Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/decccf6e-0fac-364c-a938-2be166818fe7.roa
File:                     decccf6e-0fac-364c-a938-2be166818fe7.roa (raw, json)
Hash identifier:          CPQ959oXmTLucqL8NOiv/2IoTr0+RxXhIve8Hi7I8ls=
Subject key identifier:   EC:C2:A8:49:2D:DB:E9:1E:0E:4D:7B:CF:94:C7:DD:5F:EC:AD:AB:D4
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858477ED2E61146A7837262A62400
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/decccf6e-0fac-364c-a938-2be166818fe7.roa
Signing time:             Thu 10 Oct 2024 13:36:44 +0000
ROA not before:           Thu 10 Oct 2024 13:36:44 +0000
ROA not after:            Wed 08 Jan 2025 14:36:44 +0000
asID:                     56971
IP address blocks:        104.252.127.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7e:d2:e6:11:46:a7:83:72:62:a6:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct 10 13:36:44 2024 GMT
            Not After : Jan  8 14:36:44 2025 GMT
        Subject: CN=3b5eb20d-cb55-4f99-8559-165b4d9772df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:7d:8f:fd:e2:39:2c:96:67:4a:63:98:b4:e9:
                    09:d6:85:67:9e:5f:a1:c5:6e:16:da:72:10:71:4d:
                    b4:6c:e9:ea:a6:1c:ea:8a:e7:66:53:27:11:20:5e:
                    b3:12:57:9c:f7:88:87:c1:1a:80:05:f3:4c:0a:38:
                    4e:32:f1:f7:d7:ae:71:2f:8a:cc:b9:79:f4:63:db:
                    ed:8d:8a:8a:69:ad:58:2c:b9:54:73:08:92:ed:fb:
                    f0:41:84:67:f3:b9:06:3d:16:57:94:74:7f:12:66:
                    ec:6e:db:57:ae:f0:33:ac:af:69:a6:57:d5:ef:39:
                    a0:94:2b:0d:51:17:e7:b5:28:04:ac:e0:53:24:11:
                    e7:6c:fd:15:d1:14:1c:54:10:06:0a:ae:08:9b:9a:
                    3d:e0:6f:d0:aa:9d:18:0e:8e:39:bf:fc:57:62:16:
                    04:77:44:d4:30:6b:c8:19:bd:0c:e2:38:6e:0d:b5:
                    58:80:b8:1a:14:74:4d:8a:66:94:10:76:47:90:a9:
                    1f:dd:07:b9:ea:7d:36:38:2f:1f:d5:8b:c0:15:0c:
                    d6:44:6f:b5:8c:3f:d5:63:2a:14:72:3d:da:df:21:
                    5b:74:ed:61:27:e1:08:93:29:d7:99:89:fe:47:81:
                    7f:64:44:90:f9:b5:e7:68:f5:df:1c:73:ea:6a:eb:
                    3d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:C2:A8:49:2D:DB:E9:1E:0E:4D:7B:CF:94:C7:DD:5F:EC:AD:AB:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/decccf6e-0fac-364c-a938-2be166818fe7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:c0:37:01:0f:d9:aa:d5:6c:e5:f3:da:8f:df:20:37:2a:ba:
         ba:fe:4c:42:30:7b:e4:a4:04:8b:73:57:ad:f8:aa:e3:e5:e3:
         4c:07:01:b3:db:82:18:54:d0:85:bc:e8:95:4e:c4:40:95:ea:
         9f:3c:79:75:27:aa:b3:c0:c2:bb:5a:a1:3d:19:7e:a7:e4:71:
         9e:7e:c1:84:7d:2e:9f:d5:a9:91:7f:19:9c:e4:3c:0c:51:d5:
         e4:f1:0f:c1:e0:1c:ed:1c:a4:b3:2f:2e:24:ed:a4:cb:75:25:
         f6:79:6c:f4:ce:92:9b:e1:11:8a:75:0a:b0:1b:a3:5d:cc:d2:
         6a:0f:aa:14:52:94:20:e3:c1:e4:5d:d3:0b:89:e2:75:cc:b3:
         46:a8:47:ae:65:4a:2d:a2:14:61:ca:77:48:ae:7a:7f:44:d0:
         a8:35:6d:10:2b:4d:f6:9c:c5:45:44:c3:6d:a7:8e:6a:54:86:
         a7:8d:4b:80:3c:34:07:e1:81:fc:c2:99:3f:34:02:67:bb:f6:
         3e:b1:d6:27:e7:00:64:51:fc:2c:9d:70:de:93:c8:f1:9a:85:
         a5:41:e6:68:40:e7:fe:64:19:4d:25:61:58:96:8a:ed:bc:0f:
         30:46:97:11:f2:63:d3:06:2f:28:d1:06:04:e8:18:06:25:4c:
         5c:40:52:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:41:55 2024 by rpki-client on console-ams.rpki-client.org