Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/52bbfc69-b5ac-3604-941b-13254b2d5eb0.roa
File:                     52bbfc69-b5ac-3604-941b-13254b2d5eb0.roa (raw, json)
Hash identifier:          JoJvUHaZPr+4hPlWiGefYxlKS0k7Wd9T5+OGgpLMLDc=
Subject key identifier:   EF:04:8A:C0:96:E9:B3:CC:E7:A3:DD:63:7C:78:09:D4:ED:8B:AD:65
Certificate issuer:       /CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
Certificate serial:       010D0C9F432858473FF09E42530E331A44928D80
Authority key identifier: 05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/52bbfc69-b5ac-3604-941b-13254b2d5eb0.roa
Signing time:             Wed 18 Sep 2024 01:00:30 +0000
ROA not before:           Wed 18 Sep 2024 01:00:30 +0000
ROA not after:            Tue 17 Dec 2024 02:00:30 +0000
asID:                     14015
IP address blocks:        148.76.116.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3f:f0:9e:42:53:0e:33:1a:44:92:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
        Validity
            Not Before: Sep 18 01:00:30 2024 GMT
            Not After : Dec 17 02:00:30 2024 GMT
        Subject: CN=83bc9165-7479-4b14-a196-5238da3ce53b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e5:47:d1:b2:d4:c3:28:b3:b9:bf:db:7c:5a:
                    ef:9c:8a:67:bf:53:b7:0b:e9:4f:df:b3:89:cf:59:
                    92:a4:9e:0b:a0:1e:b9:7c:71:2d:a6:cd:f7:ca:82:
                    be:09:cb:25:c2:65:eb:c0:66:ef:60:a1:5c:90:f8:
                    9e:6b:8a:26:70:da:3d:e8:12:ac:83:f3:0f:f8:02:
                    c8:5d:05:cd:d6:85:9c:21:84:7c:d6:06:c2:95:a9:
                    0e:f2:1c:12:93:cc:a9:87:ac:75:13:e4:bb:22:ac:
                    06:44:fa:26:03:85:79:2f:24:4d:2e:12:4a:fa:c3:
                    49:f6:69:25:f0:b2:de:2d:f5:b3:18:50:36:65:75:
                    13:5a:23:2e:b2:cd:60:99:cd:b3:c7:3d:52:47:52:
                    66:c9:39:14:1f:f6:d6:58:e9:7f:bc:49:02:36:5b:
                    df:e9:57:d6:9d:25:f2:87:87:2e:6b:1c:19:fa:4e:
                    00:62:60:18:bb:47:20:02:d1:64:f0:e5:f1:92:37:
                    60:59:79:10:29:21:c7:76:89:6c:a5:76:43:58:66:
                    ed:9e:54:6a:53:23:7d:c6:7e:61:dd:98:ec:57:02:
                    e8:3a:55:05:99:0c:ef:73:e4:96:48:8a:cf:70:2c:
                    ee:ff:bc:5d:4c:6a:86:4f:34:f5:d9:57:5e:26:2e:
                    56:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:04:8A:C0:96:E9:B3:CC:E7:A3:DD:63:7C:78:09:D4:ED:8B:AD:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/52bbfc69-b5ac-3604-941b-13254b2d5eb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl

            X509v3 Authority Key Identifier:
                keyid:05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.76.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:f6:79:86:3f:b6:e8:c0:ad:3a:af:13:f5:e5:e8:cf:2c:54:
         6c:66:54:19:83:53:b6:8f:d5:05:fa:40:0a:08:76:92:11:69:
         ca:da:15:ba:49:06:e8:72:c1:89:25:bd:dc:e4:6b:26:eb:c6:
         d1:f1:b4:f2:8b:d8:aa:3e:e9:85:23:69:c2:4b:9e:2e:59:3b:
         e6:f9:b1:6b:a3:03:a4:d8:d0:f5:2a:6f:36:05:b6:3c:69:d9:
         0b:87:11:54:12:ee:72:a7:97:44:ba:f9:65:9a:67:23:df:a6:
         b6:a8:07:c9:b2:86:9e:49:0c:8b:d8:0c:72:05:b2:f9:f9:93:
         84:34:6b:83:6e:b6:6c:ef:62:ac:b4:d5:39:49:50:ca:c8:18:
         62:e1:4c:b7:28:7d:86:4c:d7:13:5f:06:69:80:48:e8:99:67:
         31:fe:2e:77:23:3a:0a:52:15:83:df:a3:14:1e:60:38:58:0d:
         ac:28:95:44:8d:2a:29:09:9b:1d:c2:0f:45:ff:52:09:69:70:
         fa:b0:f9:c4:1d:f4:a8:54:16:f1:fe:98:41:f8:09:56:66:09:
         52:fb:af:1b:12:d0:06:55:de:f9:c4:f8:1e:ae:ae:d8:e5:57:
         59:2a:cb:c2:e8:7a:6c:e3:92:4c:d0:d0:df:69:8d:1c:a7:32:
         4a:88:b3:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:16:32 2024 by rpki-client on console-fra.rpki-client.org