Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bb11aac2-ed06-3bf1-af98-854fefea4da6.roa
File:                     bb11aac2-ed06-3bf1-af98-854fefea4da6.roa (raw, json)
Hash identifier:          xJ3XGFJxCkk22nhVEFDrIDT5bWF7/sE3puwFGXbATvI=
Subject key identifier:   FD:DB:58:A0:21:79:17:16:A7:78:3D:97:8C:42:48:1E:2A:DF:BC:25
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285847EBBF8A9B63BB75812F7E2D80
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bb11aac2-ed06-3bf1-af98-854fefea4da6.roa
Signing time:             Mon 18 Nov 2024 14:00:40 +0000
ROA not before:           Mon 18 Nov 2024 14:00:40 +0000
ROA not after:            Sun 16 Feb 2025 14:00:40 +0000
asID:                     13335
IP address blocks:        150.48.180.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:eb:bf:8a:9b:63:bb:75:81:2f:7e:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Nov 18 14:00:40 2024 GMT
            Not After : Feb 16 14:00:40 2025 GMT
        Subject: CN=b32f33c6-ad1c-42d0-b9aa-db25550c5dd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d5:93:19:97:23:9c:ee:b4:8b:27:58:80:1f:
                    1d:a6:7c:85:f8:75:61:6d:2e:71:7e:b1:11:f2:27:
                    cc:99:3f:62:74:2f:49:c0:50:aa:af:78:29:ab:69:
                    b8:e2:ab:4f:bb:99:97:fa:a1:3e:ca:55:1e:fb:2b:
                    3a:85:1f:2b:8c:6a:6c:49:98:08:49:5a:00:0b:88:
                    d3:83:6e:20:20:f2:af:e9:6c:36:92:11:4c:6b:68:
                    65:9b:08:b5:db:25:c2:04:0d:88:20:d5:2f:e0:b1:
                    90:84:dc:e1:77:3d:a6:0e:86:a9:90:30:78:23:5f:
                    a3:b9:38:a4:6f:dc:d3:24:8a:d1:b7:26:e5:72:0a:
                    7c:46:89:0f:d4:30:e2:7e:ba:d5:7f:e2:ef:20:76:
                    8a:00:53:44:7c:51:00:88:d0:b2:79:c5:0a:09:80:
                    48:bf:8d:c4:79:ec:ef:e4:97:fd:2e:04:39:c5:49:
                    dd:3f:1f:27:61:de:16:33:1e:ac:ee:4c:9f:84:b1:
                    8e:96:61:cf:7d:d0:8a:dd:6d:10:6d:a1:09:e2:62:
                    08:34:45:6b:11:38:e2:e2:b5:43:70:d1:f6:af:b5:
                    f5:35:00:27:e3:5b:49:b7:a4:ef:f3:c9:45:0b:ad:
                    70:ce:9f:75:38:69:cb:c2:5d:b7:56:00:79:0b:c9:
                    d9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:DB:58:A0:21:79:17:16:A7:78:3D:97:8C:42:48:1E:2A:DF:BC:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bb11aac2-ed06-3bf1-af98-854fefea4da6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.48.180.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:62:fa:eb:2c:bb:a8:34:13:de:7e:12:06:dd:1a:85:52:45:
         29:ab:63:02:14:8a:53:40:d0:71:91:cf:8d:4c:dd:e1:2d:73:
         76:6f:57:82:d1:11:65:ab:5b:9f:1b:23:eb:81:32:ff:ae:2e:
         a5:83:cf:5b:90:0a:23:08:30:d1:d7:b4:75:45:a6:77:1b:8a:
         dc:bf:c3:55:c0:0c:7c:7a:43:a4:c5:6a:78:e5:da:7f:cb:9e:
         d7:c8:07:87:24:16:d4:16:90:63:99:fd:3e:f7:2c:4f:94:35:
         fa:95:11:c9:60:4b:08:29:62:a0:30:0f:a1:4b:1a:c1:4b:e1:
         b0:f0:78:ee:47:a1:84:5d:46:f2:5b:13:04:24:bc:9e:37:d3:
         ea:a4:85:cd:53:a3:4e:09:2b:9d:77:e2:15:ad:e4:e8:9c:43:
         d2:f8:fc:1b:9b:d5:ad:52:cc:2d:dc:d7:96:ea:8d:87:4b:0f:
         e2:a0:84:b5:3d:9e:1c:8f:fe:ab:2e:1b:b2:87:cd:7e:b6:fb:
         41:d1:7f:d7:66:44:66:39:d0:1b:c7:41:e5:e1:2c:51:42:6e:
         d8:2c:f2:b7:c3:91:43:17:d5:c8:ee:aa:7e:60:87:1e:bb:9b:
         22:6d:0b:92:f4:71:76:84:72:c5:7b:b1:47:ea:f5:33:43:b2:
         c9:69:e5:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:36:27 2024 by rpki-client on console-ams.rpki-client.org