Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b61b5ebc-82c5-3e90-9b4f-732ea4cee3d2.roa
File:                     b61b5ebc-82c5-3e90-9b4f-732ea4cee3d2.roa (raw, json)
Hash identifier:          4DdpmOZObsBHEdPGZxafrQC7/H7VzWsocwj91VhRu7o=
Subject key identifier:   3B:1F:B1:3D:0A:B4:16:37:FB:54:0C:2C:05:6D:68:F1:F3:F9:D8:C3
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858472B7F9CC79D7744426634E200
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b61b5ebc-82c5-3e90-9b4f-732ea4cee3d2.roa
Signing time:             Tue 10 Sep 2024 17:16:50 +0000
ROA not before:           Tue 10 Sep 2024 17:16:50 +0000
ROA not after:            Mon 09 Dec 2024 18:16:50 +0000
asID:                     50131
IP address blocks:        172.252.131.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:7f:9c:c7:9d:77:44:42:66:34:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 10 17:16:50 2024 GMT
            Not After : Dec  9 18:16:50 2024 GMT
        Subject: CN=4ba099ad-4fc8-4dc1-8a0e-012a344a332e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:66:a1:56:0f:d8:9c:33:80:9f:e7:f1:0a:96:
                    9b:9e:68:79:f0:78:28:46:17:f6:66:fe:cb:58:fa:
                    54:99:4f:e1:fb:6c:02:4e:e5:51:74:6e:bd:bd:45:
                    7d:e8:d6:ba:3a:5f:fb:92:92:18:5b:67:8c:e3:14:
                    30:e8:7d:31:be:2f:ef:f6:e8:c8:81:0b:4f:20:41:
                    45:7a:82:07:72:a0:62:41:3f:2b:4c:26:57:22:79:
                    25:72:fd:26:fa:96:b7:d1:d7:1f:bf:d8:e2:b0:73:
                    20:42:af:42:ee:76:79:35:22:1c:9e:eb:ad:f6:5d:
                    ff:84:b3:9b:66:d0:73:0c:74:2b:0c:22:74:a8:73:
                    de:51:42:96:ef:6e:a0:89:f3:cb:6f:43:98:a8:7a:
                    9e:98:1c:0f:f7:c3:48:a4:3c:2e:40:b0:c3:17:01:
                    bf:e7:56:df:67:34:3b:8f:c0:05:0d:71:3c:6e:ed:
                    5a:ec:3d:69:4b:7b:9a:de:41:a5:00:7a:be:0b:3b:
                    1b:d9:d7:97:42:e3:ae:95:c4:82:c3:8f:33:e9:28:
                    9d:60:08:11:3d:a0:3c:d2:0d:19:f2:3a:ed:4a:78:
                    f8:74:99:e3:f1:65:c1:13:47:0f:7c:5d:be:4d:4f:
                    85:6e:6d:20:bb:f4:3f:20:bc:f7:b8:91:40:3b:07:
                    20:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:1F:B1:3D:0A:B4:16:37:FB:54:0C:2C:05:6D:68:F1:F3:F9:D8:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b61b5ebc-82c5-3e90-9b4f-732ea4cee3d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:ed:27:c7:48:41:16:d8:ba:52:9b:7a:95:fb:5a:24:c3:d5:
         40:35:26:42:cf:1b:a3:91:82:67:ac:fe:0a:4b:be:75:21:52:
         e7:1d:8c:9f:66:2c:cf:aa:d6:d3:e1:88:73:1c:1f:0d:b0:2d:
         8d:76:7a:c3:f4:18:2f:36:1f:67:1e:91:02:69:26:d3:08:69:
         87:a2:5d:bf:bc:81:3c:a4:cf:f7:d0:0f:d5:a4:39:ea:10:db:
         b6:18:6a:69:c0:b5:5b:6c:50:6d:fd:b8:5e:a1:96:7c:30:67:
         fd:6f:3a:da:cb:1d:18:3b:55:e8:bc:85:25:61:04:a1:cf:b9:
         9d:03:c5:44:d5:0c:41:f7:77:a9:78:d5:28:a8:4d:6b:5b:ae:
         68:5e:fb:ba:ac:f3:75:13:5e:a2:fb:7d:4e:50:88:04:e9:9d:
         91:1c:3c:ec:9a:41:6f:61:c7:17:c6:6c:ff:ab:62:dc:a2:a7:
         ba:eb:1d:ce:34:c8:89:bf:37:87:3e:93:35:25:38:16:a5:40:
         65:35:fe:e7:7f:1f:a4:37:60:fe:be:b8:e5:19:b2:e0:db:f5:
         b3:31:f7:0f:b8:75:33:8f:54:97:89:b2:e7:3e:ec:f4:d9:2b:
         be:08:c1:bd:34:37:ee:3d:a2:01:48:4f:54:8b:0a:d6:16:20:
         f7:2d:f5:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:26:00 2024 by rpki-client on console-fra.rpki-client.org