Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/b9097839-a65e-367d-9ddc-e4b44fa208d2.roa
File:                     b9097839-a65e-367d-9ddc-e4b44fa208d2.roa (raw, json)
Hash identifier:          ZEcfpAKPgLwRpE0GZcEdtPQKaAvR7Dwqa5c1bEsR9TA=
Subject key identifier:   B1:D2:00:55:14:E1:0B:C3:20:6A:8A:17:0B:6A:C5:0D:1E:86:2C:82
Certificate issuer:       /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Certificate serial:       010D0C9F43285847E20DD98E36DF2BB43690A280
Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/b9097839-a65e-367d-9ddc-e4b44fa208d2.roa
Signing time:             Fri 15 Nov 2024 02:40:33 +0000
ROA not before:           Fri 15 Nov 2024 02:40:33 +0000
ROA not after:            Thu 13 Feb 2025 02:40:33 +0000
asID:                     63199
IP address blocks:        148.153.30.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e2:0d:d9:8e:36:df:2b:b4:36:90:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
        Validity
            Not Before: Nov 15 02:40:33 2024 GMT
            Not After : Feb 13 02:40:33 2025 GMT
        Subject: CN=5e4e3cb5-f23b-4ac5-a610-654a174cb17a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e7:09:7b:4f:0a:d4:b9:8b:b9:e8:c3:1c:d0:
                    d1:9a:a8:94:6b:5a:f0:d9:a4:d4:22:fe:ab:3d:55:
                    eb:9a:c1:81:66:79:40:93:c5:26:70:2b:86:43:11:
                    59:96:09:53:d0:b4:c4:b3:7f:8c:26:29:22:43:6c:
                    de:eb:d7:8f:f2:27:07:63:9e:b3:5a:88:0d:19:2a:
                    3e:84:a8:34:94:a7:f4:f2:ab:ba:57:cc:fe:f8:33:
                    4d:c9:1f:2c:99:2f:7b:a2:e5:d1:41:e5:eb:ad:2c:
                    36:84:cd:5d:37:cb:0b:09:66:3f:cc:1b:0f:b5:dc:
                    0a:df:b5:3e:4f:b8:ae:aa:8b:e3:3e:9a:63:57:26:
                    59:b9:ba:69:78:2d:3e:d5:6c:3c:36:14:4f:ad:b5:
                    f5:c0:d1:08:3c:e3:72:d8:20:52:8b:ca:fc:0c:ab:
                    9e:91:89:a6:ca:89:49:1c:77:cc:8e:68:cf:c3:57:
                    a7:62:bc:17:db:a9:d8:3c:d0:17:ca:6d:be:15:18:
                    c7:2a:5e:26:22:07:4a:85:7e:fa:e4:64:dc:c5:b6:
                    dd:86:03:c5:09:76:62:dd:a1:ed:d0:1a:90:55:df:
                    0c:2f:8a:06:fb:23:2c:38:91:fa:6a:6e:50:5c:fe:
                    18:32:de:ed:0d:f9:83:3f:b7:70:86:7d:a6:be:e2:
                    71:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:D2:00:55:14:E1:0B:C3:20:6A:8A:17:0B:6A:C5:0D:1E:86:2C:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/b9097839-a65e-367d-9ddc-e4b44fa208d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl

            X509v3 Authority Key Identifier:
                keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.153.30.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:43:37:31:13:be:28:b3:32:af:ed:42:cb:f1:3f:94:4e:f3:
         a2:63:ba:be:ce:03:ed:97:69:a5:01:3b:87:17:74:e6:29:bd:
         a7:a5:76:c2:43:2f:70:35:63:ba:79:83:2b:d6:17:78:15:dc:
         d9:59:bd:b1:43:c1:aa:eb:5c:fc:a9:b3:ce:e0:81:43:18:33:
         86:68:ff:4d:c6:60:3c:39:16:38:ee:9e:37:24:f8:46:3b:94:
         56:07:83:94:9d:97:53:a0:3b:5e:4a:47:e3:4c:17:a7:4a:6c:
         88:96:de:ae:9e:53:8f:48:a0:7a:c3:1d:64:c3:06:cd:6b:4f:
         c7:fd:3b:79:ba:53:65:a6:20:ce:e8:45:3d:08:83:28:bb:4e:
         ee:91:5a:de:b6:3d:a9:0f:89:41:b0:25:22:c0:b4:ab:ae:b9:
         f9:fd:7c:3d:f6:8c:81:76:13:35:ae:7a:7a:ca:e4:6c:3d:fd:
         f6:6f:45:12:d7:01:23:cc:68:5b:2a:12:4b:b7:ca:27:60:25:
         6e:f1:6d:9c:51:50:60:83:cd:be:4f:04:40:b3:a6:5c:3d:6e:
         32:ea:7d:1f:8a:59:62:fb:84:7d:7f:2a:17:6b:78:e6:8c:f2:
         50:4d:ac:bd:a7:79:41:81:5a:16:84:07:74:70:a0:00:e1:86:
         b9:e1:a0:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:20 2024 by rpki-client on console-ams.rpki-client.org