Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/df563155-11fd-3cbe-ae01-e87e1e917a60.roa
File:                     df563155-11fd-3cbe-ae01-e87e1e917a60.roa (raw, json)
Hash identifier:          Z1hGmJbyTzKRCGuEXHRWycxBUFVWgM1C1qOeUi7Hq70=
Subject key identifier:   93:2C:BC:08:1D:93:90:D3:55:55:94:1D:DE:F9:90:B7:98:9B:40:DB
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285845AD3A143582723F39D7563500
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/df563155-11fd-3cbe-ae01-e87e1e917a60.roa
Signing time:             Fri 26 Apr 2024 18:57:56 +0000
ROA not before:           Fri 26 Apr 2024 18:57:56 +0000
ROA not after:            Thu 25 Jul 2024 18:57:56 +0000
asID:                     149440
IP address blocks:        172.252.245.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ad:3a:14:35:82:72:3f:39:d7:56:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 26 18:57:56 2024 GMT
            Not After : Jul 25 18:57:56 2024 GMT
        Subject: CN=006590b4-74da-4c3e-97d0-6d24b546e2bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b2:ca:c1:a2:e1:42:ed:62:fd:ce:0d:bf:a7:
                    5d:f3:ab:2c:81:27:0f:03:cf:a7:9b:dd:ed:ae:da:
                    aa:f1:58:65:36:0d:97:89:ee:47:48:c4:44:22:9a:
                    2d:ed:c6:48:51:46:e7:7d:e3:31:71:01:09:a1:23:
                    69:a8:ac:f9:30:a8:aa:61:57:1c:6d:93:b8:f2:8e:
                    24:bf:22:ab:20:b4:79:51:6d:78:a8:98:67:70:6c:
                    46:ae:87:0d:d6:61:c9:f6:d0:88:7b:70:b1:83:10:
                    23:cc:e7:89:21:23:82:9a:c2:c0:7d:d2:14:9e:1a:
                    db:00:c0:75:73:fc:12:56:97:c8:75:6c:3a:1c:43:
                    d5:3d:aa:23:06:f2:0b:c2:35:71:e5:d9:41:bb:3b:
                    88:5e:77:24:bc:93:cf:f2:b6:15:2f:cd:48:80:ce:
                    e9:93:fe:5d:1e:6d:f6:e6:7e:c1:16:ed:8b:83:53:
                    92:9d:a2:53:68:0c:a1:c4:59:b2:01:e1:30:d1:d3:
                    47:b3:89:a3:dc:1b:b1:09:d6:59:1c:f2:0e:a7:ea:
                    96:39:37:79:75:0c:63:31:c9:05:df:4a:1e:e2:2e:
                    14:4a:e9:9f:90:fd:48:d4:ce:73:b0:14:17:b1:7a:
                    94:b6:66:de:6f:8d:b9:26:90:5e:62:d5:16:09:eb:
                    6f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:2C:BC:08:1D:93:90:D3:55:55:94:1D:DE:F9:90:B7:98:9B:40:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/df563155-11fd-3cbe-ae01-e87e1e917a60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:19:e7:da:a6:70:ea:04:c4:57:ca:5a:87:05:82:e9:2e:c2:
         bd:da:06:a3:8f:4e:71:c4:b8:21:1a:65:44:a2:71:dd:88:9f:
         05:6a:6c:a3:3b:3f:35:b0:df:fc:df:31:51:30:4d:4c:72:16:
         6e:21:e8:ce:c0:fa:57:65:52:36:c1:dc:59:a3:b8:4e:bd:73:
         75:3f:0e:1b:1b:e1:1d:fb:3f:53:97:7f:46:80:25:81:86:8e:
         8e:64:d2:e7:45:c8:71:55:6c:59:dc:e0:94:1e:99:67:d9:9b:
         5a:2a:1b:2a:2b:87:a0:ed:d8:51:15:fc:e3:f5:38:77:7c:4c:
         53:2d:29:ef:fe:38:1d:37:7b:e3:12:14:79:74:f7:ef:b5:b3:
         4f:7c:ef:ee:63:0e:d9:ee:2e:53:f3:c8:a7:12:26:16:de:21:
         67:39:01:47:4b:f8:24:2d:0a:ce:49:19:c8:f6:20:82:f5:c4:
         8f:62:6d:c7:42:81:d9:a2:29:a7:4e:dd:f4:f4:5e:9d:6b:3f:
         bd:8c:a4:e1:d5:b5:c8:d5:0f:7f:13:38:e6:1c:9e:77:7a:0e:
         29:e2:90:e4:33:96:10:d2:97:82:a0:fc:11:44:ee:99:6e:ad:
         88:97:4d:f1:4d:32:e8:80:06:60:d5:ea:b9:1c:a7:ae:a5:ee:
         7c:9b:16:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 08:50:01 2024 by rpki-client on console-fra.rpki-client.org