Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6526224a-84e8-40af-a273-87e57f2e0cc0/d0d04f5b-3727-3483-9bd2-8a6b7fbb4d05.roa
File:                     d0d04f5b-3727-3483-9bd2-8a6b7fbb4d05.roa (raw, json)
Hash identifier:          +srtQr+xwSV95b5l/r3gEmh4QZL0ZIRqEBK9qWvWLEE=
Subject key identifier:   80:9A:0D:38:D8:26:A9:21:2F:88:3C:C2:11:AF:42:4B:E4:B4:F5:68
Certificate issuer:       /CN=6526224a-84e8-40af-a273-87e57f2e0cc0
Certificate serial:       010D0C9F432858473BC09C0649BA6072AB193E80
Authority key identifier: 65:F7:77:32:1F:14:BA:E9:4C:CE:0E:16:74:46:4E:A4:2E:6A:2E:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6526224a-84e8-40af-a273-87e57f2e0cc0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6526224a-84e8-40af-a273-87e57f2e0cc0/d0d04f5b-3727-3483-9bd2-8a6b7fbb4d05.roa
Signing time:             Mon 16 Sep 2024 13:00:42 +0000
ROA not before:           Mon 16 Sep 2024 13:00:42 +0000
ROA not after:            Sun 15 Dec 2024 14:00:42 +0000
asID:                     8075
IP address blocks:        144.203.152.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6526224a-84e8-40af-a273-87e57f2e0cc0/6526224a-84e8-40af-a273-87e57f2e0cc0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6526224a-84e8-40af-a273-87e57f2e0cc0/6526224a-84e8-40af-a273-87e57f2e0cc0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6526224a-84e8-40af-a273-87e57f2e0cc0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3b:c0:9c:06:49:ba:60:72:ab:19:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6526224a-84e8-40af-a273-87e57f2e0cc0
        Validity
            Not Before: Sep 16 13:00:42 2024 GMT
            Not After : Dec 15 14:00:42 2024 GMT
        Subject: CN=0eee0d0d-81d8-4e3a-afd1-c4f144da01ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8e:82:39:c0:1f:dc:66:0f:2b:cc:15:59:aa:
                    95:79:2b:71:db:87:13:2a:b8:f2:59:80:15:fb:2f:
                    bf:08:62:f6:bb:13:0d:7d:d8:ac:d9:fa:ac:be:a1:
                    8e:7e:78:a7:59:ff:b2:36:15:33:80:e2:7e:b8:d9:
                    86:ae:76:e6:ec:b1:6e:a5:08:06:ae:2f:61:5b:fe:
                    93:63:89:c3:97:24:ff:99:29:a7:4a:29:96:8c:2e:
                    cb:f5:2f:33:91:b5:f6:1e:e0:3f:02:44:ef:3a:f1:
                    3d:dd:c6:c3:bc:0e:9f:48:43:e9:b3:c0:11:df:4b:
                    bd:83:f5:3d:68:0f:38:67:28:55:67:c0:bc:9c:ad:
                    79:8e:06:cb:84:6e:db:41:7b:1d:7a:40:52:0f:37:
                    df:15:ba:11:88:54:56:fb:94:f3:4f:b3:4e:34:04:
                    7a:7c:90:22:17:16:88:90:59:61:d4:03:a4:5c:cb:
                    f9:00:b2:02:d4:61:7a:e1:5a:5a:96:1f:d4:3c:fa:
                    e4:36:b1:41:d6:5a:26:11:84:d5:18:67:e3:a7:a3:
                    fa:af:74:f8:d5:5c:6a:d1:bd:8e:f6:2e:2b:97:15:
                    bd:eb:57:fe:a0:1c:e8:e1:67:8d:7a:1b:21:07:c8:
                    ca:b7:f5:90:d2:45:7b:e4:31:ec:07:c3:4c:bf:f9:
                    0e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:9A:0D:38:D8:26:A9:21:2F:88:3C:C2:11:AF:42:4B:E4:B4:F5:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6526224a-84e8-40af-a273-87e57f2e0cc0/d0d04f5b-3727-3483-9bd2-8a6b7fbb4d05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6526224a-84e8-40af-a273-87e57f2e0cc0/6526224a-84e8-40af-a273-87e57f2e0cc0.crl

