Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/11cfa27e-719b-3266-b215-446176a2db40.roa
File:                     11cfa27e-719b-3266-b215-446176a2db40.roa (raw, json)
Hash identifier:          Vd1rzv+TAbM4ianiNFu66i2jW9mIS2kNRje+N8c21VY=
Subject key identifier:   D2:A1:D2:AA:32:80:5E:92:C9:C9:D4:6B:69:7D:0A:69:5F:A8:6B:33
Certificate issuer:       /CN=367e4bfe-b165-41fa-ab22-3f78555490cf
Certificate serial:       010D0C9F432858472405C359E785BE8CC55D4180
Authority key identifier: DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/11cfa27e-719b-3266-b215-446176a2db40.roa
Signing time:             Sun 08 Sep 2024 01:00:31 +0000
ROA not before:           Sun 08 Sep 2024 01:00:31 +0000
ROA not after:            Sat 07 Dec 2024 02:00:31 +0000
asID:                     14618
IP address blocks:        192.161.150.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:24:05:c3:59:e7:85:be:8c:c5:5d:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=367e4bfe-b165-41fa-ab22-3f78555490cf
        Validity
            Not Before: Sep  8 01:00:31 2024 GMT
            Not After : Dec  7 02:00:31 2024 GMT
        Subject: CN=21d6443e-0244-48de-9226-155f4929204d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1b:a7:ba:d1:02:33:40:e1:49:93:95:bf:f8:
                    d0:70:f1:c4:9d:cb:10:5f:81:55:bd:c3:5a:12:2a:
                    75:eb:98:b1:21:9a:2a:f3:06:6e:2d:6f:7b:86:19:
                    a2:e5:58:62:d2:49:df:09:92:f3:85:00:24:8b:35:
                    8b:65:fe:05:0f:07:4a:0d:c7:aa:03:b5:e5:47:6a:
                    de:c7:ac:ad:ee:e1:07:dd:fd:42:c9:a0:77:59:9e:
                    5d:8b:15:67:63:17:f4:69:61:d0:13:69:b0:64:c8:
                    c7:db:31:cb:ed:6c:23:0d:3b:0b:73:a8:a6:bf:8c:
                    41:91:10:07:eb:df:f7:33:fa:50:1a:46:54:2d:87:
                    ca:9b:25:d7:27:ba:ea:6c:2c:77:ef:0d:0e:58:29:
                    91:fa:69:d8:75:67:50:72:93:da:70:49:cb:ca:e4:
                    34:03:c0:9d:95:c0:a2:1d:86:b0:cb:c4:f2:60:6f:
                    55:d7:ea:6a:86:fd:78:32:0d:b2:8c:05:08:96:17:
                    6b:ac:b6:46:ce:da:51:c0:ac:70:cf:b8:a8:f9:d4:
                    2e:eb:b9:13:d5:6e:3f:09:3b:ec:2e:03:d1:8f:55:
                    d2:eb:36:8f:de:cc:56:c1:6e:6e:d4:72:ff:16:5f:
                    6d:b6:27:53:b1:95:bb:34:50:f3:45:f5:27:aa:df:
                    13:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:A1:D2:AA:32:80:5E:92:C9:C9:D4:6B:69:7D:0A:69:5F:A8:6B:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/11cfa27e-719b-3266-b215-446176a2db40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl

            X509v3 Authority Key Identifier:
                keyid:DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.161.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:21:94:56:51:a6:b5:d1:08:ad:fa:40:01:30:34:af:46:11:
         60:fb:20:d9:76:2d:d8:cb:d7:ca:a9:56:f2:30:1a:d4:41:a4:
         2f:90:6b:e2:3a:a5:57:30:b0:6b:94:dd:fa:09:7a:63:b1:75:
         09:b3:ca:95:54:ac:8e:80:d5:12:bd:47:81:9f:a1:5a:5e:0f:
         1f:fd:f0:ef:7a:f7:e1:a4:eb:12:83:29:19:db:45:9d:48:19:
         02:d3:8d:d1:c8:30:5c:a2:85:83:1a:11:d1:6b:fc:3d:a2:60:
         61:49:49:b9:10:bb:61:9e:57:aa:dd:be:ef:a1:3f:89:1f:95:
         c8:a2:ce:1f:56:51:66:cd:42:62:20:4f:02:a5:52:4e:c3:e2:
         f4:33:1b:17:1f:a5:69:20:33:8c:e9:d6:17:24:fc:b3:01:86:
         e2:d7:3f:88:d3:ef:48:78:57:61:7e:40:5b:15:63:07:39:80:
         64:11:4d:5b:e2:90:aa:58:ba:06:d4:91:1a:c8:38:dd:ff:8d:
         dc:ea:9e:f7:c5:d8:28:22:65:51:90:a5:09:c0:6e:64:4a:61:
         61:44:37:5a:1f:9d:64:4e:19:e0:54:ae:7c:c7:1b:59:59:9f:
         19:5c:6f:9c:f7:03:87:14:21:37:94:7c:f4:6d:d7:f1:8c:ed:
         05:f7:a0:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:37:25 2024 by rpki-client on console-ams.rpki-client.org