Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c2732a11-37c3-37c2-9591-4654376ee597.roa
File:                     c2732a11-37c3-37c2-9591-4654376ee597.roa (raw, json)
Hash identifier:          FeiV1icF1RdN67brc+HyRSp1puC+FVGIWMhy18JwkHY=
Subject key identifier:   00:78:1F:32:54:B3:BA:12:5D:8B:69:B7:E2:9C:6B:E6:47:DE:88:6A
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285847F84F7D4C7F50F72F6938BD80
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c2732a11-37c3-37c2-9591-4654376ee597.roa
Signing time:             Sat 23 Nov 2024 02:00:28 +0000
ROA not before:           Sat 23 Nov 2024 02:00:28 +0000
ROA not after:            Fri 21 Feb 2025 02:00:28 +0000
asID:                     40676
IP address blocks:        108.181.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f8:4f:7d:4c:7f:50:f7:2f:69:38:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Nov 23 02:00:28 2024 GMT
            Not After : Feb 21 02:00:28 2025 GMT
        Subject: CN=3dda3325-f1b6-4679-a693-ee137ee04b20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:78:e9:4a:48:48:6c:a0:99:52:b4:e2:ce:0f:
                    cb:b9:67:ae:49:50:ee:42:be:28:8f:e9:0e:04:2b:
                    fc:39:29:66:72:a4:9c:42:01:26:a3:0f:15:e8:a8:
                    94:7f:82:b4:4d:fd:17:16:ce:60:ed:0c:cd:ed:d5:
                    9a:ca:52:49:49:b6:25:c2:a1:8f:24:83:45:e1:78:
                    9d:53:fa:94:66:6b:9a:a5:a3:39:de:53:f7:74:d4:
                    1f:2f:39:73:61:0f:a7:b2:c0:0a:10:30:fd:71:e6:
                    4e:02:4e:23:12:2f:42:ae:49:71:cc:1a:0f:0c:f8:
                    1a:94:b8:8e:ae:fe:49:49:8f:7f:d0:f5:1d:04:61:
                    46:c0:a2:27:7d:c7:df:9c:c4:3e:ca:92:18:2e:db:
                    64:3b:1e:27:7a:4c:ce:98:6e:24:c0:c3:9a:44:30:
                    26:83:83:44:17:ae:01:0d:a0:3f:8d:98:62:d6:50:
                    f1:a4:fe:a6:5c:00:bd:c3:50:01:84:99:a8:46:c8:
                    5b:59:5a:65:c5:ed:fb:94:4a:37:de:45:2e:f3:d1:
                    c8:c9:65:f1:74:64:f8:c7:40:7a:11:50:f9:98:9d:
                    1c:13:1b:38:84:ce:15:24:9a:ca:b0:db:65:28:c8:
                    a4:a5:48:62:ec:67:ac:01:ae:ec:c8:01:03:2f:3c:
                    a8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:78:1F:32:54:B3:BA:12:5D:8B:69:B7:E2:9C:6B:E6:47:DE:88:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c2732a11-37c3-37c2-9591-4654376ee597.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.181.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:4e:7b:ab:79:fa:de:7f:52:fb:cc:79:26:e0:0b:3d:4f:27:
         e3:ec:c2:89:1f:1f:c5:c5:d3:b6:5e:b9:68:5b:3b:0e:e5:e3:
         34:d0:3b:7a:85:dd:f2:5e:b3:54:ac:e7:dc:47:45:8b:74:eb:
         18:61:c4:9c:9c:75:19:c3:c1:65:ed:28:b8:6b:7d:8c:1b:4a:
         78:9f:01:78:e5:27:8d:58:2c:8c:9f:67:70:ec:2d:76:34:c8:
         90:cf:5e:81:01:6c:e7:2e:f2:d5:4b:12:95:d4:65:9e:8b:e0:
         27:1d:04:7b:22:d8:0a:9d:ea:ec:37:63:f6:86:f3:e2:65:70:
         b0:8b:d1:fe:2d:28:5a:80:52:56:b3:89:a8:28:b3:5a:51:22:
         90:17:71:02:d4:27:d6:5c:b5:b3:93:97:0d:27:9e:04:ab:9c:
         68:8d:51:1a:fd:2b:ab:60:38:cb:94:f8:57:89:e6:02:9b:ae:
         91:f5:42:00:fa:4c:ea:15:5a:06:db:2b:32:e0:96:25:72:37:
         46:2b:bf:f6:cd:bc:d0:9c:c8:ae:ee:b2:08:ef:4c:f1:dd:79:
         15:b1:cd:d5:2f:49:4a:2f:32:4c:3e:54:53:b8:4e:3c:c2:37:
         b0:cf:8c:b3:35:4d:61:17:5d:43:c3:0d:c6:fe:a6:2e:5b:e9:
         a7:c3:ed:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:28:52 2024 by rpki-client on console-fra.rpki-client.org