Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/481fd97a-d501-4297-871e-0024fbe50fc6/cc489d3f-2bc1-3a9b-9e7d-e46fd73c4393.roa
File:                     cc489d3f-2bc1-3a9b-9e7d-e46fd73c4393.roa (raw, json)
Hash identifier:          mpqSXis1CWqHdB6Py7hN8V3DouGyzbYsNw7aRxR1DQw=
Subject key identifier:   AB:91:EC:03:C4:48:CA:3A:F9:38:5A:3A:D0:EF:8D:F5:9C:4F:3B:E7
Certificate issuer:       /CN=481fd97a-d501-4297-871e-0024fbe50fc6
Certificate serial:       010D0C9F432858473A5B94F41B6D272510CDD180
Authority key identifier: E0:7F:C4:6B:FB:1B:F3:17:DC:DD:E9:74:51:77:B2:11:48:CB:1F:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/481fd97a-d501-4297-871e-0024fbe50fc6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/481fd97a-d501-4297-871e-0024fbe50fc6/cc489d3f-2bc1-3a9b-9e7d-e46fd73c4393.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     35866
IP address blocks:        117.18.123.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/481fd97a-d501-4297-871e-0024fbe50fc6/481fd97a-d501-4297-871e-0024fbe50fc6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/481fd97a-d501-4297-871e-0024fbe50fc6/481fd97a-d501-4297-871e-0024fbe50fc6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/481fd97a-d501-4297-871e-0024fbe50fc6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:94:f4:1b:6d:27:25:10:cd:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481fd97a-d501-4297-871e-0024fbe50fc6
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=851d9bde-a814-4d07-8ec0-06093a3e01fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:27:ba:fe:66:81:d2:1f:9f:84:ee:5c:c1:fa:
                    ab:63:0b:b9:bc:db:f7:0e:53:68:6f:e6:59:3b:a5:
                    20:43:c3:6e:be:b2:50:57:af:56:f0:f8:e0:a6:6a:
                    68:76:64:b8:fb:ba:b0:99:7f:9f:96:8a:75:2b:49:
                    92:ef:7a:47:16:64:cb:4d:f1:69:cc:97:eb:35:19:
                    5c:29:1c:ad:b6:12:f1:41:c5:da:e7:2d:de:ec:1d:
                    25:3c:a0:22:f9:14:77:02:a2:9d:55:07:0f:7a:9b:
                    3d:d7:cc:2e:76:34:3c:48:fc:96:1f:ee:b6:c4:4e:
                    ef:3d:ad:61:c8:87:66:fc:4c:83:3b:bb:73:26:68:
                    42:d8:97:27:4d:8b:5f:ae:28:ed:78:05:79:49:25:
                    ec:9e:36:3b:2a:92:cb:f5:ca:43:a3:1a:59:79:2f:
                    c2:0b:60:6c:c2:bb:53:89:b5:e8:20:49:c1:9c:ee:
                    74:42:9a:16:6b:ad:67:dd:79:31:d9:90:d4:83:a9:
                    9a:85:32:eb:5d:92:14:c1:7c:3f:a5:e8:7c:60:01:
                    67:b3:d7:e8:df:a0:00:e8:6f:34:f2:0a:52:ba:96:
                    be:55:95:bc:ec:14:6f:6f:e2:2d:65:f2:2c:5d:8a:
                    ed:11:c9:8f:d6:aa:11:ee:57:33:95:15:46:c2:32:
                    f4:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:91:EC:03:C4:48:CA:3A:F9:38:5A:3A:D0:EF:8D:F5:9C:4F:3B:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/481fd97a-d501-4297-871e-0024fbe50fc6/cc489d3f-2bc1-3a9b-9e7d-e46fd73c4393.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/481fd97a-d501-4297-871e-0024fbe50fc6/481fd97a-d501-4297-871e-0024fbe50fc6.crl

            X509v3 Authority Key Identifier:
                keyid:E0:7F:C4:6B:FB:1B:F3:17:DC:DD:E9:74:51:77:B2:11:48:CB:1F:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/481fd97a-d501-4297-871e-0024fbe50fc6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.18.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:76:af:45:ad:39:28:74:42:d5:8b:e3:ab:93:a5:6e:f6:6e:
         9a:73:7b:92:fa:01:1a:f1:ab:b4:cb:cb:11:16:70:8c:30:97:
         7f:d3:d5:66:ac:9e:89:6d:ef:39:03:fd:52:26:9b:91:6c:43:
         16:5a:8a:06:70:78:bf:97:95:87:17:61:7c:ad:e1:95:c7:e3:
         b0:c9:9f:a7:11:ee:46:16:79:b5:51:bc:24:8e:4e:5c:d5:f1:
         61:17:6c:3e:b4:f9:5f:74:66:22:27:f5:db:df:e9:3f:35:0b:
         2d:1b:79:2e:55:40:92:cd:4b:09:4a:86:cf:f7:e3:b8:20:da:
         5d:bb:7f:c5:2b:e7:89:f8:0f:b0:c2:b7:f9:70:61:37:0a:8c:
         f2:48:7b:9e:9d:3c:19:29:56:81:8b:96:f0:b6:43:c6:8a:05:
         fa:ec:48:ff:d5:14:87:9c:eb:b4:d0:26:cc:4c:08:b0:59:8c:
         73:f7:fc:ee:cf:35:8d:d3:dd:e4:60:7b:7f:d6:b5:03:b2:92:
         5b:4b:cd:4a:75:35:19:1f:5a:1c:d0:dd:5f:41:e9:5b:41:6f:
         bb:9c:f7:6d:bd:fa:b7:1b:8e:e1:1a:a8:d8:3e:b8:f2:ac:c8:
         fa:f3:16:fc:3d:e0:42:57:50:84:ed:84:ff:43:62:c3:c3:7b:
         f3:f9:30:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:49:09 2024 by rpki-client on console-ams.rpki-client.org