Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/3fa74bf9-08ac-3d1e-9a93-3e6a2e7c62d7.roa
File:                     3fa74bf9-08ac-3d1e-9a93-3e6a2e7c62d7.roa (raw, json)
Hash identifier:          f55oVe3wksK70LTGZp9NKDjr+88zZDCtqidkb0is0K4=
Subject key identifier:   19:DD:17:3B:54:B5:EE:99:C4:B2:4E:0F:D2:D0:CE:D1:49:96:84:37
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F43285845B3835D127328FC7176FF14C0
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/3fa74bf9-08ac-3d1e-9a93-3e6a2e7c62d7.roa
Signing time:             Mon 29 Apr 2024 01:00:25 +0000
ROA not before:           Mon 29 Apr 2024 01:00:25 +0000
ROA not after:            Sun 28 Jul 2024 01:00:25 +0000
asID:                     26744
IP address blocks:        150.252.200.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b3:83:5d:12:73:28:fc:71:76:ff:14:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Apr 29 01:00:25 2024 GMT
            Not After : Jul 28 01:00:25 2024 GMT
        Subject: CN=893fbeea-f310-4018-95e5-aab36f7651ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a8:ef:33:b0:85:41:ec:07:3c:01:b8:cc:66:
                    1b:5a:e6:d8:de:81:bf:b4:ff:53:01:76:aa:50:b3:
                    a7:1c:8c:67:9b:6d:94:6a:1e:a2:c1:f9:1e:65:5f:
                    e5:b8:1a:25:c6:55:bd:a2:4f:0c:57:55:77:fe:a7:
                    b3:b8:0b:c2:f5:d0:93:f4:38:3b:d2:ee:e9:39:2c:
                    a9:30:ee:f9:74:ce:0d:6a:b2:4c:2e:8b:fc:0a:14:
                    98:33:d0:4d:95:ce:2f:0b:cf:1f:57:95:b6:88:9f:
                    cf:2a:34:a1:ae:75:11:80:79:74:57:4c:ac:87:5d:
                    8f:55:8d:6c:4a:29:f4:03:57:54:b7:6a:e4:8d:81:
                    f1:07:18:68:96:b6:4b:c1:1c:78:c5:fb:d2:1e:9b:
                    e7:c0:84:b7:4a:8a:cb:af:77:79:b0:0e:15:0a:10:
                    2f:91:36:4a:69:03:56:43:cb:17:03:47:4b:2c:4b:
                    8a:93:78:ed:18:70:1a:5f:23:b7:a2:40:bd:04:cb:
                    18:39:38:bf:ce:33:77:35:26:0e:9c:1d:d3:e5:c3:
                    38:2a:94:bb:2b:e5:fd:e1:7c:c1:26:51:86:50:3f:
                    51:83:91:51:15:1b:c5:9a:60:32:a0:6d:d2:14:4c:
                    b2:ea:f4:a5:bf:ba:8d:05:2d:85:af:7b:9b:ee:7c:
                    91:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:DD:17:3B:54:B5:EE:99:C4:B2:4E:0F:D2:D0:CE:D1:49:96:84:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/3fa74bf9-08ac-3d1e-9a93-3e6a2e7c62d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.252.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:31:b1:69:c5:df:9c:75:be:c2:a7:1f:e0:f4:97:21:cc:dd:
         dc:ae:8a:ef:37:ee:89:98:bc:7f:34:bd:bb:3d:6e:d9:c2:e6:
         b2:13:8a:a6:43:f2:24:73:96:5f:90:92:f2:9e:e9:11:05:af:
         99:98:95:bd:60:cf:b1:1d:3a:f1:17:6a:05:b0:93:d0:f6:f8:
         c3:d3:72:fa:fd:6f:4e:0d:67:02:9e:87:a8:e2:ac:62:10:91:
         ec:ff:aa:33:75:76:69:49:1c:f3:f5:1e:07:db:7f:f8:4a:5c:
         0d:25:38:82:e9:50:96:4b:a5:7c:2a:e0:0a:70:d4:78:57:dd:
         51:b7:78:90:e6:fd:08:42:81:3a:e9:1d:bf:ac:85:87:67:b8:
         2b:0e:3a:7a:89:68:bf:49:e6:39:6e:ee:5f:92:d0:c4:d7:53:
         26:dc:ee:1a:24:1c:8b:39:59:03:e8:5b:5e:f6:25:93:fd:32:
         93:1f:8d:52:7a:86:51:06:b4:03:b3:50:ef:6b:fa:1f:36:bb:
         c6:00:2f:fb:2a:18:9d:ae:93:d8:00:17:f4:4a:cc:95:79:0d:
         4e:0f:20:47:9a:ca:10:3a:2c:03:09:df:a1:95:ed:75:c4:3a:
         93:10:3e:41:95:c3:bc:59:d3:6e:5b:5e:40:ac:f0:84:e3:3f:
         f5:3f:25:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:35:14 2024 by rpki-client on console-ams.rpki-client.org