Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f78f9003-b34e-3a05-acce-0d7ade5d4074.roa
File:                     f78f9003-b34e-3a05-acce-0d7ade5d4074.roa (raw, json)
Hash identifier:          vdKSAiMdXL5b/AbHR4Sf3HQnjixTKB/UpV1lX601c1U=
Subject key identifier:   30:D5:8C:19:DE:DF:93:3C:8D:5A:DC:74:2B:21:DE:37:F9:E5:97:0F
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285847F1635DDAF7B4F9AA64265100
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f78f9003-b34e-3a05-acce-0d7ade5d4074.roa
Signing time:             Wed 20 Nov 2024 14:29:58 +0000
ROA not before:           Wed 20 Nov 2024 14:29:58 +0000
ROA not after:            Tue 18 Feb 2025 14:29:58 +0000
asID:                     48031
IP address blocks:        45.39.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f1:63:5d:da:f7:b4:f9:aa:64:26:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Nov 20 14:29:58 2024 GMT
            Not After : Feb 18 14:29:58 2025 GMT
        Subject: CN=cee25b9f-ae53-4583-8002-8c20cbaa6101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:55:9e:a8:70:0f:2a:14:3b:bb:7b:26:06:5a:
                    1e:6f:65:3a:ed:e6:3e:f8:59:00:ac:5f:ab:ec:8a:
                    ca:94:34:9e:26:b6:19:ce:1d:1a:10:8c:a4:94:59:
                    06:73:87:00:88:c4:8f:18:21:95:37:54:71:f1:cb:
                    64:ed:9a:06:eb:35:67:65:96:9a:43:ea:e0:89:b9:
                    dd:14:46:0f:14:75:fc:9a:72:2a:a2:84:92:7a:b9:
                    d7:c4:54:7d:97:35:80:30:4b:e6:00:85:63:bf:50:
                    24:3b:68:1e:61:98:8e:45:4a:cd:60:57:26:18:e6:
                    06:5b:8e:1e:4b:4b:90:0c:79:c2:01:4e:ed:80:93:
                    47:9b:24:70:f4:f4:a1:a4:ef:06:05:dd:b0:f1:93:
                    44:54:9a:b9:d5:51:e0:98:1d:ca:60:53:e0:a7:58:
                    82:a6:29:0b:05:9c:49:e9:cc:8a:50:d9:4e:ee:23:
                    6e:de:17:62:2f:66:54:74:c3:7d:e8:f1:47:77:c1:
                    77:70:c7:79:3a:3c:88:b0:24:92:3a:d4:57:21:36:
                    57:64:ab:22:91:0f:35:a4:bc:58:52:ce:ea:e2:e3:
                    dc:8c:63:8f:86:8a:77:ec:da:88:d8:09:2f:f1:93:
                    fe:d2:57:e1:7b:57:f3:6f:08:f3:7b:28:5e:32:99:
                    79:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:D5:8C:19:DE:DF:93:3C:8D:5A:DC:74:2B:21:DE:37:F9:E5:97:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f78f9003-b34e-3a05-acce-0d7ade5d4074.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:cf:9a:32:5e:cc:a2:ee:e6:ab:14:b0:b7:a1:a6:f6:f0:ff:
         19:c7:a2:88:09:7c:72:a4:00:c5:7e:dc:7d:29:3a:54:4f:bb:
         4e:2e:81:25:cc:d7:79:f3:af:a7:ab:44:88:96:e9:c4:7b:7a:
         e8:69:13:f2:80:c7:b6:5d:2b:c9:33:82:d0:a2:c0:de:96:bd:
         8f:30:66:f5:dc:a1:1f:28:ff:96:7d:88:f7:a8:62:20:d1:96:
         75:11:a3:64:16:d6:75:86:7a:e9:0a:b2:35:0e:4c:53:ce:d7:
         06:11:54:43:48:44:12:a6:c6:f3:eb:80:46:0a:aa:fb:d3:f7:
         8b:99:94:73:4b:50:8e:25:f3:8e:73:0b:f7:c8:68:b2:2b:b6:
         e8:25:fd:8b:7e:d5:9c:43:25:f9:a0:41:b1:54:fb:a9:27:0b:
         60:e4:69:3d:1c:0b:47:2f:7a:84:04:56:d0:7e:05:39:34:58:
         19:67:ac:73:82:79:dd:9e:35:ae:55:6a:a2:88:c9:d1:1d:63:
         f5:47:39:30:62:1a:6f:91:42:5e:1d:85:53:5e:8a:1e:cc:4d:
         73:cb:ab:5e:c4:45:71:86:8c:1d:f2:8a:59:8d:5b:58:b5:1d:
         ea:08:55:3a:1c:01:97:db:0e:8a:b3:30:17:42:25:f6:b1:5e:
         79:ce:e9:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:26:02 2024 by rpki-client on console-fra.rpki-client.org