            X509v3 Authority Key Identifier:
                keyid:65:F7:77:32:1F:14:BA:E9:4C:CE:0E:16:74:46:4E:A4:2E:6A:2E:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6526224a-84e8-40af-a273-87e57f2e0cc0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.203.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:6e:c4:fb:fa:f5:cb:8e:b7:e1:40:31:da:d3:a5:12:63:a9:
         7f:06:ed:89:b8:b9:e3:78:77:81:d1:5c:ce:3a:f8:d3:33:9f:
         b1:30:e6:c5:4a:44:ac:c5:61:3c:74:78:7f:cf:bb:46:ae:3f:
         02:6a:c1:c4:4a:c2:e8:15:ac:f5:c3:d8:a9:33:30:eb:4f:fe:
         2b:cf:06:44:2d:a9:a2:c6:e7:46:b1:30:9d:d9:df:ef:5a:ec:
         0a:43:94:c8:36:db:a6:bc:5e:50:d8:0c:99:a4:62:8e:1a:35:
         41:a6:b5:34:92:13:d2:cb:ae:6f:0b:46:07:86:cd:3c:1c:01:
         82:d3:08:88:02:08:4a:4d:92:35:ee:ec:39:c8:d0:1e:8c:9b:
         32:d9:06:88:48:9a:19:71:94:cd:11:85:59:04:37:74:19:2d:
         82:2d:75:4f:b7:21:98:94:d6:4d:89:3b:bd:a6:e4:90:79:28:
         06:6a:8c:fa:fc:3d:e4:9f:2e:fe:b8:c7:fd:39:55:75:42:3c:
         f8:3a:47:55:21:9f:92:8c:54:6e:c7:af:62:6c:32:f2:66:f0:
         a0:35:15:55:9a:70:96:d1:f6:24:a2:8d:e0:68:7a:4c:9f:96:
         8e:62:e9:56:15:e1:a1:40:55:83:c5:1f:ee:18:48:9b:db:9f:
         08:c5:da:37
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc7wJwGSbpgcqsZPoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjUyNjIyNGEtODRlOC00MGFmLWEyNzMtODdlNTdmMmUw
Y2MwMB4XDTI0MDkxNjEzMDA0MloXDTI0MTIxNTE0MDA0MlowLzEtMCsGA1UEAxMk
MGVlZTBkMGQtODFkOC00ZTNhLWFmZDEtYzRmMTQ0ZGEwMWVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA046COcAf3GYPK8wVWaqVeStx24cTKrjyWYAV
+y+/CGL2uxMNfdis2fqsvqGOfninWf+yNhUzgOJ+uNmGrnbm7LFupQgGri9hW/6T
Y4nDlyT/mSmnSimWjC7L9S8zkbX2HuA/AkTvOvE93cbDvA6fSEPps8AR30u9g/U9
aA84ZyhVZ8C8nK15jgbLhG7bQXsdekBSDzffFboRiFRW+5TzT7NONAR6fJAiFxaI
kFlh1AOkXMv5ALIC1GF64Vpalh/UPPrkNrFB1lomEYTVGGfjp6P6r3T41Vxq0b2O
9i4rlxW961f+oBzo4WeNehshB8jKt/WQ0kV75DHsB8NMv/kOAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFICaDTjYJqkhL4g8whGvQkvktPVoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82NTI2
MjI0YS04NGU4LTQwYWYtYTI3My04N2U1N2YyZTBjYzAvZDBkMDRmNWItMzcyNy0z
NDgzLTliZDItOGE2YjdmYmI0ZDA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjUyNjIyNGEtODRlOC00MGFmLWEy
NzMtODdlNTdmMmUwY2MwLzY1MjYyMjRhLTg0ZTgtNDBhZi1hMjczLTg3ZTU3ZjJl
MGNjMC5jcmwwHwYDVR0jBBgwFoAUZfd3Mh8UuulMzg4WdEZOpC5qLmgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC82NTI2MjI0YS04NGU4LTQwYWYtYTI3My04N2U1
N2YyZTBjYzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkMuYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAERuxPv69cuOt+FAMdrTpRJjqX8G7Ym4ueN4d4HRXM46+NMzn7Ew5sVK
RKzFYTx0eH/Pu0auPwJqwcRKwugVrPXD2KkzMOtP/ivPBkQtqaLG50axMJ3Z3+9a
7ApDlMg226a8XlDYDJmkYo4aNUGmtTSSE9LLrm8LRgeGzTwcAYLTCIgCCEpNkjXu
7DnI0B6MmzLZBohImhlxlM0RhVkEN3QZLYItdU+3IZiU1k2JO72m5JB5KAZqjPr8
PeSfLv64x/05VXVCPPg6R1Uhn5KMVG7Hr2JsMvJm8KA1FVWacJbR9iSijeBoekyf
lo5i6VYV4aFAVYPFH+4YSJvbnwjF2jc=
-----END CERTIFICATE-----
Generated at Thu Nov 21 17:29:43 2024 by rpki-client on console-fra.rpki-client.org