Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/1023aea3-a570-3f9c-bc0d-87567a6621c6.roa
File:                     1023aea3-a570-3f9c-bc0d-87567a6621c6.roa (raw, json)
Hash identifier:          +qG1J7NcW8CQE69xva/4M/Bvq+WM5fOUaBNl/A4yi+U=
Subject key identifier:   47:03:2C:30:D5:3C:77:6C:54:F5:4D:F0:62:BD:78:D0:6B:61:A8:56
Certificate issuer:       /CN=0dbbf3fd-cf6e-4de7-8126-d6e41824d105
Certificate serial:       010D0C9F432858452C386C58C2D68329FA422D80
Authority key identifier: E8:A7:84:21:AC:67:CB:61:5B:12:37:63:55:E4:24:3A:7A:6C:92:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/1023aea3-a570-3f9c-bc0d-87567a6621c6.roa
Signing time:             Mon 11 Mar 2024 13:55:20 +0000
ROA not before:           Mon 11 Mar 2024 13:55:20 +0000
ROA not after:            Sun 09 Jun 2024 13:55:20 +0000
asID:                     16509
IP address blocks:        150.9.223.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2c:38:6c:58:c2:d6:83:29:fa:42:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dbbf3fd-cf6e-4de7-8126-d6e41824d105
        Validity
            Not Before: Mar 11 13:55:20 2024 GMT
            Not After : Jun  9 13:55:20 2024 GMT
        Subject: CN=0240de15-67fc-4740-8a27-04fc3bd2535c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:41:80:a2:a5:7b:08:9e:0e:e9:10:e0:0e:78:
                    1c:5c:c6:81:ea:16:7f:b6:4d:b4:c8:0b:36:ae:de:
                    34:e4:b0:fd:b5:8e:dd:b4:b8:a7:18:22:19:5f:4c:
                    2d:2a:2e:2d:04:98:0d:82:d8:b2:4d:49:b6:1a:a0:
                    d4:a8:99:dc:c7:0c:36:19:20:ec:f5:87:e2:f9:32:
                    dd:46:af:7c:4e:86:6c:c4:ab:4f:6b:1d:84:09:97:
                    d8:3e:5c:b0:ee:5f:0c:5a:f6:e3:0e:af:78:52:fa:
                    78:4a:88:dd:b0:15:49:0b:e3:23:65:1f:c7:0e:e9:
                    c4:f9:d5:b1:ef:b6:1d:37:c3:91:a3:ac:22:06:85:
                    ac:65:83:46:e8:a8:d2:bc:c9:70:b5:e0:32:30:02:
                    59:55:e0:80:b6:69:4b:47:02:92:fa:07:59:69:dc:
                    6d:55:75:cf:93:f0:9e:7f:52:df:67:b7:ff:07:5e:
                    ce:10:83:9d:b3:c4:83:2f:5e:6c:dd:b8:1d:26:cd:
                    03:92:f0:89:64:84:bf:20:16:0b:ca:bc:67:bb:09:
                    09:4f:27:f3:19:86:e3:44:50:65:16:0e:ec:bd:d0:
                    d0:94:1d:f4:c7:fb:6b:b5:1f:e9:37:2a:1f:9e:93:
                    fd:ac:a4:b5:b0:b9:c2:6c:17:77:17:41:4d:46:1e:
                    d4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:03:2C:30:D5:3C:77:6C:54:F5:4D:F0:62:BD:78:D0:6B:61:A8:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/1023aea3-a570-3f9c-bc0d-87567a6621c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.crl

            X509v3 Authority Key Identifier:
                keyid:E8:A7:84:21:AC:67:CB:61:5B:12:37:63:55:E4:24:3A:7A:6C:92:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.9.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:f4:4f:5a:98:f9:b1:72:32:10:7c:e9:9a:23:3f:8f:df:c8:
         d3:16:08:ad:6e:a6:c5:f1:1c:50:70:ad:21:92:af:f6:f0:dc:
         5d:29:2b:13:3c:15:15:f1:12:ea:71:ea:22:8f:49:aa:af:91:
         96:69:32:37:bd:70:32:e0:96:7c:43:70:c7:95:10:a7:5e:0e:
         9a:db:75:d7:1f:b6:d9:cb:23:f8:05:da:fa:fc:68:d0:32:82:
         d5:c9:0d:9e:48:e7:ca:56:1b:cf:47:d8:c8:4d:47:cd:49:79:
         37:7c:a3:0c:b7:de:bb:6a:39:67:42:50:ea:f1:8c:71:c8:9c:
         ad:b6:4f:8d:f6:2b:7d:ff:0e:55:00:4a:b1:56:9d:e0:d3:78:
         07:3e:56:46:7f:d2:22:7e:7c:c3:6a:cc:42:eb:fe:a2:6a:a8:
         fa:eb:7b:c3:63:a7:bd:be:94:bd:8e:9b:a5:60:50:1c:e5:5c:
         21:8f:3b:d4:70:d7:e6:32:0a:5c:0e:54:67:93:a0:02:e4:f6:
         db:ca:1a:e6:b4:0b:fa:6c:f5:42:43:db:4f:cb:48:f4:9b:c7:
         89:e5:60:41:4c:dc:6e:40:ad:f2:5a:01:d2:42:8c:37:ce:32:
         b6:46:b0:cb:1b:05:b3:e1:e8:01:72:fa:5c:37:85:38:48:7b:
         a3:8d:ff:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:14:35 2024 by rpki-client on console-fra.rpki-client.org