Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/3d15cd54-a638-3fbb-9d72-ed29a2cc764e.roa
File:                     3d15cd54-a638-3fbb-9d72-ed29a2cc764e.roa (raw, json)
Hash identifier:          z3lqWZluYVPjYyp5TH7M+qaXhpWoA3o3DQHKIseXEbg=
Subject key identifier:   07:3E:C3:B5:FA:78:9E:03:C9:1E:73:EF:67:D5:A0:85:30:60:EC:2C
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F43285845B3835C46A0F3328510AAC880
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/3d15cd54-a638-3fbb-9d72-ed29a2cc764e.roa
Signing time:             Mon 29 Apr 2024 01:00:25 +0000
ROA not before:           Mon 29 Apr 2024 01:00:25 +0000
ROA not after:            Sun 28 Jul 2024 01:00:25 +0000
asID:                     15313
IP address blocks:        150.252.196.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b3:83:5c:46:a0:f3:32:85:10:aa:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Apr 29 01:00:25 2024 GMT
            Not After : Jul 28 01:00:25 2024 GMT
        Subject: CN=f3faee06-e469-4073-83cb-2bf0ce4c6fe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c7:1c:47:4a:d2:a8:fc:94:2e:f5:b4:da:dc:
                    28:8c:70:b9:6b:7d:d9:4b:e9:a6:14:0b:7b:a8:15:
                    fd:b3:0d:42:62:3b:dd:13:90:96:03:c3:e7:fd:12:
                    ba:d6:f0:6d:c2:8a:2a:12:14:c3:69:af:b4:c4:e8:
                    ea:60:bf:b5:47:1e:42:b8:7c:d3:23:90:c8:33:c3:
                    24:50:e9:16:3b:d8:de:a7:a4:7f:f7:7c:87:8f:5f:
                    75:6e:a4:05:b3:f7:77:5a:76:55:08:02:e1:be:df:
                    44:b5:71:6d:bb:8d:28:7d:49:6f:15:f5:92:d6:71:
                    88:73:c6:f9:64:47:cb:1f:68:81:11:af:3f:34:f3:
                    2c:87:29:e7:f7:c5:f7:7e:d6:be:c3:a9:c8:86:9b:
                    48:f8:9c:1f:8c:c2:ea:da:25:7c:b7:b9:19:9a:8b:
                    d7:3b:a3:0f:36:c4:1b:87:4d:89:44:12:b7:92:9d:
                    68:f5:cc:88:84:04:0a:c8:4a:4e:5a:00:01:a3:44:
                    99:39:73:c8:10:5d:84:45:1a:d1:75:bc:89:d2:71:
                    7f:47:f5:08:96:88:05:04:55:ca:ca:44:08:6c:59:
                    bb:77:0d:31:1f:b8:8a:85:3a:a6:b1:c5:77:0a:b9:
                    3a:ca:56:e4:83:c0:7a:bf:34:bd:59:aa:cb:21:18:
                    73:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:3E:C3:B5:FA:78:9E:03:C9:1E:73:EF:67:D5:A0:85:30:60:EC:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/3d15cd54-a638-3fbb-9d72-ed29a2cc764e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.252.196.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:20:51:06:06:46:bc:92:54:cc:30:8f:64:70:b0:0f:5e:3b:
         91:3b:90:3d:c0:31:d5:19:ad:18:70:5a:6f:0b:70:20:5c:e1:
         c5:2c:fe:14:f1:d8:6c:4e:23:41:4d:85:ac:79:30:a6:b2:ae:
         a0:6d:1f:b4:8a:1d:48:ce:b1:b0:51:7a:f4:6a:fb:b7:76:c2:
         69:4d:a7:51:2e:e3:68:a4:d1:4d:06:72:6c:a3:0c:1a:ed:ac:
         60:bb:00:a2:43:ed:13:10:7f:dd:cf:a5:5a:9f:a4:7a:56:d0:
         cb:69:8d:54:7b:83:60:13:61:8d:a0:23:b8:ba:87:72:22:91:
         a7:0f:7c:a6:94:28:c5:74:76:b7:ad:2c:3b:98:91:4a:b5:ae:
         bf:c6:f1:6c:9a:8a:e7:4f:00:65:8a:91:0e:65:8f:04:68:5a:
         5f:ea:39:53:67:b7:08:41:c9:72:8c:93:e7:f9:8d:13:53:eb:
         78:66:46:8f:67:e2:ed:c5:ad:89:bb:4c:b4:f6:0c:10:d2:ad:
         fe:80:08:31:9e:ba:65:56:08:96:f8:bb:c6:8a:41:4a:29:69:
         d0:1c:0d:e4:3c:e1:fe:2e:67:78:cb:9e:19:28:50:4d:2f:03:
         f8:33:ad:f8:96:1a:d9:90:a8:66:66:20:fc:83:85:fd:5e:a4:
         95:9a:f9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:35:14 2024 by rpki-client on console-ams.rpki-client.org