Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/b19adfe5-a43f-3afd-b42e-b69eef49a94f.roa
File:                     b19adfe5-a43f-3afd-b42e-b69eef49a94f.roa (raw, json)
Hash identifier:          bFxC3caGAoT4mogB3dwa1wNVSlYSp6MdoIaHBwXbwRw=
Subject key identifier:   AE:D7:36:59:71:29:65:AC:3F:9F:A5:89:58:B3:DA:0A:52:00:17:EB
Certificate issuer:       /CN=7ece0404-80a8-46f2-92eb-8f0b558c7dbe
Certificate serial:       010D0C9F432858454F02BDB44AD43E15B3C2FB20
Authority key identifier: 18:D3:7F:B7:50:EE:43:01:46:26:1D:22:57:D1:78:5C:0E:91:5F:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/b19adfe5-a43f-3afd-b42e-b69eef49a94f.roa
Signing time:             Sun 24 Mar 2024 01:00:24 +0000
ROA not before:           Sun 24 Mar 2024 01:00:24 +0000
ROA not after:            Sat 22 Jun 2024 01:00:24 +0000
asID:                     393262
IP address blocks:        150.252.240.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4f:02:bd:b4:4a:d4:3e:15:b3:c2:fb:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ece0404-80a8-46f2-92eb-8f0b558c7dbe
        Validity
            Not Before: Mar 24 01:00:24 2024 GMT
            Not After : Jun 22 01:00:24 2024 GMT
        Subject: CN=07d42838-98dd-437e-855a-a3aa3145fb1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ca:60:cd:5f:d8:6f:3e:aa:07:08:74:18:8f:
                    59:1c:a4:c3:e1:16:a2:7b:63:a4:ad:9a:09:72:6f:
                    27:d6:86:85:6c:00:11:33:c7:ca:bb:92:de:3e:5a:
                    21:a6:9a:3a:e1:d8:c8:0e:4d:6a:75:d4:8e:95:bd:
                    e8:b1:b6:e1:b2:66:d2:68:ca:6f:4c:f0:65:1c:31:
                    9e:63:1e:4e:43:17:82:0f:b9:20:09:93:17:39:35:
                    e6:86:79:50:be:04:dd:58:7e:ec:e9:3f:34:29:21:
                    9e:23:48:c5:e3:d6:d8:9e:29:54:a1:a0:38:09:ca:
                    00:83:fb:53:3d:8c:71:0b:a0:ce:de:7d:dd:70:39:
                    5e:a1:6b:49:86:63:e9:87:66:a8:3d:20:b7:75:53:
                    33:a6:6e:95:59:b5:01:22:31:d5:d7:ab:22:0b:06:
                    2b:20:c6:d1:99:57:f1:ae:a4:83:ba:54:0e:49:9a:
                    a5:8b:a8:c9:63:59:dd:8a:71:21:18:2f:3d:89:f0:
                    5d:07:b1:cd:80:f2:30:db:52:79:e8:49:f0:e3:d9:
                    1f:b0:41:c2:1f:83:ed:7b:5a:cd:65:44:8d:9e:23:
                    d3:f7:86:88:93:b4:50:1b:ce:3c:1e:50:cf:11:92:
                    71:02:bc:d0:c9:03:dc:4e:84:cb:de:05:06:be:55:
                    19:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:D7:36:59:71:29:65:AC:3F:9F:A5:89:58:B3:DA:0A:52:00:17:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/b19adfe5-a43f-3afd-b42e-b69eef49a94f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.crl

            X509v3 Authority Key Identifier:
                keyid:18:D3:7F:B7:50:EE:43:01:46:26:1D:22:57:D1:78:5C:0E:91:5F:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.252.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:48:d6:6b:da:af:1a:da:e7:14:d7:7c:34:59:23:2a:c0:e9:
         25:58:b7:a9:c0:7a:e4:84:45:8f:19:0b:cb:e1:b2:54:86:e3:
         39:c3:cc:b2:46:76:80:13:25:e5:3f:08:3b:fb:e2:90:b5:61:
         3f:1c:37:96:74:47:b9:53:80:16:17:05:98:2f:05:c2:d8:f0:
         af:bf:29:f1:70:8d:91:7b:b7:7d:0a:22:ab:63:20:33:83:e5:
         b7:0b:89:9a:4a:27:59:6f:31:3d:6e:44:f8:0d:97:30:07:5f:
         00:22:5f:4c:a0:5b:e1:9d:87:ac:10:8a:ad:da:a8:c1:fb:30:
         37:b2:e7:37:ec:23:3e:73:cb:de:bc:e9:35:ed:2e:27:71:1a:
         2c:ed:fb:6c:1b:f6:4d:64:0e:02:ec:a7:a7:5a:fc:e5:6a:65:
         de:16:3d:a8:dd:b7:39:a5:c1:73:39:23:57:51:22:93:07:d8:
         76:8f:4c:23:f8:05:63:8f:88:54:ad:b3:96:c6:d6:63:fc:6c:
         49:83:5b:22:41:3d:e3:3d:09:9b:0e:32:58:a9:31:5d:12:fd:
         1b:91:d7:35:1c:9f:e4:18:5a:b9:b5:e2:3e:db:12:7c:f1:37:
         14:08:a6:e5:3a:e7:ff:d4:b5:08:73:3c:97:8a:c0:7c:ec:f9:
         72:c0:99:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 01:00:29 2024 by rpki-client on console-fra.rpki-client.org