Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/faea724b-2eac-3c21-8f77-88333f930e6e.roa
File:                     faea724b-2eac-3c21-8f77-88333f930e6e.roa (raw, json)
Hash identifier:          BxgoJs/SHFjB525bYfU6odjar5kq9NocgZZsP8XoQ0Q=
Subject key identifier:   74:4F:AD:6A:0A:62:DA:7E:12:B1:99:8D:3E:37:9A:8A:01:D4:C5:CE
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285847F0F8B25041EC85BF6B96BAC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/faea724b-2eac-3c21-8f77-88333f930e6e.roa
Signing time:             Wed 20 Nov 2024 10:55:03 +0000
ROA not before:           Wed 20 Nov 2024 10:55:03 +0000
ROA not after:            Tue 18 Feb 2025 10:55:03 +0000
asID:                     40950
IP address blocks:        45.38.0.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f0:f8:b2:50:41:ec:85:bf:6b:96:ba:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Nov 20 10:55:03 2024 GMT
            Not After : Feb 18 10:55:03 2025 GMT
        Subject: CN=9b6f164d-29b0-4d61-9930-1f4227705002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:45:51:b4:f8:01:a4:14:35:37:d5:e3:e5:2c:
                    9a:35:06:4a:43:d3:41:01:3b:4e:40:fd:53:13:f1:
                    92:37:a7:83:74:3b:d1:1f:40:3b:35:65:35:c0:2f:
                    56:d0:51:64:38:df:a5:d2:d0:d3:9f:c1:ed:02:95:
                    47:55:d0:a2:7d:8a:6e:f8:89:cf:3a:33:24:4e:c1:
                    13:12:e0:e0:25:0d:ce:92:6e:56:96:29:9b:11:2d:
                    53:cb:0c:aa:4c:8b:cc:2d:1e:67:e5:b6:86:f8:08:
                    10:bf:68:ea:e4:11:7c:29:d8:c3:36:66:f6:c2:c2:
                    cf:02:f1:7b:3f:e2:1a:07:92:41:ee:0d:e3:8c:4c:
                    33:df:a8:91:7e:9e:59:88:9d:d4:16:86:a5:af:19:
                    bc:be:3d:14:89:db:f8:52:80:7b:fd:d5:a7:48:61:
                    17:c4:f5:1f:30:ea:32:f5:dc:13:db:b1:3f:26:60:
                    35:b2:c3:7d:12:43:e1:6e:37:da:c0:4c:23:b1:35:
                    c1:37:f3:c6:80:bb:cf:0b:80:00:45:8d:3a:8d:6d:
                    1b:72:79:dd:ba:58:3a:24:a7:aa:c8:31:7a:17:10:
                    17:0a:a5:d9:16:e4:c1:2a:62:b8:ab:e2:55:4e:f0:
                    47:d7:4c:8d:df:2c:b0:ed:c4:c3:9e:f4:2a:34:98:
                    2f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:4F:AD:6A:0A:62:DA:7E:12:B1:99:8D:3E:37:9A:8A:01:D4:C5:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/faea724b-2eac-3c21-8f77-88333f930e6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:96:df:f7:f6:fe:3b:20:f0:57:71:25:09:c2:a6:c8:7a:49:
         5e:12:08:2f:f8:ab:0a:19:d5:ba:5a:3d:51:13:53:3e:94:e7:
         19:7c:11:92:0c:89:da:74:61:6c:24:a7:8e:50:95:c7:ec:be:
         75:79:a0:6c:21:be:53:c1:dd:12:37:6d:41:83:5b:52:b9:47:
         b7:77:ef:f0:c3:9a:35:e2:9a:ee:4a:d4:ff:77:e5:08:27:a0:
         0c:49:38:0f:a0:cd:23:49:ad:2e:3e:ea:81:02:bf:16:dd:58:
         50:27:24:8c:e0:06:78:3e:7c:a9:49:79:50:82:86:4d:45:ff:
         2b:d5:86:5b:2d:40:08:29:09:1f:5c:28:5c:51:24:e1:52:06:
         69:de:ee:44:79:7b:bb:60:2a:df:cc:33:5b:68:9e:00:24:71:
         55:e0:37:a2:7c:f0:d1:4e:71:49:3f:84:58:de:6c:f3:a1:b3:
         16:74:9c:a3:6e:0e:89:45:c2:2d:fb:74:66:59:6a:55:b4:89:
         1a:fb:1a:d9:e0:1b:66:f7:ae:87:de:3a:83:8e:71:3f:05:0e:
         73:3a:7d:94:ab:40:18:38:33:0a:9c:e3:01:cc:62:9a:82:27:
         85:58:71:c5:65:07:21:b5:b5:44:9e:da:df:b9:b7:f7:6a:9a:
         c5:22:7e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:41:56 2024 by rpki-client on console-ams.rpki-client.org