Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/e4c585bb-d469-30ca-b358-f447dafebaa1.roa
File:                     e4c585bb-d469-30ca-b358-f447dafebaa1.roa (raw, json)
Hash identifier:          zBvrsJoOHpdy8yzbat9nLUgbcPdakZ/PhUm15phD4MI=
Subject key identifier:   BD:64:D5:C2:41:3A:59:A0:54:8E:20:B3:F8:74:51:50:45:AD:14:49
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F43285847739664FA9B3673026E6C0540
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/e4c585bb-d469-30ca-b358-f447dafebaa1.roa
Signing time:             Sun 06 Oct 2024 13:00:41 +0000
ROA not before:           Sun 06 Oct 2024 13:00:41 +0000
ROA not after:            Sat 04 Jan 2025 14:00:41 +0000
asID:                     15313
IP address blocks:        150.252.194.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:73:96:64:fa:9b:36:73:02:6e:6c:05:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Oct  6 13:00:41 2024 GMT
            Not After : Jan  4 14:00:41 2025 GMT
        Subject: CN=64e8ca3c-431e-455a-8dd5-a1feb762a11b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:dd:45:9e:aa:80:84:c9:91:63:6b:f8:24:47:
                    93:71:d3:47:9a:42:a9:e9:41:65:eb:a6:58:fb:7c:
                    d9:20:96:45:c6:9c:b9:4c:fd:65:88:43:c7:c6:5e:
                    e2:ec:53:69:7c:de:dd:49:6e:bb:9b:5c:b5:6d:67:
                    8d:68:d5:40:a1:e2:89:66:1e:76:6f:db:9c:c2:4f:
                    e1:a6:6d:e0:8a:44:9b:fd:6d:b7:0b:c1:d4:7f:3e:
                    78:af:3a:4c:13:95:2b:5a:31:ee:08:97:ad:8d:09:
                    cd:b7:4f:74:4e:7d:e2:19:0e:65:c3:e6:6d:f6:8d:
                    d3:72:d9:e1:ea:6a:31:c5:a2:de:b3:fe:62:bb:52:
                    4c:8e:4e:a0:0b:3e:c4:a4:dd:a7:f6:3b:56:9f:a8:
                    5a:1f:84:21:1c:ae:aa:ff:9a:49:f5:09:2c:0f:0e:
                    c6:cf:5f:64:2c:46:2e:73:52:64:8f:3b:1a:31:fe:
                    3a:d8:d0:f4:4c:f2:c3:92:75:59:19:04:fa:dd:c4:
                    da:17:17:9a:f9:f8:17:1a:48:eb:ff:d5:dd:af:a6:
                    05:5a:98:44:d9:ec:1a:a2:5a:ed:28:6a:e5:55:1a:
                    e4:f2:58:90:32:b3:62:cb:45:b2:b0:fe:3f:a4:3d:
                    da:67:89:e4:63:2f:92:16:84:ae:77:a5:15:22:74:
                    ca:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:64:D5:C2:41:3A:59:A0:54:8E:20:B3:F8:74:51:50:45:AD:14:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/e4c585bb-d469-30ca-b358-f447dafebaa1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.252.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:dd:f8:74:cb:04:35:ef:60:7f:fe:7b:c7:d4:f7:75:b3:a5:
         57:9d:0e:bf:8e:42:50:9a:32:3a:4b:84:97:e7:c1:24:bc:19:
         c0:0d:b1:de:b1:39:a2:a6:fd:8d:3b:26:1c:b2:fc:37:9f:02:
         19:5c:d8:44:35:91:1a:00:9a:c8:33:e1:fc:20:49:fe:e5:ef:
         29:e2:56:54:38:19:47:e5:16:77:0b:47:43:57:0b:4a:32:01:
         47:ea:c5:71:53:1c:40:80:7a:e4:eb:8e:39:98:92:8c:0b:70:
         74:4c:85:e2:2b:f2:db:e6:5b:6b:0d:be:dd:32:22:5e:33:33:
         d8:9c:d1:d7:18:d1:07:0f:d7:71:96:44:ec:03:ea:10:c0:3e:
         e7:e1:cf:ed:b1:73:8b:22:1c:d9:32:94:d8:e5:c9:a8:33:b4:
         6a:3f:60:0c:ff:8c:12:96:ac:37:7a:31:27:dd:21:52:62:da:
         fc:d3:53:9a:40:b8:d1:56:1d:36:76:09:6c:ea:54:47:26:d7:
         f5:23:19:a3:14:73:81:ed:95:9d:b1:d2:5c:a8:f4:40:57:f8:
         df:9c:d3:e3:e2:97:29:52:b9:96:60:75:71:b2:75:ad:6e:5c:
         9e:aa:1d:83:e6:45:d2:35:2a:e4:83:3a:7f:19:d8:9f:fc:15:
         69:f2:a8:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:26:46 2024 by rpki-client on console-fra.rpki-client.org