Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/7457a98c-66fa-35ef-8e07-8dd10ae5f930.roa
File:                     7457a98c-66fa-35ef-8e07-8dd10ae5f930.roa (raw, json)
Hash identifier:          TmjelKkKFUpyxA/JMmv5PQ29dJyh5TnvGGN17+3OwBo=
Subject key identifier:   0F:86:51:B8:C4:57:F3:E3:0D:6D:43:FB:C0:DF:8D:F1:5B:CE:BA:A1
Certificate issuer:       /CN=7ece0404-80a8-46f2-92eb-8f0b558c7dbe
Certificate serial:       010D0C9F432858454F02BE68D290A0095FFFF080
Authority key identifier: 18:D3:7F:B7:50:EE:43:01:46:26:1D:22:57:D1:78:5C:0E:91:5F:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/7457a98c-66fa-35ef-8e07-8dd10ae5f930.roa
Signing time:             Sun 24 Mar 2024 01:00:24 +0000
ROA not before:           Sun 24 Mar 2024 01:00:24 +0000
ROA not after:            Sat 22 Jun 2024 01:00:24 +0000
asID:                     393262
IP address blocks:        150.252.241.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4f:02:be:68:d2:90:a0:09:5f:ff:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ece0404-80a8-46f2-92eb-8f0b558c7dbe
        Validity
            Not Before: Mar 24 01:00:24 2024 GMT
            Not After : Jun 22 01:00:24 2024 GMT
        Subject: CN=f847c62f-4055-401c-8c62-3bc27a07773d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2d:c1:94:8a:61:be:14:93:cd:81:70:8c:c3:
                    dc:28:71:f3:be:32:13:3e:be:09:66:47:b8:60:1a:
                    b8:f2:6e:8c:0f:85:8a:d8:d0:00:7a:7e:14:9a:d0:
                    2b:70:13:f9:c1:50:db:5a:a7:c1:c8:9e:8b:1c:b5:
                    30:e4:4c:81:01:74:93:a9:9d:7b:95:34:15:97:79:
                    81:7a:16:03:43:10:a3:0f:f8:92:67:44:d4:f6:9c:
                    bc:ad:be:e0:77:51:17:d0:82:ad:4f:81:16:67:13:
                    ea:0a:56:79:53:c6:fc:29:c1:b8:6a:fc:fe:76:2f:
                    ca:d9:88:3a:3c:fd:2f:b0:30:e3:b9:ee:28:41:35:
                    f4:5d:d8:de:d0:bc:05:00:23:7c:03:fb:11:c7:f1:
                    e6:8b:1e:ff:da:da:3b:da:bc:92:59:9f:5b:09:5f:
                    d4:1f:82:b5:85:aa:47:db:8b:e2:cc:da:7d:4a:4f:
                    6f:7c:24:27:3f:85:f1:36:1e:a2:8e:ae:11:00:cc:
                    64:ec:88:b5:0f:29:95:a8:cc:f2:52:5a:1f:ff:78:
                    5e:dc:50:05:16:64:65:53:d4:84:96:41:65:c2:14:
                    70:8f:37:1d:83:5b:55:c5:ab:3c:3c:63:fa:65:6d:
                    ce:86:cb:13:19:bb:5d:ba:0c:aa:e3:33:6b:f0:19:
                    a5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:86:51:B8:C4:57:F3:E3:0D:6D:43:FB:C0:DF:8D:F1:5B:CE:BA:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/7457a98c-66fa-35ef-8e07-8dd10ae5f930.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.crl

            X509v3 Authority Key Identifier:
                keyid:18:D3:7F:B7:50:EE:43:01:46:26:1D:22:57:D1:78:5C:0E:91:5F:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.252.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:85:74:00:cc:c0:c3:a5:3b:53:a7:6c:82:4e:0d:e0:af:29:
         4a:c3:fd:e9:5b:8f:e2:69:88:5c:12:2a:18:44:ed:88:24:fe:
         75:ac:d6:61:80:23:3d:5a:89:45:4b:bf:17:e3:0f:4f:19:2e:
         11:7b:a2:b0:02:74:ca:9e:e9:ac:29:5d:29:43:fe:ce:2c:f8:
         69:50:d9:3b:92:99:fc:08:d7:30:b6:00:dc:44:86:af:5b:30:
         e8:9f:25:cc:38:a6:c1:fa:92:29:24:73:70:7f:17:30:51:17:
         ab:de:54:b3:bf:29:9c:53:36:82:99:8e:1f:97:ea:4a:b8:16:
         77:1b:ff:ca:24:c6:eb:cc:71:d2:5b:17:cd:9e:87:1d:94:aa:
         70:03:f9:1e:74:d1:b0:63:52:bc:07:26:58:00:19:5f:0f:06:
         e4:25:25:7f:99:ed:c9:5b:c5:98:75:37:f3:cc:1f:f6:f1:36:
         17:04:69:4e:5f:7e:10:46:0a:a7:d6:94:de:97:c0:89:22:2e:
         ce:6c:8b:bc:85:4d:a9:26:67:bb:7e:d8:2b:30:ce:e0:e4:7b:
         af:8e:a5:a8:d8:6d:da:6f:81:84:79:5e:85:8f:85:bc:89:81:
         28:fe:19:e7:e6:54:6e:10:7d:57:0a:e9:63:ad:38:1f:c7:dd:
         7c:50:1a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 02:09:56 2024 by rpki-client on console-ams.rpki-client.org