Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/8acbc2c9-7125-34b8-a346-13cd157a460f.roa
File:                     8acbc2c9-7125-34b8-a346-13cd157a460f.roa (raw, json)
Hash identifier:          kL9C3yNzPm31P8xZ4Llx5OFkUh5xme8bzcgdpLRmOnM=
Subject key identifier:   5A:57:45:25:6E:B4:6E:B0:5F:5B:58:97:B1:A8:60:CF:B3:5D:F8:41
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F43285845B3835D4935CDC177E2D5BE80
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/8acbc2c9-7125-34b8-a346-13cd157a460f.roa
Signing time:             Mon 29 Apr 2024 01:00:25 +0000
ROA not before:           Mon 29 Apr 2024 01:00:25 +0000
ROA not after:            Sun 28 Jul 2024 01:00:25 +0000
asID:                     26744
IP address blocks:        150.252.201.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b3:83:5d:49:35:cd:c1:77:e2:d5:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Apr 29 01:00:25 2024 GMT
            Not After : Jul 28 01:00:25 2024 GMT
        Subject: CN=2977754c-5c73-405b-b3c5-2ade431f3f57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:20:67:d7:3b:97:0f:6e:c4:34:2b:43:c0:c0:
                    2b:e6:5b:ff:15:08:f5:c3:88:73:6c:79:8d:ab:d6:
                    6d:bd:7d:fc:ff:59:e5:34:89:87:c2:07:7c:c3:23:
                    01:59:37:49:b5:79:64:24:01:44:20:d1:9e:fe:34:
                    26:15:4e:8c:97:fe:41:5a:bd:8f:63:1a:6b:ae:45:
                    5c:10:01:69:af:ac:17:7a:e3:ed:8d:18:42:b8:50:
                    fe:dd:62:4b:88:b9:32:30:ec:22:4e:82:be:00:dd:
                    f1:8a:01:e7:5d:25:e2:de:e5:e1:b6:f6:8b:d3:12:
                    a4:f2:0c:55:e6:eb:4a:95:94:c7:ec:c8:52:51:97:
                    b7:8a:83:4e:3e:4a:1e:3a:49:71:55:e3:91:bf:27:
                    43:f1:8f:15:4d:9d:a7:32:f5:bd:b3:2f:4a:d0:a3:
                    2a:29:e4:20:e3:f3:6b:5b:ea:df:f9:e6:f9:f8:74:
                    8e:f1:22:00:69:f8:7d:9e:85:98:90:1a:a3:23:bf:
                    d1:d7:d3:58:0a:e0:21:4d:d6:fa:37:5d:43:f6:a4:
                    12:1d:5a:77:3a:4a:80:5b:ac:3f:ff:d9:29:31:08:
                    b8:e2:06:9d:14:74:08:0b:48:4e:09:ba:bf:75:ac:
                    62:46:11:92:eb:2b:c8:f6:ea:25:bc:62:e5:f4:32:
                    d6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:57:45:25:6E:B4:6E:B0:5F:5B:58:97:B1:A8:60:CF:B3:5D:F8:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/8acbc2c9-7125-34b8-a346-13cd157a460f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.252.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:b5:79:3f:8b:9e:4f:b7:ae:5b:90:4a:a0:aa:60:18:60:6e:
         45:dd:13:4a:ea:bb:e9:f9:81:c7:45:09:8d:18:1a:54:cd:4d:
         d5:9a:b6:9c:ec:09:1f:b9:b1:a9:81:0f:32:0e:9e:d2:c0:a4:
         a6:bf:97:3c:dc:74:4d:66:70:85:19:ab:c1:21:2d:f5:2e:68:
         1b:78:3d:e4:09:a5:d8:dd:5f:da:c9:9a:dc:59:43:4a:2e:23:
         3c:e0:6a:8d:9f:37:14:a5:0c:0a:6c:a9:68:a9:61:ee:0d:2b:
         31:e4:8e:ce:bc:93:57:a9:f6:7b:a5:ac:07:95:e9:7d:0b:83:
         45:a6:6f:f4:7a:1c:ea:34:1f:cd:61:8e:e1:64:e4:01:20:2f:
         bb:76:81:c8:27:c7:0c:00:99:0a:c6:3a:ae:90:c9:11:d3:45:
         04:00:67:2c:f3:04:94:07:26:0c:5a:fe:fc:26:a0:a6:94:28:
         81:6b:fc:47:83:6d:88:04:fd:e1:d1:69:02:a1:ae:dc:ee:0f:
         50:2b:f8:53:63:9e:9d:dc:66:f9:70:ca:ed:a3:17:15:10:26:
         23:f9:91:a2:be:8f:3c:f0:41:33:da:42:56:76:7e:f3:60:f4:
         30:cc:29:7a:10:38:a7:3e:03:67:5f:fd:b7:87:a3:b1:2c:38:
         79:3c:68:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 15:19:45 2024 by rpki-client on console-fra.rpki-client.org