Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b40579ad-1197-47fb-9391-d14ca61638da/95110d04-c9e5-338d-a5b9-c3b9f9ff8291.roa
File:                     95110d04-c9e5-338d-a5b9-c3b9f9ff8291.roa (raw, json)
Hash identifier:          4KqjeY/jK1jAqlsq2/f0z0qg3JvuDUNG4TZ30YDn7n4=
Subject key identifier:   BB:E4:AD:88:FE:1D:3D:FC:91:7D:A1:0B:BF:1C:0F:32:95:42:ED:A5
Certificate issuer:       /CN=b40579ad-1197-47fb-9391-d14ca61638da
Certificate serial:       010D0C9F43285847F2BA33A7A64BD42D86C11900
Authority key identifier: C6:5A:65:62:F3:AD:8D:2C:B6:67:B5:B6:4A:70:33:05:4A:92:8F:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b40579ad-1197-47fb-9391-d14ca61638da.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b40579ad-1197-47fb-9391-d14ca61638da/95110d04-c9e5-338d-a5b9-c3b9f9ff8291.roa
Signing time:             Thu 21 Nov 2024 02:00:38 +0000
ROA not before:           Thu 21 Nov 2024 02:00:38 +0000
ROA not after:            Wed 19 Feb 2025 02:00:38 +0000
asID:                     8075
IP address blocks:        159.105.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b40579ad-1197-47fb-9391-d14ca61638da/b40579ad-1197-47fb-9391-d14ca61638da.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b40579ad-1197-47fb-9391-d14ca61638da/b40579ad-1197-47fb-9391-d14ca61638da.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b40579ad-1197-47fb-9391-d14ca61638da.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f2:ba:33:a7:a6:4b:d4:2d:86:c1:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b40579ad-1197-47fb-9391-d14ca61638da
        Validity
            Not Before: Nov 21 02:00:38 2024 GMT
            Not After : Feb 19 02:00:38 2025 GMT
        Subject: CN=8e9292ce-4a94-4c17-b585-f6b9b7acdd41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fb:5d:2d:ea:a7:2d:dd:28:d4:cd:93:30:e6:
                    22:c7:56:db:56:6e:e1:8e:a1:d4:a7:4b:af:17:46:
                    2b:a8:08:af:5f:7a:ad:eb:74:fd:d4:5f:a9:65:39:
                    8a:04:54:3d:5f:fe:e3:98:94:e4:f2:d5:6b:f3:62:
                    8b:f1:4d:16:64:d7:33:8d:50:60:8d:21:92:98:ad:
                    04:8d:33:6c:c4:76:05:1f:78:0d:75:5f:0b:d4:cf:
                    23:52:9e:77:37:27:5c:95:02:34:d3:38:06:57:59:
                    68:29:bb:79:b2:ed:4f:de:d7:1c:47:55:52:72:13:
                    53:1f:ba:df:17:5a:f9:ee:ec:20:4b:e6:0c:39:6b:
                    83:1d:34:23:35:a7:57:cd:37:d1:0e:30:d8:f2:94:
                    99:56:85:e7:8f:d2:e0:29:56:ac:8f:f1:68:4f:20:
                    57:02:86:38:d6:b8:27:60:83:ce:30:b3:27:de:59:
                    48:b4:25:e3:84:15:26:77:03:37:81:0b:cd:ac:e1:
                    e3:d6:c6:d3:9e:8a:6b:f1:7d:54:2f:82:76:bd:b7:
                    52:4d:32:e3:8f:d4:ce:2c:37:d4:19:7e:d2:5a:1d:
                    2a:4c:aa:80:da:62:36:a8:e8:00:77:00:22:4f:64:
                    ce:ad:0e:64:fc:f2:d0:e1:25:e5:c6:92:aa:f7:7c:
                    cd:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:E4:AD:88:FE:1D:3D:FC:91:7D:A1:0B:BF:1C:0F:32:95:42:ED:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b40579ad-1197-47fb-9391-d14ca61638da/95110d04-c9e5-338d-a5b9-c3b9f9ff8291.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b40579ad-1197-47fb-9391-d14ca61638da/b40579ad-1197-47fb-9391-d14ca61638da.crl

            X509v3 Authority Key Identifier:
                keyid:C6:5A:65:62:F3:AD:8D:2C:B6:67:B5:B6:4A:70:33:05:4A:92:8F:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b40579ad-1197-47fb-9391-d14ca61638da.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.105.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:fd:c5:08:24:44:c6:89:f2:bd:e8:ba:f7:61:36:8b:28:21:
         b1:1f:25:69:0c:34:80:ac:1f:98:52:09:bf:34:02:12:da:25:
         a9:a5:bf:58:c8:f7:99:7d:d7:71:e8:3e:89:5e:14:3b:76:3c:
         77:63:9d:3e:f6:96:56:16:a4:78:50:31:39:87:bd:a8:ea:28:
         a8:be:6a:a0:7d:14:07:e6:8c:e3:70:d4:c2:6f:97:d7:40:17:
         94:16:3b:5c:c5:7a:7c:81:4e:e4:ef:5b:3e:12:46:0d:4c:75:
         2a:98:97:c9:26:42:42:7c:5c:fa:a4:85:d5:39:ac:d6:fd:e7:
         3b:1e:5e:b8:16:65:2c:16:0f:8a:dd:27:f8:fa:ba:08:ac:c7:
         fd:fe:22:c8:29:26:98:3e:5a:24:b5:25:26:c1:7d:f5:5b:38:
         ed:fb:f6:03:55:40:66:4d:52:af:1d:73:89:68:f4:a5:a9:39:
         f1:49:5a:57:a0:b8:1e:b0:a4:5c:18:5b:7b:45:b4:c3:03:08:
         ef:0d:0c:cf:e6:51:58:c2:26:01:42:9f:9e:f8:c9:18:ba:18:
         79:6a:e4:84:6e:9f:57:8c:da:51:e0:35:0d:b0:e0:db:e6:37:
         88:0c:f6:52:33:9f:8e:f2:10:5b:3c:a7:77:66:da:bf:7c:dd:
         a0:17:7e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:56:43 2024 by rpki-client on console-ams.rpki-client.org