Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/88f21b14-08fd-3634-835b-99b37c6e1f52.roa
File:                     88f21b14-08fd-3634-835b-99b37c6e1f52.roa (raw, json)
Hash identifier:          +SEN5gz8auDR8ie2zJFJj/1YVoiV/Yh4Gr/kzn0pmlw=
Subject key identifier:   9A:2F:23:86:FF:F7:CF:20:36:D2:8D:4D:4A:2D:BA:DA:F4:C8:70:BE
Certificate issuer:       /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Certificate serial:       010D0C9F4328584558C83D3B007F11D16FB34B80
Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/88f21b14-08fd-3634-835b-99b37c6e1f52.roa
Signing time:             Wed 27 Mar 2024 13:00:35 +0000
ROA not before:           Wed 27 Mar 2024 13:00:35 +0000
ROA not after:            Tue 25 Jun 2024 13:00:35 +0000
asID:                     63199
IP address blocks:        148.153.126.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:58:c8:3d:3b:00:7f:11:d1:6f:b3:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
        Validity
            Not Before: Mar 27 13:00:35 2024 GMT
            Not After : Jun 25 13:00:35 2024 GMT
        Subject: CN=278b7f60-f63b-4531-9351-5e791a702541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:fe:ea:26:d4:36:ae:48:c2:bf:e6:da:1a:62:
                    c5:2e:04:64:ad:67:50:8f:d9:f0:63:ed:f7:69:27:
                    80:b3:bb:f9:86:a8:74:90:70:46:73:7c:af:4e:bd:
                    24:18:c8:e4:8d:d2:59:44:c5:a7:9b:18:0d:6f:57:
                    1e:ea:13:06:17:31:15:63:6e:4d:d3:46:d1:90:7b:
                    f6:21:c3:15:ce:43:7c:cc:a5:77:5c:af:ae:1e:7a:
                    32:d8:0b:b5:bb:59:88:c2:be:bd:8e:96:4e:a2:1b:
                    1a:e7:06:e1:83:ed:8a:e0:98:65:f8:25:49:60:da:
                    c8:f4:21:da:6b:42:ba:53:28:54:37:22:1b:a2:76:
                    67:f8:39:85:77:b2:de:34:45:13:f8:59:b5:ba:80:
                    c8:24:2c:e0:1d:a2:79:f7:a1:aa:74:29:a6:a6:59:
                    1a:08:fe:d7:f6:99:3d:60:fe:62:42:30:74:ab:31:
                    5a:cf:09:0e:0f:92:e9:58:91:33:8e:4c:30:1e:0e:
                    b3:7e:5e:29:ea:27:33:c3:f7:a7:ab:05:08:1d:9d:
                    12:e5:7f:d2:aa:e0:97:5a:8b:da:1e:8e:0d:d6:04:
                    bd:d6:71:e3:84:3f:73:19:c8:94:42:26:b5:e5:10:
                    02:fb:f7:8a:f8:a6:1c:1d:21:9c:78:dc:3a:0a:02:
                    b7:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:2F:23:86:FF:F7:CF:20:36:D2:8D:4D:4A:2D:BA:DA:F4:C8:70:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/88f21b14-08fd-3634-835b-99b37c6e1f52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl

            X509v3 Authority Key Identifier:
                keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.153.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:7a:a9:1d:7f:bd:50:4b:b8:0a:f6:b4:50:84:7b:71:45:ed:
         94:55:06:dc:18:77:23:af:3f:de:65:5f:20:d2:46:f1:b0:e9:
         99:48:8a:c6:e3:40:2c:50:73:fe:43:59:3c:27:e7:72:7b:17:
         26:43:79:77:89:d0:ba:87:74:d0:e9:29:bd:3c:dc:aa:f5:1b:
         4f:d8:13:40:29:61:22:46:fd:cf:f0:37:95:52:73:02:bf:cd:
         1d:48:af:8c:ab:dd:bf:9c:f3:d2:38:93:37:ee:bf:c4:4a:3b:
         bd:ef:66:c6:0c:41:0c:a7:ad:6b:7e:dd:b5:8f:d2:a1:01:43:
         7e:f8:5c:11:32:ea:01:d1:cb:3f:f0:70:bf:08:32:fe:60:3b:
         8e:7c:56:bf:c2:c1:cb:08:40:fc:ea:5e:15:5d:4b:08:59:96:
         22:ab:4d:1c:47:0a:06:a6:41:ce:71:51:7b:c1:bf:91:fc:1f:
         e4:e5:99:08:95:d9:30:31:c2:03:ea:fe:a6:1a:7b:a3:a9:bc:
         de:b7:3f:3a:8c:35:29:6d:3e:40:32:37:49:b1:20:1a:bc:04:
         64:0b:bf:d5:ef:c0:74:2f:ab:dd:62:7f:24:17:8c:a9:10:a2:
         62:2d:7c:28:cc:7a:3d:8e:0c:44:19:59:8a:fc:1d:43:16:b7:
         83:6a:0a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:32:40 2024 by rpki-client on console-fra.rpki-client.org