Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ece129db-a211-3f7f-85c6-ceeaa898634c.roa
File:                     ece129db-a211-3f7f-85c6-ceeaa898634c.roa (raw, json)
Hash identifier:          2kMzv3eMtDkKNHDTfbP3nc9akY5GWV+1L/bmSkzhSdk=
Subject key identifier:   79:2B:88:5C:BE:9C:43:C0:8E:FF:B7:58:64:DC:55:7D:CE:F7:BD:37
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285847AB6C1CCF8B8F0FDF655BAE80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ece129db-a211-3f7f-85c6-ceeaa898634c.roa
Signing time:             Sat 26 Oct 2024 13:00:42 +0000
ROA not before:           Sat 26 Oct 2024 13:00:42 +0000
ROA not after:            Fri 24 Jan 2025 14:00:42 +0000
asID:                     149440
IP address blocks:        172.120.181.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ab:6c:1c:cf:8b:8f:0f:df:65:5b:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct 26 13:00:42 2024 GMT
            Not After : Jan 24 14:00:42 2025 GMT
        Subject: CN=2e3abe82-256d-4e2b-8d06-a235422e6e91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9f:c9:29:49:47:5a:bc:5b:2b:08:9f:96:a0:
                    72:c2:34:fa:89:65:b5:27:c2:ab:3c:e7:9a:a9:8b:
                    b7:ec:53:14:9c:60:82:41:68:a3:a8:8c:0a:34:db:
                    3d:25:00:21:3c:64:06:ae:52:02:3b:ca:24:1b:17:
                    70:4d:e2:e4:24:87:a8:fc:5d:5c:dc:52:06:e8:46:
                    9a:b5:b8:02:14:63:d8:75:a9:f4:97:e7:07:fb:6c:
                    69:32:0c:73:be:31:03:02:b4:30:82:f8:f6:aa:98:
                    f3:db:17:99:70:f0:24:75:21:5b:0a:90:34:1c:95:
                    0a:62:0d:3f:6a:5d:9b:64:18:a5:51:f3:fa:c5:46:
                    74:4e:d8:22:22:f4:ad:9f:38:b1:76:e3:67:1d:c6:
                    59:27:d8:0b:ec:84:cc:04:5f:df:42:ff:c8:4c:fa:
                    44:e5:f4:fa:91:24:8f:d6:4e:6b:f9:69:c8:56:c9:
                    3b:04:19:93:77:e3:af:8e:4a:dd:d0:8e:00:21:42:
                    a4:4c:97:cd:eb:8f:e9:49:e9:7f:ef:9c:fe:50:b0:
                    73:10:99:bf:0f:4a:7c:af:f8:fc:cc:a5:a4:7f:1b:
                    2a:58:b1:4f:c7:ce:ca:73:12:2b:84:9a:8e:72:ef:
                    76:f5:da:bc:f3:4b:b7:9f:39:94:26:5a:d6:85:51:
                    5d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:2B:88:5C:BE:9C:43:C0:8E:FF:B7:58:64:DC:55:7D:CE:F7:BD:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ece129db-a211-3f7f-85c6-ceeaa898634c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:d0:44:ad:f3:8f:ed:7f:98:b1:fc:a9:85:6f:03:97:f7:f8:
         12:16:3c:10:71:4c:40:ca:ed:59:25:76:6d:05:02:2b:60:c6:
         bd:2c:e5:60:e0:c8:b3:ff:fd:65:b9:28:28:d2:24:95:df:0f:
         2a:39:14:9a:09:12:04:9b:43:7b:dd:d6:33:49:d3:74:1c:ab:
         72:23:ef:ec:a9:71:13:5d:fb:11:13:ab:8d:b6:d4:82:10:a8:
         c6:af:90:77:ec:c2:39:19:16:8c:51:f0:b3:4d:11:dd:58:9e:
         7f:a9:2d:ee:1a:88:84:f7:6f:e6:21:77:41:66:66:fb:1f:33:
         f1:5e:2c:0c:8a:2e:af:54:a4:95:3a:13:a6:80:3b:61:be:a0:
         0b:8a:22:54:3d:35:df:34:0a:f8:82:d9:79:cf:3b:9c:71:fa:
         01:99:01:71:3b:ec:9b:18:4b:d1:1a:b4:32:57:1a:d1:72:fd:
         3f:85:e3:20:e8:26:df:f1:fa:02:9b:f9:eb:a8:63:90:ae:63:
         6e:94:89:0a:ae:20:8d:54:75:86:d3:fe:9a:70:aa:c9:d6:e5:
         36:99:75:3f:d7:82:d6:c4:ae:23:01:08:8d:ca:24:10:7f:5d:
         50:4d:9c:b4:98:a7:66:1f:3f:4d:3f:48:0f:ad:e7:b0:8f:18:
         ad:0d:c7:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:41:56 2024 by rpki-client on console-ams.rpki-client.org