Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b4dae3d2-6288-3696-a906-6f7e1e4116f7.roa
File:                     b4dae3d2-6288-3696-a906-6f7e1e4116f7.roa (raw, json)
Hash identifier:          iC9qXkAQgYIIEb6B7vFCbV95npIaa8R9SSQMgOtFcWc=
Subject key identifier:   42:9F:DC:D9:B1:BC:28:96:87:43:B6:3F:A3:85:03:AC:7C:63:64:E3
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285847E358A36E57BA25A885101680
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b4dae3d2-6288-3696-a906-6f7e1e4116f7.roa
Signing time:             Fri 15 Nov 2024 13:47:02 +0000
ROA not before:           Fri 15 Nov 2024 13:47:02 +0000
ROA not after:            Thu 13 Feb 2025 13:47:02 +0000
asID:                     6939
IP address blocks:        172.252.181.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e3:58:a3:6e:57:ba:25:a8:85:10:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Nov 15 13:47:02 2024 GMT
            Not After : Feb 13 13:47:02 2025 GMT
        Subject: CN=5fb27017-a64b-4f79-b5de-0321061e0711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:d4:18:e7:7c:1a:6c:88:6f:f4:6b:c8:1d:cd:
                    80:2b:32:8c:44:8a:2e:51:e3:aa:f9:db:a5:93:0f:
                    e1:58:3d:31:b1:26:6d:39:21:ab:a0:67:05:ea:7b:
                    5c:da:b6:6a:1a:43:90:0d:28:51:1f:5b:fc:62:c1:
                    1a:74:ea:a4:fb:d0:aa:3f:fb:ed:cb:09:8a:db:e8:
                    73:c7:e0:4c:cc:91:94:f0:43:7d:bc:c7:50:bc:18:
                    4e:89:d0:58:9b:0e:fd:ea:85:d0:1d:fb:c6:06:7c:
                    08:53:21:6e:56:4e:3d:38:0e:bc:cf:67:91:b5:06:
                    fd:cc:25:cf:0c:fb:ae:44:16:3b:42:25:c3:36:dd:
                    45:a0:01:66:62:5b:fa:c8:89:c9:53:07:f0:ed:8b:
                    fb:b8:cd:6b:f4:eb:d8:60:41:9a:64:90:84:1d:32:
                    04:c5:da:6e:33:00:21:75:8d:44:f6:6d:23:00:4c:
                    4b:03:31:31:06:c8:66:1c:e5:61:ca:52:fc:6b:e3:
                    c4:89:65:22:e0:a6:5a:c3:0f:c1:3e:0c:17:9c:cd:
                    77:80:21:65:c4:6d:f6:18:ed:57:3b:d1:dc:d0:1a:
                    79:56:6c:75:72:64:62:0a:66:aa:d4:11:6f:41:6d:
                    72:d0:9d:83:e0:31:dd:9d:f3:24:00:bc:59:00:20:
                    b3:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:9F:DC:D9:B1:BC:28:96:87:43:B6:3F:A3:85:03:AC:7C:63:64:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b4dae3d2-6288-3696-a906-6f7e1e4116f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:dc:89:31:12:2c:92:49:7d:44:c6:28:83:52:24:27:b4:82:
         16:82:6c:67:8c:7e:91:55:4e:2d:f2:32:00:8b:46:57:2c:68:
         22:11:4b:6a:53:8b:80:8e:35:63:8c:67:55:46:e2:fb:1c:c5:
         46:d6:bf:eb:2b:8c:12:17:2d:4e:77:64:c3:02:7a:4b:34:7e:
         51:15:b5:34:90:27:e9:c5:dc:35:ff:55:eb:90:b2:80:4c:7d:
         ac:b9:d0:40:17:ca:b1:99:09:8c:24:d0:e9:f3:83:bb:56:51:
         90:87:c2:40:1c:40:96:70:22:b9:0a:af:bd:80:7d:90:33:1f:
         90:33:cb:ae:1f:72:5a:d1:8a:1e:eb:0a:1a:01:d4:7e:64:20:
         14:7e:48:30:0a:b1:69:62:b5:5b:cb:42:b0:72:0d:4a:14:97:
         a8:ab:a1:74:83:98:61:6f:17:b2:fd:a9:b4:c6:71:70:c0:91:
         2f:23:44:62:dd:ca:56:f9:96:98:ad:84:b3:3f:d7:b1:52:9b:
         65:e0:70:b8:9e:c8:a6:de:e8:49:24:ce:9e:90:a1:17:62:22:
         fd:9e:37:f6:1c:88:92:98:56:a0:0e:3f:b1:05:af:97:4c:77:
         f9:12:8a:5d:ce:0c:33:d8:48:19:d5:d6:95:48:dd:5f:2c:73:
         e6:42:08:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:26:00 2024 by rpki-client on console-fra.rpki-client.org