Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/88f21b14-08fd-3634-835b-99b37c6e1f52.roa
File:                     88f21b14-08fd-3634-835b-99b37c6e1f52.roa (raw, json)
Hash identifier:          DR3Yl/AUtXzHXYqBFJn7QqyubyCinuUnohJs3+hTYkk=
Subject key identifier:   76:CF:A6:74:CF:73:EC:A5:00:83:94:6A:66:C8:7B:EC:A1:AE:A4:60
Certificate issuer:       /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Certificate serial:       010D0C9F432858471775BEB3C1C0A2B633CD74C0
Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/88f21b14-08fd-3634-835b-99b37c6e1f52.roa
Signing time:             Tue 03 Sep 2024 13:00:42 +0000
ROA not before:           Tue 03 Sep 2024 13:00:42 +0000
ROA not after:            Mon 02 Dec 2024 14:00:42 +0000
asID:                     63199
IP address blocks:        148.153.126.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:17:75:be:b3:c1:c0:a2:b6:33:cd:74:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
        Validity
            Not Before: Sep  3 13:00:42 2024 GMT
            Not After : Dec  2 14:00:42 2024 GMT
        Subject: CN=a23f3cef-66e0-43b5-92a9-909fcafc11e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:92:f1:c1:2a:ea:e1:79:f4:46:1e:80:c9:ea:
                    46:e0:f6:08:0a:c3:fb:15:d0:11:a2:74:d2:86:ca:
                    27:ce:ae:7c:54:68:d4:6e:1d:c7:69:da:07:89:2b:
                    33:85:ff:8b:2b:fb:82:db:65:e2:ec:5e:67:79:e5:
                    b4:bf:d0:5b:53:55:36:e0:86:ab:61:d3:20:50:bb:
                    2b:c4:f4:3d:b0:e2:23:3c:59:f0:3f:c6:b1:6e:8a:
                    42:da:b2:11:4b:4a:24:16:8b:85:b2:20:d2:1d:05:
                    2c:b2:95:3e:9e:bb:fb:e6:34:ec:2b:28:58:ae:23:
                    c2:cd:f0:5a:62:19:82:c1:cb:2a:18:16:e1:9f:92:
                    3c:82:d4:96:1f:db:7a:3d:89:ea:be:fa:d7:11:8c:
                    9b:5e:3a:9a:75:2e:18:aa:4e:13:84:b8:81:60:d8:
                    f9:f7:98:c4:4e:8c:80:e4:56:d8:4c:75:d2:0f:b9:
                    d3:73:63:6f:9b:dc:c6:6b:fb:29:83:cf:74:53:be:
                    7f:5b:93:39:e4:18:73:24:4b:03:18:fb:f2:ed:45:
                    8b:b9:10:8f:61:46:f3:44:99:eb:64:ac:ca:67:a9:
                    2c:df:98:91:46:a2:1e:dd:cb:db:5e:ff:43:12:cc:
                    2f:e9:79:9d:15:8f:c8:44:47:ee:bc:d5:ad:82:30:
                    57:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:CF:A6:74:CF:73:EC:A5:00:83:94:6A:66:C8:7B:EC:A1:AE:A4:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/88f21b14-08fd-3634-835b-99b37c6e1f52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl

            X509v3 Authority Key Identifier:
                keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.153.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:ab:5e:19:33:26:89:6c:13:04:d1:d1:39:7d:0f:24:9a:05:
         3e:b5:7c:4a:7c:9b:86:03:ff:ef:ca:a4:8b:aa:cb:0b:1a:0e:
         06:82:b2:fd:09:6a:7b:ff:36:d9:dd:48:2f:42:65:01:bf:cf:
         a7:16:81:d8:b5:76:42:b8:04:10:be:53:69:19:d1:70:db:e2:
         46:f9:73:1e:20:8d:ff:1a:40:4f:c8:e5:ce:d9:37:86:73:cd:
         8c:58:fb:4e:73:46:a0:3a:bc:d8:6f:cc:b5:ea:76:98:d7:4b:
         4a:45:dd:f3:96:bb:c3:51:4d:48:70:d0:a2:dc:24:8f:67:7a:
         01:81:00:8b:ab:e3:5a:29:f1:1f:2b:e3:ed:35:34:38:83:8d:
         80:29:c5:a8:2b:d0:f6:58:f2:e6:4a:cd:a6:3e:1b:3a:a2:0e:
         c5:fd:55:42:fc:6c:1b:7f:e3:dd:fc:7b:fb:ff:b1:82:f9:cb:
         3a:9c:d6:63:98:4e:63:df:93:23:fb:78:36:32:0c:6d:af:3e:
         26:3c:f6:3b:91:6e:62:a3:b7:c0:b1:81:67:f3:7f:10:4b:cb:
         3c:17:ce:76:88:c1:82:e2:71:06:d7:20:d1:28:7d:62:67:5b:
         e8:4a:b6:6d:b6:0c:88:66:9d:ab:db:83:f8:92:a1:ec:49:3e:
         1d:d5:61:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:20 2024 by rpki-client on console-ams.rpki-client.org