Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ce7fbd7a-a0d6-3051-9091-597749aa0f4e.roa
File:                     ce7fbd7a-a0d6-3051-9091-597749aa0f4e.roa (raw, json)
Hash identifier:          a+njM8d//DPF6eTHeYZbxTWMe8XPV/bx+9kzPQjnweM=
Subject key identifier:   24:3D:EB:9A:10:FA:38:24:5E:C3:E4:DE:08:AE:8F:BC:06:A5:61:C1
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F432858493243E300D67B60542C494EC0
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ce7fbd7a-a0d6-3051-9091-597749aa0f4e.roa
Signing time:             Sat 15 Mar 2025 13:00:52 +0000
ROA not before:           Sat 15 Mar 2025 13:00:52 +0000
ROA not after:            Fri 13 Jun 2025 13:00:52 +0000
asID:                     15313
IP address blocks:        150.252.192.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Apr 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:32:43:e3:00:d6:7b:60:54:2c:49:4e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Mar 15 13:00:52 2025 GMT
            Not After : Jun 13 13:00:52 2025 GMT
        Subject: CN=db815540-3c2d-4754-abea-3f8aac9abe8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:93:f9:88:a0:f8:4b:e4:43:9a:8c:dc:ad:6a:
                    63:69:d7:5b:44:bd:df:73:27:4a:21:af:b8:cd:3b:
                    81:94:3b:f7:93:f3:61:df:19:36:c0:24:3e:e2:66:
                    b3:f7:e4:8d:d6:e3:d4:4e:6c:4b:23:e9:46:79:49:
                    68:2f:bd:bd:c4:5d:5a:d5:4e:3a:0a:c0:3b:ed:cf:
                    af:21:c7:e5:36:48:96:4e:fa:b7:92:04:37:24:0d:
                    19:a8:ec:9c:c2:21:7f:de:73:36:8f:16:b7:76:22:
                    96:1d:18:8b:6d:5a:24:b1:aa:51:56:a1:3b:e2:49:
                    48:4a:85:44:64:28:a9:60:8a:e2:b4:a1:20:34:ff:
                    8b:98:79:a3:56:06:8d:37:c3:28:6d:a9:3c:12:7e:
                    56:df:22:be:cb:c1:32:aa:0a:18:de:4a:5f:11:de:
                    12:35:0c:0b:af:83:50:6b:c4:81:14:39:c0:e6:d6:
                    56:fb:da:d6:06:86:4d:8e:9f:3c:44:54:4f:64:6c:
                    65:7e:e4:bb:a8:cb:4f:d2:12:6b:8b:c0:7d:32:68:
                    52:3b:49:8e:8c:8f:2c:bf:5e:81:77:c2:88:9e:44:
                    a9:4e:e6:6e:72:35:fd:cf:f3:83:8b:8c:f7:c6:a1:
                    7b:92:55:1a:b9:b7:05:8f:93:9b:3b:53:2d:24:80:
                    1a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:3D:EB:9A:10:FA:38:24:5E:C3:E4:DE:08:AE:8F:BC:06:A5:61:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ce7fbd7a-a0d6-3051-9091-597749aa0f4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.252.192.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:56:46:f9:a6:48:7b:b6:9f:07:b9:cf:8e:d7:11:8c:e6:d7:
         c1:8a:5f:f3:16:f4:d5:0b:0a:a1:8b:da:1d:07:0f:a7:8e:36:
         28:d1:63:f4:6d:4d:2d:2a:99:40:bd:7d:6e:28:db:6e:4b:39:
         75:86:cf:ec:c2:49:d8:3a:eb:07:ea:cb:92:e7:46:59:a7:ca:
         b9:93:26:21:f8:27:a9:b9:73:e4:35:8c:83:ff:26:60:ee:94:
         87:1c:d0:56:4f:5d:75:d6:ff:5f:ff:38:fa:95:d2:0b:9c:08:
         54:c4:95:12:70:19:ce:53:fc:e6:be:f1:01:38:c6:28:67:52:
         01:9e:e3:6c:ff:b8:00:ef:3f:9d:dc:e1:86:27:f9:d7:71:11:
         98:36:40:30:f4:3c:ce:a0:e6:e9:ba:67:57:fb:2a:2b:dc:f8:
         50:af:8f:02:a4:47:fd:3b:a6:dd:e2:e0:98:30:51:d6:56:a5:
         2d:3b:07:4b:40:40:0f:59:46:48:b8:ed:cc:74:28:31:28:5a:
         3f:b9:23:b0:f1:92:49:b0:33:c7:77:e2:24:82:1b:e1:c9:84:
         e6:ce:3e:3f:e1:45:b4:92:9d:43:59:ce:69:a6:88:8d:57:a2:
         31:b7:2d:e1:78:52:70:b3:20:3f:6b:c0:d2:9f:d4:07:f4:83:
         93:3d:ba:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:37:21 2025 by rpki-client