Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/8772e1e2-8469-31f4-ba7a-299142b35b0c.roa
File:                     8772e1e2-8469-31f4-ba7a-299142b35b0c.roa (raw, json)
Hash identifier:          VaQaolhN8/dOcsrAsaG2nKJyRDRNzn2uBKzr5uez1OY=
Subject key identifier:   25:BF:98:96:3E:C4:22:49:4B:D9:C6:1F:66:29:27:5F:1A:06:5F:B1
Certificate issuer:       /CN=9050423a-b7ae-4879-a880-ea3be6e193a8
Certificate serial:       010D0C9F432858472405C417125E845A22F474E0
Authority key identifier: E7:C5:42:5E:A0:DF:33:80:77:AB:80:B8:30:18:49:53:42:A5:B6:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/8772e1e2-8469-31f4-ba7a-299142b35b0c.roa
Signing time:             Sun 08 Sep 2024 01:00:31 +0000
ROA not before:           Sun 08 Sep 2024 01:00:31 +0000
ROA not after:            Sat 07 Dec 2024 02:00:31 +0000
asID:                     22188
IP address blocks:        168.151.10.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:24:05:c4:17:12:5e:84:5a:22:f4:74:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9050423a-b7ae-4879-a880-ea3be6e193a8
        Validity
            Not Before: Sep  8 01:00:31 2024 GMT
            Not After : Dec  7 02:00:31 2024 GMT
        Subject: CN=eb604841-b2f3-4c33-9632-f21397e6ae23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:fb:72:ce:2e:67:e5:08:b2:2a:72:3d:12:54:
                    1c:4d:a5:e8:e2:c6:86:30:f2:6c:90:e6:63:eb:0e:
                    80:64:3b:e5:b0:65:04:28:f5:a8:76:cc:3d:33:d4:
                    64:5d:7a:11:3f:20:98:13:1b:5c:05:b3:0e:e8:fe:
                    f8:56:79:40:7d:b8:6e:b9:64:1b:5c:e4:42:cf:3a:
                    c4:8e:13:50:79:c3:0a:af:a9:37:6e:11:82:71:cf:
                    f6:92:f2:5c:27:7b:92:fd:f2:a9:64:50:c9:fb:27:
                    2a:fa:63:e4:37:c0:60:7d:ef:50:0d:aa:c8:a7:c1:
                    6b:8e:3b:0c:a8:10:6c:42:af:02:2b:7a:a1:a5:4b:
                    01:b5:32:a0:32:46:e6:7d:cb:c3:b0:5b:07:55:9f:
                    ef:27:67:15:78:51:47:fa:44:a4:c7:96:80:94:6d:
                    d9:a9:de:22:12:9c:44:96:69:e0:be:4a:2d:97:a2:
                    e4:fa:4f:b3:d1:98:8b:32:bf:93:98:57:06:f7:f8:
                    9b:68:c3:a6:8b:c1:fb:45:66:e0:0f:67:69:bb:76:
                    ad:74:85:2a:a1:7a:03:27:4b:f3:09:e8:b0:ef:85:
                    a0:c8:60:48:2c:fe:8c:10:64:04:83:b9:bd:cb:ef:
                    b5:44:4a:ad:7e:f9:24:68:64:c7:da:45:7e:99:f8:
                    64:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:BF:98:96:3E:C4:22:49:4B:D9:C6:1F:66:29:27:5F:1A:06:5F:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/8772e1e2-8469-31f4-ba7a-299142b35b0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.crl

            X509v3 Authority Key Identifier:
                keyid:E7:C5:42:5E:A0:DF:33:80:77:AB:80:B8:30:18:49:53:42:A5:B6:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.151.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:fc:62:dd:7d:f2:91:0a:51:65:34:84:ef:b2:09:b8:82:75:
         55:57:0c:9b:cb:fa:8d:6e:05:1b:ae:69:36:89:07:c7:da:65:
         98:b6:3e:d1:ec:b1:ee:2a:cf:4a:6e:57:1d:d2:41:0d:30:ea:
         b4:df:5b:cf:7b:22:fa:69:67:95:85:ca:d6:e6:fc:c8:30:38:
         2e:f1:5b:f0:67:ad:ae:1b:d6:87:31:24:c4:09:72:59:ae:40:
         81:40:b9:43:cf:ce:24:2c:b8:0a:d8:8e:f2:44:66:5b:15:4b:
         0b:e4:7b:37:32:a4:20:c5:e7:15:38:b6:22:ab:2d:59:53:00:
         c4:9e:47:a3:56:07:5e:b9:f6:b6:10:8a:b8:f2:34:0e:dc:df:
         15:aa:5b:8d:4f:55:bb:35:e0:87:81:df:03:19:5a:bf:14:a1:
         b4:3a:7f:08:a3:7d:e6:f6:3e:78:0b:ce:32:65:6c:e6:ae:00:
         b3:9b:f0:66:9a:f3:1e:04:42:db:3c:7a:58:57:3b:8d:10:10:
         4a:a8:09:75:a6:59:bb:3e:5a:3e:4d:25:84:03:7e:11:7d:14:
         47:5c:96:19:0b:6d:92:a4:5c:ea:f5:6e:84:77:42:7e:35:72:
         b6:67:a0:01:eb:b7:85:93:4a:ec:8a:a5:4c:e7:ac:a6:8d:bb:
         94:38:25:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:33:12 2024 by rpki-client on console-ams.rpki-client.org