Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/4699a5c4-d286-3cfd-9267-2f11080d1857.roa
File:                     4699a5c4-d286-3cfd-9267-2f11080d1857.roa (raw, json)
Hash identifier:          yw8N2MPiIg+/Ibz41ujPr/VAMKrcNM0T/PAH48mzV58=
Subject key identifier:   AA:2A:E0:08:69:46:33:26:97:29:76:AD:EB:AD:C5:C4:99:58:9F:B5
Certificate issuer:       /CN=ab35c487-3629-4de4-8ce1-80f9eb60428a
Certificate serial:       010D0C9F432858457D1337DE6B5DA9910D47C880
Authority key identifier: 56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/4699a5c4-d286-3cfd-9267-2f11080d1857.roa
Signing time:             Tue 09 Apr 2024 13:00:34 +0000
ROA not before:           Tue 09 Apr 2024 13:00:34 +0000
ROA not after:            Mon 08 Jul 2024 13:00:34 +0000
asID:                     393294
IP address blocks:        107.150.191.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7d:13:37:de:6b:5d:a9:91:0d:47:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab35c487-3629-4de4-8ce1-80f9eb60428a
        Validity
            Not Before: Apr  9 13:00:34 2024 GMT
            Not After : Jul  8 13:00:34 2024 GMT
        Subject: CN=6adb4381-a3c1-4e27-8f5c-1e790b57ada2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1b:88:90:25:0b:cb:33:fc:91:1b:42:eb:26:
                    6f:62:f6:40:e7:2e:9e:19:24:24:91:43:de:e3:52:
                    bf:6d:31:1d:b6:df:07:f3:5c:85:88:96:d6:11:18:
                    7f:a1:23:21:e4:1c:bb:8d:15:74:3b:4f:bd:aa:b5:
                    38:43:26:c5:49:33:ee:75:fa:02:76:95:d9:88:8d:
                    f9:a3:4b:16:e6:b1:a7:54:fa:11:f6:21:d8:49:74:
                    30:4e:d2:b0:72:77:23:df:3b:40:03:66:47:ca:06:
                    91:2d:55:3e:f0:a5:cb:d6:bb:1a:9c:dd:21:16:68:
                    91:67:57:e4:e4:33:fe:39:cf:c6:e6:59:04:c7:2b:
                    a4:ba:d2:75:39:e2:37:39:56:4a:66:a2:b9:c5:a0:
                    97:ad:90:99:6b:3b:a6:aa:1a:e0:57:64:86:9c:b3:
                    c5:fb:44:17:9f:24:a8:ad:d1:a0:48:33:d7:31:d0:
                    65:ae:c1:ba:94:bc:4b:dd:5f:94:8b:eb:8b:87:51:
                    67:2f:8c:c6:a3:fc:9a:c2:22:8c:1e:73:9b:ad:d1:
                    20:15:b6:ad:48:80:12:9b:dc:5c:da:00:23:8a:49:
                    63:c3:bb:82:a5:f3:fd:0a:bf:6a:4c:39:0c:27:2b:
                    85:86:82:54:f7:06:80:5c:aa:b7:5d:63:f2:2c:20:
                    02:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:2A:E0:08:69:46:33:26:97:29:76:AD:EB:AD:C5:C4:99:58:9F:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/4699a5c4-d286-3cfd-9267-2f11080d1857.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl

            X509v3 Authority Key Identifier:
                keyid:56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.150.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:9c:00:e7:bb:0e:1b:49:3c:23:87:a5:7b:0d:ea:70:b5:4c:
         90:31:9a:80:96:e1:9e:55:0b:48:47:39:af:6d:05:03:08:59:
         76:e4:a8:f4:72:f4:3b:d9:87:bf:bc:0a:93:bb:d4:18:9a:8c:
         42:86:17:67:31:13:b3:62:e4:fa:fa:37:00:e2:26:d8:d7:6c:
         95:cb:80:55:4a:de:93:c6:73:6d:bf:21:5d:f6:f9:d9:33:97:
         ce:74:ea:d1:65:8c:1e:59:f6:e2:a2:0b:9f:50:ba:de:8f:cc:
         b3:1d:16:33:16:46:7a:e5:dd:54:33:9d:54:ef:6e:a8:4a:7e:
         0d:14:ce:5c:c8:09:1b:62:ed:15:b7:53:17:42:09:28:a1:98:
         5d:00:e7:a2:dd:31:97:ea:66:99:92:3e:ae:0c:65:f9:df:3e:
         ce:aa:04:a7:af:8f:12:61:2d:92:a4:73:c7:2b:df:b5:2e:b8:
         0b:67:c6:8f:0c:7e:ed:25:11:c9:7d:98:6c:c8:4e:a5:c7:44:
         ef:c4:14:d0:0e:f6:1a:3d:86:b7:a5:66:55:b0:b5:9e:d4:2a:
         58:a1:ec:88:60:9e:62:c8:e3:8f:ff:e3:ff:54:42:78:9a:0e:
         7f:ab:bb:b3:b8:ab:64:79:6a:87:5e:cf:d8:24:b2:41:9a:04:
         9d:3d:fe:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:06:08 2024 by rpki-client on console-ams.rpki-client.org