Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/4f833dec-49e6-3832-9493-21b1a1371d61.roa
File:                     4f833dec-49e6-3832-9493-21b1a1371d61.roa (raw, json)
Hash identifier:          trL3hVtbONYwRQEQDtPw0VGJ0vKs7GsEZGwQPY/czZ4=
Subject key identifier:   B9:0D:4D:84:CF:94:AF:17:58:42:34:EE:D8:C5:A6:66:48:94:F8:1B
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F43285845B3835DB401E230B64BE77100
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/4f833dec-49e6-3832-9493-21b1a1371d61.roa
Signing time:             Mon 29 Apr 2024 01:00:25 +0000
ROA not before:           Mon 29 Apr 2024 01:00:25 +0000
ROA not after:            Sun 28 Jul 2024 01:00:25 +0000
asID:                     26744
IP address blocks:        150.252.204.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b3:83:5d:b4:01:e2:30:b6:4b:e7:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Apr 29 01:00:25 2024 GMT
            Not After : Jul 28 01:00:25 2024 GMT
        Subject: CN=78d383ce-4a9c-4f3d-af27-0eb712193e83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1b:2a:1f:aa:ae:af:a2:3e:52:7c:9a:97:b5:
                    8c:85:89:0a:25:58:6a:4f:c9:70:a4:e0:5f:e3:2b:
                    49:84:34:18:81:2b:14:92:d1:01:11:46:11:51:b2:
                    23:5b:cb:9f:ad:5b:91:62:1d:c7:bf:e5:b4:8a:f4:
                    bf:66:0e:8d:60:41:d9:02:01:fc:2e:21:a2:3e:b0:
                    c6:55:9d:0d:68:8c:69:35:0d:07:91:6a:1f:6a:ea:
                    7a:42:cc:5d:90:d9:9a:7c:ba:dd:c5:a4:18:ed:ee:
                    83:a5:db:d9:c5:e1:dd:33:65:80:23:25:4d:94:46:
                    29:a2:d2:d0:2d:5f:08:4d:0a:40:8b:8d:e3:85:0f:
                    53:95:90:c5:4d:0d:6e:96:89:3c:5f:a6:8f:bb:7e:
                    b9:54:82:85:3d:92:b7:43:9f:9d:9e:db:7d:58:bb:
                    c7:50:16:42:3b:dd:02:af:c6:7b:83:f3:11:cb:3f:
                    d7:f6:56:99:ff:b5:06:74:82:53:f9:32:36:63:e7:
                    c5:84:27:d9:92:8a:c2:49:97:24:03:ff:90:8c:0c:
                    c8:90:6e:9e:72:e5:e2:6b:97:a6:ab:39:e0:5b:56:
                    e3:05:eb:6f:67:d8:0c:b9:05:68:50:12:65:16:a4:
                    9e:dd:a3:9d:b9:d4:94:eb:74:d9:87:e4:72:73:4b:
                    94:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:0D:4D:84:CF:94:AF:17:58:42:34:EE:D8:C5:A6:66:48:94:F8:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/4f833dec-49e6-3832-9493-21b1a1371d61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.252.204.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:f8:f7:f8:3c:03:e9:70:e4:a2:cd:a0:e7:c0:f5:1d:88:2c:
         0e:8f:65:da:58:02:20:1e:9b:a8:27:e1:e1:0b:44:dc:21:13:
         d8:1b:12:8c:7c:3c:79:01:8b:4c:55:81:c6:d4:3c:26:d5:56:
         27:1f:9d:c3:e6:a3:09:6c:46:b6:c3:48:8c:5a:74:56:be:ff:
         f2:19:72:58:7f:96:46:33:f7:cf:75:ee:1d:00:9b:8c:94:7b:
         f6:63:c8:1e:cd:a4:61:b2:e7:19:c4:16:d8:25:42:53:f0:cf:
         42:2c:fb:fd:68:9a:d5:35:32:5b:e1:af:92:e0:20:1a:2a:b0:
         ff:4e:e4:4f:e1:5b:bf:e5:5e:a6:0a:08:9b:1a:41:3a:6c:f4:
         cf:44:70:af:f9:0a:32:ae:c5:8b:27:d3:73:00:71:af:d4:bd:
         76:c9:05:24:e1:fe:42:71:b9:a5:1d:dc:57:e7:50:54:90:01:
         6f:a9:c7:ee:14:44:d7:9d:e3:d0:48:55:7b:e9:07:46:a5:80:
         0d:84:a6:d3:f0:4b:10:93:40:41:21:92:07:4f:ba:d2:11:97:
         7a:1b:e0:ad:fe:02:55:95:15:b6:52:54:11:c7:d3:ee:38:8e:
         52:08:37:c4:a8:f0:24:c1:ae:84:8c:b8:2a:4e:be:1e:0d:f0:
         0e:12:32:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:35:14 2024 by rpki-client on console-ams.rpki-client.org