Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0a8d551c-9b4e-3021-9c28-fa272cac9ca0.roa
File:                     0a8d551c-9b4e-3021-9c28-fa272cac9ca0.roa (raw, json)
Hash identifier:          rUPgoGmMRmU0tskNQokf9yBs9QkYh5Bxu6n32mfuc9o=
Subject key identifier:   F1:88:F6:48:45:C8:44:72:4C:B6:4D:B3:3A:96:22:2D:A4:EE:18:D5
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E429AD918E6040A2E6C00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0a8d551c-9b4e-3021-9c28-fa272cac9ca0.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        172.242.150.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:42:9a:d9:18:e6:04:0a:2e:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=f3e56d0c-bbc2-41f7-8200-d9e4c2246ea3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a2:f7:b1:c4:a6:bd:ca:1d:c5:6a:62:5b:c6:
                    9e:2c:96:bc:78:83:36:a8:c6:67:fc:62:ac:1c:24:
                    d0:d0:60:88:f6:d5:3f:0d:d0:d3:98:13:02:d4:a5:
                    1e:00:e8:c7:9b:3c:de:37:2a:e2:01:2d:18:0e:c5:
                    fa:0c:cc:d4:4f:72:f5:fd:97:64:65:56:26:71:e2:
                    61:df:17:ba:ee:e2:8e:80:95:4a:7e:a0:e3:84:a9:
                    9f:6e:ed:ad:0b:a0:c0:4a:5f:89:29:05:34:e7:db:
                    f2:9d:c3:ce:15:5a:d7:d3:cc:12:31:38:2b:0f:cd:
                    81:af:d3:bd:85:b4:e6:cf:37:16:ba:70:5e:e1:56:
                    9d:ea:b5:bf:19:48:75:3d:57:8f:fa:77:a6:3d:c8:
                    fb:1a:cb:f9:4a:87:23:f0:f5:e7:fb:06:b9:d3:22:
                    aa:d1:7a:ac:5d:0a:18:c9:5b:07:b9:ab:c1:d7:d0:
                    7e:46:07:e9:82:e0:54:a1:bb:6b:e4:f9:35:75:5f:
                    8c:75:54:42:d1:27:c8:dd:e8:63:2f:b6:81:b2:44:
                    1e:07:40:5f:1d:fc:fc:1a:d3:99:68:d4:e7:37:53:
                    da:13:a4:21:8e:d5:56:03:32:36:83:64:31:04:31:
                    48:a1:6a:94:fe:22:5f:0f:89:3e:4d:62:36:19:c0:
                    07:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:88:F6:48:45:C8:44:72:4C:B6:4D:B3:3A:96:22:2D:A4:EE:18:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0a8d551c-9b4e-3021-9c28-fa272cac9ca0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:95:35:d1:0e:32:53:c7:2d:b8:e6:06:c0:11:c6:eb:fc:0d:
         55:05:c5:aa:d3:cc:83:3d:97:a3:dd:96:c7:a7:7f:11:2f:d9:
         78:56:f2:bf:35:10:a1:9d:0e:e3:c7:64:51:c7:fb:a8:4b:17:
         f8:3d:73:56:5a:48:08:2b:54:cf:76:dc:29:a1:d0:1f:f3:43:
         e0:4e:c1:33:46:6a:e1:b6:15:94:c4:ea:5c:69:8c:d8:78:06:
         f3:cc:d3:56:1f:65:e8:2a:78:21:96:7c:5f:94:32:67:ab:e7:
         ee:67:8a:99:b5:b9:90:64:de:db:b5:a2:7f:11:a5:09:6c:c6:
         26:f2:ee:37:9a:7e:e0:d4:65:ec:3b:26:0d:67:30:f5:f7:c1:
         3a:b0:6c:be:b9:09:eb:d5:1b:e7:1b:cb:83:a4:78:c0:2b:68:
         db:44:2a:7d:84:3a:64:23:5c:39:a0:d0:59:be:a4:c4:67:80:
         c5:ad:dd:03:17:b3:18:40:a0:38:2f:d5:84:82:67:fa:8b:6d:
         ca:c5:b2:77:09:14:ec:de:6d:08:48:f7:b4:d0:d3:19:a8:77:
         00:4a:9e:32:64:42:0f:e5:78:b4:99:cb:b6:b7:59:2c:37:a1:
         02:45:00:6c:cf:e5:3c:ee:ca:51:da:f0:7d:3a:d4:14:b6:2e:
         95:cc:bb:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:31 2024 by rpki-client on console-ams.rpki-client.org