Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/5a6472b9-0cf8-3c19-9474-58f11b455a21.roa
File:                     5a6472b9-0cf8-3c19-9474-58f11b455a21.roa (raw, json)
Hash identifier:          qxssLwLr8ZktMFmtrI9Yy6hjzYgsd76Ai/O2EKB+2PU=
Subject key identifier:   F7:95:D2:96:14:75:18:B6:0D:F8:7E:DA:E1:3A:E2:13:96:48:3E:8A
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F4328584773966643A8E0443E64545818
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/5a6472b9-0cf8-3c19-9474-58f11b455a21.roa
Signing time:             Sun 06 Oct 2024 13:00:41 +0000
ROA not before:           Sun 06 Oct 2024 13:00:41 +0000
ROA not after:            Sat 04 Jan 2025 14:00:41 +0000
asID:                     26744
IP address blocks:        150.252.204.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:73:96:66:43:a8:e0:44:3e:64:54:58:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Oct  6 13:00:41 2024 GMT
            Not After : Jan  4 14:00:41 2025 GMT
        Subject: CN=3f1ce88e-82b5-4d41-963a-5d65316d2c31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f1:5d:9d:f9:e1:8f:d0:ee:c9:1f:b0:66:e8:
                    7d:58:db:bd:58:05:81:e0:af:66:4f:fe:02:db:9f:
                    07:9d:a3:be:d9:3b:b6:b9:d7:94:64:a4:d3:d8:e8:
                    64:2e:98:b3:28:08:7a:e6:eb:66:8a:df:c0:ba:27:
                    22:b2:83:da:88:2e:46:51:70:82:27:a4:0c:5f:b3:
                    f7:32:cf:7a:03:1b:bd:de:f3:21:0b:08:62:52:3c:
                    f7:4b:85:31:66:53:ca:a1:6b:05:cd:db:cf:c4:35:
                    7b:86:f0:c4:21:86:a3:9c:7a:09:fb:f1:8b:f4:20:
                    5c:72:88:70:d9:e1:a0:92:c2:2b:64:b0:80:47:f9:
                    67:94:a4:f1:c7:d4:e7:27:28:50:ed:e2:fc:01:e3:
                    c0:11:1e:c4:fe:a8:10:3c:0f:f5:25:df:4f:7e:a1:
                    48:f1:2a:15:00:dd:02:4e:b2:97:b9:93:39:50:a7:
                    3e:b2:05:c4:62:19:33:1e:83:d9:8e:58:06:2e:cf:
                    a8:6f:75:69:97:9b:72:82:0e:ee:8b:29:6e:e1:da:
                    04:91:f9:62:30:7d:e7:9e:7f:1b:8e:80:e3:c3:0d:
                    17:b2:23:9d:6d:29:8f:dd:e8:83:1f:b8:a4:91:cd:
                    04:0f:bf:10:d8:b4:6f:c2:8b:ac:71:ef:96:07:c8:
                    f4:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:95:D2:96:14:75:18:B6:0D:F8:7E:DA:E1:3A:E2:13:96:48:3E:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/5a6472b9-0cf8-3c19-9474-58f11b455a21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.252.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:79:00:5e:92:ad:75:c8:cc:57:56:c3:a4:c5:f9:4a:5d:c4:
         b4:c3:8b:53:1c:8c:ac:f2:a2:be:07:20:de:10:b1:b8:11:1e:
         b0:c4:86:5c:e6:5f:16:f0:68:e2:17:e3:c6:9b:84:b6:0d:33:
         9a:fa:8e:43:20:09:4d:21:18:30:af:aa:58:a8:ad:a8:02:58:
         69:a3:a8:4e:05:57:af:3f:f4:ac:d1:b9:4f:9d:d2:6f:d5:66:
         28:24:77:0c:9f:42:f7:92:24:ed:42:a2:f9:c6:c2:b9:c0:fc:
         20:cf:0c:45:37:21:2a:75:5b:ff:70:6f:78:98:1b:d6:36:69:
         7c:48:71:c7:e5:ef:24:fd:c5:2e:62:2e:f4:35:6a:79:6e:d6:
         58:7f:c4:ad:d3:cd:f8:de:60:b6:7f:f3:d4:6b:e6:e8:a1:5d:
         7f:5c:06:12:09:60:2c:a1:f6:e4:26:05:62:b1:5d:6f:1e:4c:
         86:f8:19:b4:ab:55:0b:f0:b2:79:72:12:05:d9:50:4b:57:a2:
         ad:8d:84:37:82:16:f2:2c:0a:3a:ca:3d:eb:f3:9c:56:7c:a1:
         1d:9b:1a:63:11:1e:30:30:03:1f:72:92:5e:60:4f:36:e0:f3:
         51:b3:91:4d:71:76:f2:cb:e2:29:40:13:86:97:e6:8b:ae:41:
         c1:49:20:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:22:07 2024 by rpki-client on console-ams.rpki-client.org