Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ea0d0a9f-7233-32f1-87ac-5be0a05bac1b.roa
File:                     ea0d0a9f-7233-32f1-87ac-5be0a05bac1b.roa (raw, json)
Hash identifier:          vlZWAg35V41EdkXsaJqWdGju7ntPON6oJuhZN2ZZmPs=
Subject key identifier:   71:3F:78:72:07:1A:14:14:CA:66:19:7C:1D:CD:D7:51:E8:DA:72:CB
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285847F11D117937C23F394B3DB360
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ea0d0a9f-7233-32f1-87ac-5be0a05bac1b.roa
Signing time:             Wed 20 Nov 2024 12:08:20 +0000
ROA not before:           Wed 20 Nov 2024 12:08:20 +0000
ROA not after:            Tue 18 Feb 2025 12:08:20 +0000
asID:                     44893
IP address blocks:        142.252.197.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f1:1d:11:79:37:c2:3f:39:4b:3d:b3:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Nov 20 12:08:20 2024 GMT
            Not After : Feb 18 12:08:20 2025 GMT
        Subject: CN=c780f290-9230-4dd6-8bf0-ca3ca6975234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:0b:07:dc:ad:5f:21:a6:d6:10:5f:f7:d6:5f:
                    08:20:44:14:78:33:2d:dc:82:19:7c:e6:4b:5f:a0:
                    c6:06:dd:9b:ce:ca:dc:0d:7d:3a:0a:79:39:9c:29:
                    be:3c:10:e4:cc:a8:fc:15:24:d9:40:fc:c8:18:30:
                    47:e1:c5:ba:04:bb:5c:4b:e9:0a:cc:21:5c:69:d5:
                    d2:32:6d:2b:f9:45:30:ef:6b:c8:26:dd:69:98:48:
                    01:41:d5:86:e5:7c:57:ca:56:a6:cd:20:64:86:7d:
                    da:e3:8b:3d:42:0d:7c:45:c1:00:65:fe:f8:2c:60:
                    33:20:d8:87:83:a3:87:39:0b:8c:b4:da:f8:40:f7:
                    57:27:c0:98:ce:b4:24:5a:85:52:d8:9e:d3:a7:88:
                    b3:48:10:e2:2e:d7:6e:73:db:d8:57:59:42:a0:02:
                    2a:87:0d:d6:ae:b2:fc:1e:a5:35:db:98:ba:c6:1f:
                    23:b4:50:d4:31:5b:79:79:3a:75:1f:e5:b8:3d:1f:
                    7b:e2:27:2f:d4:0c:e1:50:b9:1c:d8:7e:3b:be:86:
                    db:89:f4:68:53:c5:ae:86:f2:22:83:3e:c7:76:f4:
                    44:c9:3d:bf:0a:cb:aa:a8:7c:4f:df:36:e1:25:9e:
                    33:04:c4:a1:f6:59:10:96:a0:6b:97:43:a1:dc:38:
                    cd:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:3F:78:72:07:1A:14:14:CA:66:19:7C:1D:CD:D7:51:E8:DA:72:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ea0d0a9f-7233-32f1-87ac-5be0a05bac1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:77:0c:df:13:de:b5:55:d3:57:2f:97:9c:e3:f2:fe:aa:91:
         91:81:04:cf:11:ea:bb:12:0c:be:97:c6:7b:9e:8e:a0:e7:eb:
         05:9a:1d:ff:25:c1:bf:fb:da:cc:f7:6a:ae:d1:7e:18:eb:c0:
         0e:b4:87:e0:f5:16:73:2d:d4:8f:6b:09:fe:95:87:de:47:ed:
         51:e8:9c:d4:f1:e9:b1:ed:95:5c:50:ef:ff:c5:fc:04:81:b9:
         1d:4b:56:1f:80:b2:80:86:50:c7:ba:0d:ea:21:e7:53:ac:d0:
         1b:0e:a3:d3:ef:0e:7a:7f:1a:c7:8b:b1:24:21:47:9e:26:b5:
         a9:71:bc:f0:5f:49:94:d5:a6:d3:74:ba:96:f0:b6:dc:32:26:
         1f:28:37:ff:42:5e:4e:96:96:ef:0e:aa:b6:76:d6:28:a2:b1:
         53:bb:ae:a4:24:27:7f:aa:7e:ad:7f:9f:49:ef:c4:3d:79:7e:
         5e:6e:9b:ab:c3:59:d4:ec:78:52:55:a9:7a:16:d5:11:ab:33:
         7a:52:07:77:e7:eb:9c:8f:81:78:6f:9b:34:0d:cc:dc:ca:a5:
         93:80:f9:78:76:f9:d5:6a:52:14:32:1b:6a:16:57:97:1c:29:
         29:43:1c:44:d5:13:3b:55:90:26:1d:91:4a:03:61:d7:d2:3e:
         d3:3a:c9:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:49 2024 by rpki-client on console-fra.rpki-client.org