Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a6af4f65-e6dd-3390-ab48-8a71e2c16f17.roa
File:                     a6af4f65-e6dd-3390-ab48-8a71e2c16f17.roa (raw, json)
Hash identifier:          woXYiLykl1Dg4CoflA5OYBoBHmLhx7eqnlvfzirrU/Y=
Subject key identifier:   1E:2A:E8:78:F0:7D:1E:B7:45:D5:2A:43:47:43:B8:A4:8F:66:DD:AF
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285847EBBF8A087E91DF2AE38B0180
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a6af4f65-e6dd-3390-ab48-8a71e2c16f17.roa
Signing time:             Mon 18 Nov 2024 14:00:40 +0000
ROA not before:           Mon 18 Nov 2024 14:00:40 +0000
ROA not after:            Sun 16 Feb 2025 14:00:40 +0000
asID:                     13335
IP address blocks:        150.48.157.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:eb:bf:8a:08:7e:91:df:2a:e3:8b:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Nov 18 14:00:40 2024 GMT
            Not After : Feb 16 14:00:40 2025 GMT
        Subject: CN=13c98af6-7c6f-44cd-934d-6dd1b35225ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:63:8c:04:cd:63:0c:24:bf:dd:6c:5a:80:ec:
                    f3:93:07:46:e8:40:1c:38:0d:b5:ae:fb:2e:ca:91:
                    e2:56:9a:ca:74:5f:47:4e:27:5f:67:c6:9c:45:9f:
                    46:27:70:75:a3:02:a6:6e:4d:71:71:ce:77:8b:17:
                    57:52:35:4d:af:85:f4:f8:27:3e:4d:0b:03:c5:69:
                    69:ce:df:47:a2:e0:84:a2:74:e8:df:1b:bf:3b:2e:
                    be:7b:04:54:d6:69:14:7b:c3:0e:2f:51:58:d4:c8:
                    ca:bf:9c:5c:b9:58:68:00:51:45:f9:72:95:17:46:
                    a6:99:76:de:3d:02:db:20:8c:6f:bf:6d:cb:2c:db:
                    20:4d:ef:7b:89:4c:c2:17:c6:0a:13:2e:fd:19:f8:
                    8d:e8:fa:b7:cb:ab:9e:fd:75:59:3d:3e:a2:5d:d8:
                    4d:b0:59:64:39:ff:a6:4c:38:38:94:45:f9:a9:f1:
                    9e:a2:76:17:ac:e6:a7:17:3c:f8:13:ed:72:77:48:
                    85:db:79:f4:82:29:ea:0f:91:09:15:fd:1b:3d:e0:
                    e6:a5:b2:fd:68:bb:5c:f2:bd:63:08:36:1c:8c:b3:
                    c7:cc:55:5a:b2:70:df:6b:aa:cc:73:e7:70:81:68:
                    b0:9d:60:f1:d0:21:eb:2c:8e:35:1c:db:67:f6:0b:
                    76:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:2A:E8:78:F0:7D:1E:B7:45:D5:2A:43:47:43:B8:A4:8F:66:DD:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a6af4f65-e6dd-3390-ab48-8a71e2c16f17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.48.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:46:b2:8f:33:77:1f:72:e3:c3:7e:d5:f3:50:93:4a:87:fe:
         e3:55:6a:d5:34:28:cd:75:cf:63:57:9b:c2:54:07:e5:9d:a3:
         22:ae:fa:1c:42:a5:f6:9e:17:a0:d1:af:5a:7d:6a:b5:55:7e:
         5d:fc:fc:34:30:1e:42:71:fa:5f:f2:96:7b:ba:ad:98:92:8e:
         04:06:01:d5:70:15:0c:08:42:b3:61:77:17:3f:13:c0:e1:d4:
         b1:12:cb:db:4b:55:3a:f4:17:9c:5d:16:fe:cf:c9:9c:aa:60:
         ee:24:52:c2:a7:95:29:65:79:cd:18:30:fa:8e:47:bc:90:c0:
         4e:73:86:e4:23:97:59:26:ae:12:4c:42:33:3a:31:ff:6e:ea:
         d6:61:55:9d:72:4f:1a:0e:4e:7d:b9:14:5e:c7:29:31:ae:a6:
         91:84:b6:d9:4e:0c:8f:77:48:0c:0b:d9:a7:1f:cd:f5:b0:94:
         14:22:95:b1:b2:4c:c4:ac:ca:da:5d:09:0b:8b:0b:55:60:12:
         7e:dd:97:d4:37:23:85:b4:68:f9:2c:5d:72:2c:9f:56:4c:5e:
         ea:a1:39:0e:28:c9:f2:4d:33:e3:d8:55:89:cc:1d:a7:0f:89:
         01:8a:07:da:ab:fe:45:1f:35:97:b3:f3:d6:e6:1b:84:70:3a:
         ee:9d:a9:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:35:49 2024 by rpki-client on console-fra.rpki-client.org