Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59df81a1-cce3-4626-9cbb-51da282803bf/d5d3d11c-9dd7-37bd-9faa-b21f914faf1f.roa
File:                     d5d3d11c-9dd7-37bd-9faa-b21f914faf1f.roa (raw, json)
Hash identifier:          mLRApC8kIwSqE6NM5xnHI6J4HRBnVg3Lq1FhE5HNwnw=
Subject key identifier:   9F:86:F2:09:3C:DB:9A:EE:31:B6:4B:8F:91:1D:08:1C:39:34:C8:E9
Certificate issuer:       /CN=59df81a1-cce3-4626-9cbb-51da282803bf
Certificate serial:       010D0C9F432858474585EF4B16E332F84517A400
Authority key identifier: D9:70:2F:5B:89:D9:C5:D3:86:61:81:94:5A:20:7B:35:45:3B:3D:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59df81a1-cce3-4626-9cbb-51da282803bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59df81a1-cce3-4626-9cbb-51da282803bf/d5d3d11c-9dd7-37bd-9faa-b21f914faf1f.roa
Signing time:             Fri 20 Sep 2024 01:00:31 +0000
ROA not before:           Fri 20 Sep 2024 01:00:31 +0000
ROA not after:            Thu 19 Dec 2024 02:00:31 +0000
asID:                     399557
IP address blocks:        149.112.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59df81a1-cce3-4626-9cbb-51da282803bf/59df81a1-cce3-4626-9cbb-51da282803bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59df81a1-cce3-4626-9cbb-51da282803bf/59df81a1-cce3-4626-9cbb-51da282803bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59df81a1-cce3-4626-9cbb-51da282803bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:45:85:ef:4b:16:e3:32:f8:45:17:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59df81a1-cce3-4626-9cbb-51da282803bf
        Validity
            Not Before: Sep 20 01:00:31 2024 GMT
            Not After : Dec 19 02:00:31 2024 GMT
        Subject: CN=4972a3ed-34ee-41d5-9441-2d3cad05e262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:01:d9:75:34:6b:7a:f0:15:52:a7:37:90:72:
                    9e:63:61:6e:87:d9:92:05:78:5b:2e:70:08:5b:f9:
                    30:e9:5b:1e:62:50:c9:bb:aa:61:cd:ea:a8:37:c7:
                    26:d4:49:79:53:46:1b:24:79:3b:43:ab:bb:55:71:
                    a0:60:fd:05:69:e4:89:5e:25:2a:82:81:e9:30:85:
                    f2:7d:0a:4d:17:ba:51:17:b9:82:a0:6d:4f:66:98:
                    64:0a:ff:40:c9:84:b0:20:44:84:c2:94:e8:77:f5:
                    ea:d3:e6:d7:dc:a5:bb:2e:28:08:4f:db:4b:eb:30:
                    9d:a0:b8:85:19:4a:bc:20:da:1d:0f:ac:ed:91:2f:
                    b4:a9:be:eb:94:80:e7:a8:ee:19:c3:88:5e:fd:6f:
                    f0:e2:ba:9b:3d:77:5c:1b:f3:c8:36:64:53:66:60:
                    e7:18:54:d7:dc:16:b8:c7:1e:d1:76:86:c6:b3:c4:
                    4c:a9:50:55:f0:a3:1c:9e:f6:d1:e8:97:b6:dd:dc:
                    58:90:e7:72:fe:3b:df:a7:a9:86:d3:15:d5:e1:4d:
                    81:ae:5f:6d:83:4a:2b:a6:7d:16:d2:e0:9b:e0:8e:
                    e1:44:c1:16:54:f9:36:81:6c:2d:c7:d9:2a:5d:ca:
                    ec:6c:0c:a6:06:17:d2:1c:a1:db:41:43:2c:2a:14:
                    1a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:86:F2:09:3C:DB:9A:EE:31:B6:4B:8F:91:1D:08:1C:39:34:C8:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59df81a1-cce3-4626-9cbb-51da282803bf/d5d3d11c-9dd7-37bd-9faa-b21f914faf1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59df81a1-cce3-4626-9cbb-51da282803bf/59df81a1-cce3-4626-9cbb-51da282803bf.crl

            X509v3 Authority Key Identifier:
                keyid:D9:70:2F:5B:89:D9:C5:D3:86:61:81:94:5A:20:7B:35:45:3B:3D:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59df81a1-cce3-4626-9cbb-51da282803bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:61:54:a6:14:bd:35:21:3a:2a:f1:1d:57:5f:e3:21:a8:b9:
         1d:34:6d:08:c2:52:b2:66:95:ff:6d:1c:12:20:61:74:18:58:
         e9:0c:a8:8e:05:10:c8:74:b0:07:bc:08:dd:5f:8a:92:24:fd:
         dc:90:c1:6a:23:fb:c9:60:60:8e:65:b2:58:f2:be:3a:90:34:
         88:84:f1:86:ff:88:c1:84:65:80:fd:6d:3d:74:33:a4:35:06:
         43:60:4e:6a:3d:15:fc:13:4c:fd:bd:79:6a:97:d1:b4:6b:c9:
         e4:8f:88:f1:fb:27:41:20:b1:ed:4e:f2:38:62:5e:fd:8c:5d:
         ec:60:a3:0c:95:5d:93:26:36:99:8d:ba:68:81:4d:b5:10:19:
         56:08:61:cc:fc:75:4c:c8:30:7f:8f:68:2a:9d:37:a8:dc:4b:
         09:80:c6:29:dc:43:20:e4:91:01:21:41:87:e6:86:6a:cf:ab:
         b1:5f:2f:44:1d:b9:39:e8:c5:04:87:7e:6f:8a:c0:43:b2:eb:
         f2:10:e9:c1:fc:8e:04:ff:fc:63:76:f9:5d:36:33:82:fe:35:
         0d:3c:05:cd:44:f8:7c:76:b2:eb:0b:8d:c2:56:6c:25:3c:fa:
         73:05:ba:86:81:3a:34:49:1e:2c:63:43:76:eb:29:04:1f:44:
         5d:5d:44:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:30 2024 by rpki-client on console-ams.rpki-client.org