Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4769a12d-b89f-3ae3-8554-3c7073202c54.roa
File:                     4769a12d-b89f-3ae3-8554-3c7073202c54.roa (raw, json)
Hash identifier:          EU1eQxa9FKnpm98HlGmmTlRSsb08+TwNGaDYvWvi8lA=
Subject key identifier:   E2:94:87:6F:F3:AB:C0:93:75:CF:71:7F:BA:0C:F4:E0:F0:07:7A:9F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847537B8AAA812D8D0C926A0A00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4769a12d-b89f-3ae3-8554-3c7073202c54.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     701
IP address blocks:        108.18.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:8a:aa:81:2d:8d:0c:92:6a:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=74cf1606-6b4f-4be0-97bd-d631757d6d7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f1:b4:81:12:c0:63:43:f5:bc:85:b2:4a:e3:
                    8f:20:59:ac:65:26:ae:9d:a3:8e:4b:36:00:cb:38:
                    ac:14:b5:80:dd:fa:33:47:17:9a:d6:62:0a:21:1d:
                    0e:72:d8:43:e2:81:22:83:b6:51:b7:a9:00:9e:6b:
                    97:89:e0:a4:95:43:b9:72:f9:7f:be:b6:c5:03:64:
                    99:20:d2:ed:30:46:ce:83:6e:f6:8a:28:e6:18:d0:
                    f7:cf:49:33:ab:f7:1f:6d:ed:aa:f9:de:91:bd:3e:
                    b3:1f:72:a7:42:b6:17:54:61:14:e7:34:d5:d7:f4:
                    e9:76:ed:ba:ba:81:e4:5a:21:80:7d:cc:48:4d:0e:
                    d4:47:76:5f:0c:19:ab:d6:5c:5f:e3:1e:d0:37:f1:
                    f4:ed:d9:1f:09:b6:83:8a:64:e5:23:22:52:84:eb:
                    e5:7f:b0:4f:49:76:1b:c8:5a:0b:a4:0e:1b:9a:cf:
                    9d:03:68:61:03:90:47:ac:9d:32:11:40:cd:95:53:
                    b7:a2:b2:32:66:68:c7:b9:f3:c6:6f:85:82:2f:6e:
                    45:1c:9f:ac:64:9f:1b:94:b2:8c:cb:5b:3b:e0:fd:
                    13:84:a7:57:43:dc:ef:0f:5c:85:02:dd:ca:c3:f5:
                    ed:bc:c1:26:34:9f:d0:56:94:89:58:39:7a:48:23:
                    fd:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:94:87:6F:F3:AB:C0:93:75:CF:71:7F:BA:0C:F4:E0:F0:07:7A:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4769a12d-b89f-3ae3-8554-3c7073202c54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.18.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:a8:ee:5a:fb:22:2a:d9:b6:21:89:44:c9:23:24:25:7c:90:
         91:e9:56:3a:45:b6:4d:15:db:96:be:5b:55:28:85:d3:89:7d:
         6e:a0:0c:63:27:f2:01:dd:9a:17:89:67:5d:e3:10:78:ca:75:
         4d:d9:46:61:63:f5:32:b3:31:05:ad:e2:45:55:c0:72:42:d2:
         f2:c6:47:15:bf:04:db:2f:db:86:4c:37:5c:f7:b9:5f:80:c1:
         01:20:79:cc:78:0d:cf:71:5b:4b:46:42:2e:39:44:7e:12:5d:
         f6:fd:ae:4d:be:a1:d5:7f:4e:6f:26:84:31:32:f4:25:d6:45:
         85:31:eb:86:e9:d3:7b:81:3f:9a:08:ba:11:ba:d5:cb:aa:71:
         1d:15:51:d2:3e:47:7c:78:b3:ea:80:ff:34:5d:58:19:c5:3a:
         7a:4f:7d:da:d7:5d:96:26:47:62:d8:ee:f5:4a:61:70:a9:50:
         36:a7:63:f7:b2:e2:7f:86:a6:43:67:75:6c:09:6d:f2:d1:c4:
         18:a5:e4:10:c4:ce:f4:5a:3b:4c:b9:a2:06:5e:82:5d:1f:df:
         ad:51:fe:4e:8b:c7:9c:42:25:99:b0:a4:4f:1f:c6:ab:a2:1b:
         08:21:19:ff:d5:87:ec:37:e9:06:13:b3:d8:49:ab:ca:e9:21:
         07:33:06:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:24 2024 by rpki-client on console-ams.rpki-client.org