Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS150698.roa
File:                     AS150698.roa (raw, json)
Hash identifier:          Ms/972EuNafFM6gYsoLpMXPqWYMuMrSXvBkgHWArc/8=
Subject key identifier:   2E:6B:49:15:44:2B:47:82:52:23:64:18:6A:CD:24:63:96:C9:ED:AD
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       522886414E20A3A5117247247DDC7E6609F93CEC
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS150698.roa
Signing time:             Thu 30 May 2024 18:21:32 +0000
ROA not before:           Thu 30 May 2024 18:16:32 +0000
ROA not after:            Thu 29 May 2025 18:21:32 +0000
asID:                     150698
IP address blocks:        107.173.8.0/24 maxlen: 24
                          192.227.201.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 14:47:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:28:86:41:4e:20:a3:a5:11:72:47:24:7d:dc:7e:66:09:f9:3c:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: May 30 18:16:32 2024 GMT
            Not After : May 29 18:21:32 2025 GMT
        Subject: CN=2E6B4915442B4782522364186ACD246396C9EDAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:12:0f:6a:4d:ca:93:ec:d3:bd:89:17:ae:32:
                    50:34:6d:cc:90:96:2f:d1:60:75:34:e0:88:48:2c:
                    de:49:b5:12:8c:d8:07:4c:04:ef:e3:ee:6f:ce:51:
                    7c:0c:18:df:57:6c:77:d2:4e:2d:e6:b1:c3:e4:28:
                    25:70:4f:52:f6:0d:36:08:ac:9b:67:1f:a6:c4:5f:
                    79:36:7c:45:d4:41:34:1f:37:b8:41:03:0a:d3:9a:
                    50:2c:98:6e:1e:12:6e:d2:61:23:13:2a:c7:85:27:
                    7b:98:b3:e6:88:5a:1f:5c:c6:0f:60:ed:e1:3c:7d:
                    8b:d3:be:fc:94:19:aa:06:06:b3:66:1a:02:64:ef:
                    61:6d:e0:b7:91:bd:b2:aa:07:9d:8d:6d:b6:fc:61:
                    5b:1f:7d:96:1d:8d:1f:18:03:ec:6d:bf:23:07:84:
                    69:f7:58:a5:16:30:be:39:84:8a:84:e9:3a:7b:28:
                    8c:75:d0:52:db:05:3e:01:b3:54:3f:04:c2:62:dd:
                    80:74:7d:30:a4:03:b9:09:90:3e:7c:ec:11:58:14:
                    87:20:dd:df:a1:64:db:e9:cf:49:38:b1:bc:7c:2f:
                    bd:ff:37:bd:9d:83:13:73:e8:e8:9e:51:98:9e:fa:
                    ce:f4:45:66:96:5d:26:0d:38:40:8c:65:d7:fe:7e:
                    4d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:6B:49:15:44:2B:47:82:52:23:64:18:6A:CD:24:63:96:C9:ED:AD
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS150698.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.173.8.0/24
                  192.227.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:7d:7c:31:89:df:87:5c:9f:95:a3:5a:cb:dc:3f:d5:0f:46:
         45:08:95:93:69:54:0e:b3:03:ed:20:85:a4:db:f5:30:32:95:
         b5:80:f6:99:7b:da:64:93:ea:22:2a:46:58:17:72:8a:bf:30:
         01:87:52:c9:f3:f7:ef:b3:f5:7c:f9:15:d3:76:6f:43:6a:59:
         8a:c1:1f:57:ea:2a:f0:7a:25:85:87:a3:16:00:30:ae:92:a6:
         f7:de:e9:34:eb:58:27:f2:7f:45:cf:d5:f7:9b:ef:0d:19:ea:
         e4:30:87:93:4c:be:fe:1e:09:35:5f:f2:57:8c:d6:95:3b:b4:
         d7:88:74:a2:7e:67:4b:26:76:ca:58:b7:36:fe:45:d6:35:c2:
         10:6e:96:02:a6:4c:70:f1:97:b0:20:55:e7:a5:2e:69:bb:95:
         24:dd:64:f6:14:7d:0a:59:ab:1b:56:ea:ae:43:b4:1a:ac:55:
         ba:2d:ec:9e:94:fc:62:f0:e7:1a:ea:e1:51:1c:0f:ee:37:98:
         a0:e8:6d:28:6f:c9:de:de:9b:06:a0:1e:cd:26:f3:f1:b2:b8:
         c8:9f:09:b1:9f:b5:df:8e:35:7d:5e:26:a3:e2:30:b0:0c:20:
         de:29:63:0b:62:16:de:22:ec:a5:2d:f7:28:7a:0b:1e:fe:ec:
         da:1d:0d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:28:39 2024 by rpki-client on console-fra.rpki-client.org