG
+O5x38S1j8tHmdD44RglN+jg/dlLOG7Yw03wORI1ulLYRJuFpyGEUMf4hlzsnsit
eMCLhdtiVUFywh9bZ24gL8uyyiFIkR7oU7jgZT1Qj4YivImC0AoK3V6wHq/7ZKOw
TBWwjNhblLLTUCDmZaev6ag2k5wyvere5yyKQVeC3td6eyS01YMaH483XjuWqgPq
3+/f1A718i4YPvpg9kwOJ9l+JkmpoEdN5+d3576IHwEtEvfx2l5mj2/pSZdQaigL
Ptyczsn60uJf6wBEdw4CvsCEWb42prU=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:26:00 2024 by rpki-client on console-fra.rpki-client.org