Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e0acfacb-6726-3a0b-bb68-0d084ec8fe71.roa
File:                     e0acfacb-6726-3a0b-bb68-0d084ec8fe71.roa (raw, json)
Hash identifier:          xNzNj5OLaaly8W4UzP/0nnVmmsoqXO2CVCqA4uApqH4=
Subject key identifier:   30:92:D5:33:80:8D:CC:D3:DD:95:5B:6F:33:E4:C7:E7:C2:85:E4:E8
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285845A9BE1FEFBD337E206CFF3E80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e0acfacb-6726-3a0b-bb68-0d084ec8fe71.roa
Signing time:             Thu 25 Apr 2024 13:00:33 +0000
ROA not before:           Thu 25 Apr 2024 13:00:33 +0000
ROA not after:            Wed 24 Jul 2024 13:00:33 +0000
asID:                     64267
IP address blocks:        142.252.145.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a9:be:1f:ef:bd:33:7e:20:6c:ff:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 25 13:00:33 2024 GMT
            Not After : Jul 24 13:00:33 2024 GMT
        Subject: CN=224de0ea-add8-4339-a6bd-8339a700122c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4b:71:91:52:cf:c3:17:3b:bf:f1:de:12:04:
                    87:d3:10:62:66:ac:95:bb:55:dc:27:70:cf:1e:b8:
                    2b:f9:2a:d6:d4:8c:68:f5:90:e5:d1:fa:0d:83:4b:
                    06:6c:e8:0e:55:cc:cd:77:e4:64:54:48:9e:5c:13:
                    7a:81:ef:a4:8d:33:ca:de:fd:9d:c4:21:c8:d6:36:
                    d3:22:dd:9f:82:45:ce:1b:4a:1b:76:6c:d7:9a:25:
                    0c:f9:e8:df:ba:54:0e:0d:8a:3c:60:5c:57:b1:60:
                    84:7b:6d:43:23:44:1e:9a:5f:3d:15:a8:71:d5:d3:
                    1c:f4:c4:cc:f1:c4:5e:6b:fc:ad:e4:be:10:53:4f:
                    71:a9:1e:90:c5:ab:24:8f:41:bf:9e:95:73:9f:e8:
                    5d:4b:bb:e3:67:e4:9f:61:29:29:99:67:20:56:b8:
                    1d:cb:4e:ae:22:29:30:26:69:bc:3a:ef:99:e8:a5:
                    9b:d0:ea:55:89:5c:1f:6c:45:0a:c7:17:e1:36:54:
                    76:b2:e0:5e:b1:7f:8b:07:d2:bb:a5:92:c1:4e:1c:
                    f4:da:d9:78:1e:4f:6d:1b:9a:3a:f3:1e:c1:32:31:
                    ec:79:63:e3:b1:6d:fa:9c:a1:cb:21:95:da:91:ff:
                    45:c2:b4:2b:4c:0f:03:f5:6f:49:dc:1d:52:1d:4a:
                    ac:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:92:D5:33:80:8D:CC:D3:DD:95:5B:6F:33:E4:C7:E7:C2:85:E4:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e0acfacb-6726-3a0b-bb68-0d084ec8fe71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:65:84:36:94:b1:90:b1:b9:0d:bd:81:02:4d:67:43:6b:9f:
         a6:84:d1:ea:30:2b:0d:6d:ae:bb:36:2f:c8:47:02:81:9e:8e:
         2d:a4:89:a8:c5:37:7f:06:d3:9d:1d:ad:30:b5:6a:fc:02:7b:
         79:b7:7d:f5:a4:97:2f:15:86:c2:4d:cc:ce:db:89:19:a0:64:
         35:93:91:78:92:80:a4:f6:fc:fc:81:a9:ab:bc:fc:e3:f6:74:
         95:6f:3d:ce:e1:95:b0:83:21:56:a8:55:7e:60:9a:50:88:0c:
         41:0f:7d:79:25:24:ab:9a:6a:70:78:28:fb:53:88:d7:95:e3:
         96:e6:77:51:cf:c5:1f:ff:a4:63:68:6a:13:f4:54:f9:a9:8f:
         d5:a7:e6:56:7d:96:ba:b9:16:49:9d:62:13:b3:f1:14:18:a9:
         c4:18:6b:5e:05:6d:49:83:1e:d2:29:c9:6d:50:1a:d5:36:84:
         8e:37:a0:d8:f7:63:ac:f7:a5:ab:db:49:95:70:73:f9:20:8e:
         85:f1:82:56:3d:38:45:1a:54:68:53:07:70:7f:32:f6:1f:cb:
         1d:f5:3b:30:ad:8e:47:b1:9b:62:7f:1e:ab:56:8e:4d:35:25:
         ef:f4:d8:11:78:c9:bf:d1:13:73:ae:a8:c3:7b:11:7d:fb:a1:
         73:51:a3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 15:02:29 2024 by rpki-client on console-fra.rpki-client.org