Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b8ea61ce-11f4-3133-b475-e13bd177ebd9.roa
File:                     b8ea61ce-11f4-3133-b475-e13bd177ebd9.roa (raw, json)
Hash identifier:          bdHRo5IcyHJNQxcH0BD8cY/5bHVtCurMQAUTjvdfA28=
Subject key identifier:   88:FD:BC:DC:E8:AB:42:C7:07:16:F8:01:0A:5E:1C:B0:82:56:01:5F
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285847B0D0F29E55C1D1F729BB5880
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b8ea61ce-11f4-3133-b475-e13bd177ebd9.roa
Signing time:             Mon 28 Oct 2024 11:23:13 +0000
ROA not before:           Mon 28 Oct 2024 11:23:13 +0000
ROA not after:            Sun 26 Jan 2025 12:23:13 +0000
asID:                     44477
IP address blocks:        45.38.134.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b0:d0:f2:9e:55:c1:d1:f7:29:bb:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct 28 11:23:13 2024 GMT
            Not After : Jan 26 12:23:13 2025 GMT
        Subject: CN=f5bc6778-7308-4cc7-87a3-fa3d21aa568e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:f9:50:3e:d0:e1:e0:e1:92:25:23:a3:56:b0:
                    38:95:85:c4:91:09:d7:a4:1b:2d:b3:85:21:ec:35:
                    db:ae:d6:09:7b:b1:7a:e2:a8:42:e9:52:b2:70:21:
                    a4:40:c9:af:da:03:32:c9:2c:69:13:40:11:4a:63:
                    5c:12:63:0f:97:92:5e:0f:84:fb:f6:b7:1e:13:fa:
                    ff:5b:f4:8b:21:6a:0d:c4:b3:cf:1e:0f:f3:65:cc:
                    8e:99:f2:bb:23:c2:a6:c9:c4:60:be:9c:31:94:ca:
                    f3:16:b1:71:13:2e:2e:5a:a1:47:74:2f:2a:af:20:
                    d6:be:f1:b7:c5:43:c7:51:f7:9a:8f:e4:f2:82:d2:
                    6e:a2:5a:cb:be:7b:09:d0:eb:9f:7b:02:9b:37:b8:
                    01:13:25:c6:28:1c:24:71:9c:25:8b:07:4e:f8:ad:
                    e9:09:96:42:34:91:51:38:7d:7b:b7:e1:16:dc:ac:
                    e8:a4:cb:2e:b2:36:1d:c2:ef:22:a9:40:1b:f0:06:
                    09:d3:b3:e1:69:e4:2a:22:56:03:53:0d:b4:f8:eb:
                    f2:c0:69:70:35:9c:c9:78:a9:c0:37:02:be:2d:2e:
                    85:54:df:e1:fd:36:41:02:a1:e9:85:ca:7a:41:6d:
                    aa:3c:cd:84:10:7d:d8:ed:86:26:07:f3:9e:40:71:
                    d6:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:FD:BC:DC:E8:AB:42:C7:07:16:F8:01:0A:5E:1C:B0:82:56:01:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b8ea61ce-11f4-3133-b475-e13bd177ebd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:a0:b0:37:46:ef:b7:6d:88:ee:13:22:36:c5:2e:e1:5a:6a:
         83:ae:f9:eb:9b:33:ef:a2:b5:00:4e:44:7a:f6:55:b1:14:ec:
         94:a0:a8:b8:8e:7b:c0:7f:c7:e8:96:dd:9f:da:86:df:47:1c:
         7e:83:6c:b0:2d:fc:4c:c3:8b:86:33:f8:ac:7d:86:b3:b5:75:
         20:e0:ce:f7:42:f2:53:c6:5e:e0:ff:54:b5:69:a4:d3:39:f7:
         9f:ff:51:12:ac:72:05:07:7a:83:32:c5:3b:9f:fe:05:b8:00:
         75:51:5a:c5:8a:89:b6:05:b7:e9:c8:71:55:f9:59:51:33:5e:
         e0:09:98:9d:f5:48:9c:e9:f4:a7:1e:b4:c7:26:aa:64:94:3b:
         a6:10:7c:e9:b0:95:c4:0e:b1:c8:12:ab:68:eb:e6:6c:9f:3d:
         63:be:72:90:55:2b:33:11:ee:f9:8a:21:6c:f6:f0:9d:6e:73:
         a6:3d:76:f4:d9:41:fb:b8:d0:53:0a:2d:92:40:dd:09:1d:1b:
         ef:0f:f8:d5:be:11:4b:8c:74:7b:a5:6e:12:2d:2d:66:40:9a:
         f1:72:c4:c4:a2:9c:6e:37:41:e9:98:0c:e4:85:0e:df:fa:65:
         f7:ed:91:f4:a1:ea:e0:31:12:48:b2:c6:0e:54:53:ef:26:8e:
         ae:a6:e8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:26:01 2024 by rpki-client on console-fra.rpki-client.org