Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/c252355f-f1da-3c02-9a36-072658e179f2.roa
File:                     c252355f-f1da-3c02-9a36-072658e179f2.roa (raw, json)
Hash identifier:          y+toT5VF4B718S279YGcpvgCbgcQm9qpOfMrQn2PGlA=
Subject key identifier:   A6:7A:E6:85:E5:CF:3A:33:B3:5F:9B:78:39:EB:C8:8F:D4:A4:F4:14
Certificate issuer:       /CN=0dbbf3fd-cf6e-4de7-8126-d6e41824d105
Certificate serial:       010D0C9F432858452C364FFC7CECF5085C030A40
Authority key identifier: E8:A7:84:21:AC:67:CB:61:5B:12:37:63:55:E4:24:3A:7A:6C:92:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/c252355f-f1da-3c02-9a36-072658e179f2.roa
Signing time:             Mon 11 Mar 2024 13:51:04 +0000
ROA not before:           Mon 11 Mar 2024 13:51:04 +0000
ROA not after:            Sun 09 Jun 2024 13:51:04 +0000
asID:                     14618
IP address blocks:        150.9.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2c:36:4f:fc:7c:ec:f5:08:5c:03:0a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dbbf3fd-cf6e-4de7-8126-d6e41824d105
        Validity
            Not Before: Mar 11 13:51:04 2024 GMT
            Not After : Jun  9 13:51:04 2024 GMT
        Subject: CN=8153e8b4-6092-406f-8a2f-5662fa7b9437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:99:0f:7e:83:df:48:04:f1:78:7a:07:54:e1:
                    9e:1d:11:b3:f0:00:e9:82:a9:f9:91:2f:ef:3f:dc:
                    45:05:be:11:a5:f7:02:1d:06:f3:48:7d:b4:79:d6:
                    72:10:6a:52:f2:bd:40:42:9f:e3:70:2a:90:32:7d:
                    1b:d3:6c:79:1e:8f:13:91:a5:e0:f9:c4:76:58:85:
                    c3:2c:b3:a8:68:e2:34:d4:b4:d4:f0:b2:83:89:40:
                    9f:9c:15:e2:47:3b:4d:60:f4:ae:47:19:0a:cc:ae:
                    52:bc:d8:bc:f2:0a:24:6e:02:a8:eb:66:16:bf:60:
                    16:8c:a0:8a:c2:88:23:67:20:f0:71:69:80:b6:81:
                    8e:8b:88:e8:61:15:0a:fb:73:1c:41:69:28:84:b6:
                    90:4b:0a:48:de:79:47:d8:7a:0a:43:a8:1a:ba:e2:
                    be:f1:50:95:6c:a3:c5:03:5d:b3:4e:ef:1f:0c:b2:
                    69:f9:81:df:9d:cf:da:7e:96:86:9d:6b:eb:ac:24:
                    be:a5:1f:3d:8e:59:1d:9e:40:bd:39:c0:89:18:cb:
                    6a:a7:95:45:b7:7c:f8:8c:72:f5:02:f3:de:53:a3:
                    52:d2:9f:3d:03:ec:91:67:73:6b:ea:bd:2f:da:eb:
                    d0:3a:03:be:6d:1b:9b:79:66:6c:fb:71:0b:f5:dd:
                    1f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:7A:E6:85:E5:CF:3A:33:B3:5F:9B:78:39:EB:C8:8F:D4:A4:F4:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/c252355f-f1da-3c02-9a36-072658e179f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.crl

            X509v3 Authority Key Identifier:
                keyid:E8:A7:84:21:AC:67:CB:61:5B:12:37:63:55:E4:24:3A:7A:6C:92:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.9.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:39:96:00:d8:5e:c8:84:88:b8:43:19:2a:8f:ab:fc:5b:c7:
         a3:db:8d:a8:f1:cc:2e:bc:bc:cb:95:1d:93:eb:45:4f:83:1c:
         70:7f:46:2a:f1:f2:cc:b4:95:63:d2:28:44:9a:70:38:a4:a9:
         d9:73:b3:f8:e4:09:ba:c5:57:64:67:60:b6:a0:90:71:84:0e:
         10:5c:3f:ca:5c:21:60:84:03:95:d9:00:cb:cc:55:d7:cc:78:
         72:05:96:1a:3e:7a:90:b7:83:d2:49:51:e5:ee:86:49:fb:02:
         3d:98:05:f5:ac:83:82:61:47:93:bd:40:ae:cf:51:4b:d3:49:
         41:e7:1d:4c:d0:ba:4a:43:bf:6c:aa:bd:66:a3:dc:d2:b1:1a:
         d8:f7:63:56:ec:6f:c8:4c:04:ae:4f:06:a0:29:e0:9c:e7:f7:
         13:41:05:73:3c:64:30:a7:12:f6:ac:de:8a:06:9f:39:c2:89:
         df:50:34:0f:ab:ad:35:1c:9e:7d:1c:e2:76:78:de:36:79:50:
         6a:2f:59:a5:f4:8d:00:0f:7c:81:14:65:67:74:bf:53:5d:99:
         a5:6a:07:87:d4:99:2b:9f:b4:8d:aa:af:96:cb:95:01:38:9d:
         e9:8c:9b:5d:1a:4a:a2:1c:95:67:fc:bc:f5:da:36:95:98:f7:
         8c:0e:53:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 20:50:24 2024 by rpki-client on console-ams.rpki-client.org