Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e0acfacb-6726-3a0b-bb68-0d084ec8fe71.roa
File:                     e0acfacb-6726-3a0b-bb68-0d084ec8fe71.roa (raw, json)
Hash identifier:          e+82KT0O7v2cqB0DSIQe7WfCZdRjX5MHEcwCzKLtAQU=
Subject key identifier:   02:BB:9C:D4:1C:48:81:B3:FA:F9:DE:34:A0:13:3C:4B:17:43:D1:20
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584769D0E23A57F6A0F7FBD62C80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e0acfacb-6726-3a0b-bb68-0d084ec8fe71.roa
Signing time:             Thu 03 Oct 2024 01:00:31 +0000
ROA not before:           Thu 03 Oct 2024 01:00:31 +0000
ROA not after:            Wed 01 Jan 2025 02:00:31 +0000
asID:                     64267
IP address blocks:        142.252.145.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:69:d0:e2:3a:57:f6:a0:f7:fb:d6:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  3 01:00:31 2024 GMT
            Not After : Jan  1 02:00:31 2025 GMT
        Subject: CN=f728d737-85e8-4cf0-8074-97663a7aa684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:4f:1a:73:ce:70:9f:f2:f8:b2:90:cb:31:df:
                    6f:b4:4b:f2:b8:c8:61:76:05:6d:7d:a6:84:f1:bb:
                    ee:63:14:4c:bc:b9:2b:06:b9:f0:65:b0:f7:ad:8e:
                    6f:26:a5:66:55:3d:ec:55:35:68:51:67:86:6e:66:
                    da:68:03:7b:51:64:57:20:94:9f:3b:9c:42:ff:65:
                    e7:a7:41:45:b9:23:80:b1:9c:b6:7d:e7:88:dc:84:
                    0c:e1:27:98:60:a2:ae:66:e9:ae:1d:16:9e:ee:d4:
                    16:e3:c7:25:03:83:3f:74:cb:13:a3:b7:16:9f:df:
                    61:fe:01:f0:59:c0:ac:78:89:c9:7c:65:b3:09:cd:
                    e9:b8:93:84:82:5f:11:f7:43:81:6b:16:33:56:dd:
                    32:6d:63:23:df:99:5b:05:e9:54:c9:28:b6:4c:e4:
                    f5:c3:60:0a:1c:27:78:d2:ab:c7:c6:8a:b0:fb:05:
                    5c:a4:4a:28:ff:0e:6f:f1:a8:b2:c3:9e:5a:4b:54:
                    5f:41:88:fe:d5:a1:5c:a5:2e:ab:f5:48:c7:75:79:
                    f1:d9:d0:fa:c7:af:5c:ad:b9:d0:cb:d7:9d:a3:3e:
                    00:33:3d:7c:1a:37:39:46:8a:35:c4:99:4e:4c:1b:
                    aa:f1:77:9d:18:89:55:ad:a2:23:0d:cc:17:86:10:
                    75:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:BB:9C:D4:1C:48:81:B3:FA:F9:DE:34:A0:13:3C:4B:17:43:D1:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e0acfacb-6726-3a0b-bb68-0d084ec8fe71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:b9:a9:6a:18:ba:49:5b:90:2d:de:88:13:6f:f7:4a:cc:6d:
         ab:9d:86:ea:fa:ef:24:b3:b2:40:a6:55:a5:be:16:5c:71:81:
         dd:fd:ba:eb:bc:ba:57:ac:36:c6:5c:e0:1d:43:ec:e3:dd:5b:
         90:a4:63:ab:4b:0e:e9:a2:24:58:52:d8:67:a3:4f:84:c6:b9:
         44:d8:93:d9:c4:e1:90:77:38:c0:63:af:15:f0:cc:70:c0:8d:
         24:85:ae:a0:de:df:75:86:c8:b0:d8:08:4c:e8:dd:2e:ad:5a:
         a2:55:c9:35:a5:ee:8a:4f:cf:64:3d:9f:bd:82:d9:d4:5c:08:
         90:3c:49:d3:e0:e8:ef:23:16:0f:e2:80:af:e7:dc:b3:a4:85:
         f8:cb:58:f8:cc:75:17:16:4e:66:f9:a4:a6:8c:bf:7b:dd:13:
         1f:f0:e0:b3:54:a5:21:55:dd:34:98:d5:c3:29:52:b1:bd:6c:
         cd:11:09:12:88:21:49:20:5a:67:21:14:79:ad:55:e2:ef:79:
         75:92:85:9d:a0:2a:50:5d:81:62:ed:3f:0d:2c:e0:7e:a8:d2:
         7b:d5:f2:2f:c2:9d:27:ad:2b:77:5d:0c:1a:fa:d1:d0:d6:34:
         53:bb:37:a1:fc:cb:18:ab:b3:e9:40:31:61:3a:d9:73:a1:f7:
         2b:e9:30:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:41:55 2024 by rpki-client on console-ams.rpki-client.org