Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c0a83b17-4b26-3f9d-b613-8ad0e72c3ab2.roa
File:                     c0a83b17-4b26-3f9d-b613-8ad0e72c3ab2.roa (raw, json)
Hash identifier:          MljeuvnoPHS5hVRXH/cVXL8RT8B3R8MPulOCAv3SnJo=
Subject key identifier:   1A:7B:3D:39:24:E5:2F:14:F8:41:06:73:1A:8D:04:C3:CD:7D:24:72
Certificate issuer:       /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Certificate serial:       010D0C9F43285847E215F6B2C7A52014B75946B8
Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c0a83b17-4b26-3f9d-b613-8ad0e72c3ab2.roa
Signing time:             Fri 15 Nov 2024 02:56:53 +0000
ROA not before:           Fri 15 Nov 2024 02:56:53 +0000
ROA not after:            Thu 13 Feb 2025 02:56:53 +0000
asID:                     63199
IP address blocks:        148.153.88.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e2:15:f6:b2:c7:a5:20:14:b7:59:46:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
        Validity
            Not Before: Nov 15 02:56:53 2024 GMT
            Not After : Feb 13 02:56:53 2025 GMT
        Subject: CN=925b6099-601d-47fe-ba15-72db89eadd4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:25:09:02:db:cd:ff:39:e7:fc:83:b6:39:1e:
                    5d:75:75:0d:36:b7:ec:cf:ac:63:29:3c:60:a2:7d:
                    e9:82:6e:86:7f:98:4c:49:73:f9:32:db:8d:65:89:
                    55:82:55:44:e4:c2:b6:42:ec:87:4b:ca:e4:80:87:
                    17:5a:6c:c6:bb:2f:2c:5a:6e:58:ea:16:29:d4:7f:
                    78:cd:51:88:01:1f:6c:1d:7a:f8:ec:e7:34:46:7e:
                    d6:83:40:2d:a3:0e:3f:f5:bb:9e:1b:34:23:34:52:
                    08:88:d2:42:64:42:4a:5b:9e:a2:c2:71:ad:ab:ea:
                    20:0f:31:c7:89:26:fa:14:51:fd:de:b6:fb:95:6e:
                    36:7f:69:40:8d:c5:23:22:dc:b6:2c:e3:16:80:61:
                    c4:cc:c9:53:64:42:88:dc:e8:24:82:ed:a4:29:57:
                    cd:51:27:a2:c0:9a:d3:22:ee:85:e5:e6:89:f5:64:
                    66:6a:69:8d:f5:4a:39:2a:8e:fd:db:63:9f:27:94:
                    7b:fd:df:a2:b6:99:02:f3:84:05:a9:54:9e:09:aa:
                    e9:eb:95:da:b3:51:2f:09:1b:e4:3d:53:55:22:03:
                    7f:65:df:1a:11:01:65:89:6e:4b:e1:78:31:8e:c9:
                    e3:8a:ab:f6:cd:3e:ee:42:0d:d2:d4:2d:66:e3:b3:
                    1c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:7B:3D:39:24:E5:2F:14:F8:41:06:73:1A:8D:04:C3:CD:7D:24:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c0a83b17-4b26-3f9d-b613-8ad0e72c3ab2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl

            X509v3 Authority Key Identifier:
                keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.153.88.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:8c:50:f6:45:9d:f2:f2:c6:a2:fc:fb:9b:29:ef:90:49:ef:
         b8:d2:93:15:97:3b:95:dd:76:2d:f3:e1:70:f2:72:7a:c7:81:
         dd:bf:ef:f8:f6:0e:50:32:9e:61:8d:49:5c:52:1d:47:72:c1:
         07:ad:d8:4c:e8:39:0f:ba:4e:d3:12:8d:58:f0:f5:7e:4d:bf:
         18:01:51:be:6e:99:a0:e5:72:ff:9e:b3:88:3b:fc:c0:c2:59:
         9a:bf:88:c7:fb:e3:4e:74:13:ca:11:23:a9:ca:83:21:38:df:
         e2:74:fa:12:1c:6a:40:15:78:3d:5c:32:6e:d8:a2:0f:d1:e5:
         d9:00:0b:24:3c:ff:73:bf:9c:0e:d7:0c:a0:38:bd:67:f9:72:
         cc:5b:0b:47:b5:c3:37:f7:10:c8:09:f1:35:73:9e:64:6d:81:
         5a:68:c8:2b:f2:90:f0:29:8c:e3:2a:37:a2:f6:30:07:48:12:
         93:5b:32:b4:27:f7:3a:b6:21:24:68:00:fc:80:ee:82:01:ec:
         09:e4:23:f0:50:5a:30:fd:a5:92:33:3a:d0:9e:d0:a9:74:bf:
         a8:f1:9a:f1:97:df:e3:1a:6a:3e:02:c8:01:01:4c:c5:82:98:
         82:e9:02:d7:62:86:b0:40:61:a3:dd:b6:75:07:6e:2b:61:c2:
         20:ed:67:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:20 2024 by rpki-client on console-ams.rpki-client.org