Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/f34e6014-618b-3fd4-a619-df5015a41c90.roa
File:                     f34e6014-618b-3fd4-a619-df5015a41c90.roa (raw, json)
Hash identifier:          5vGrlavSLKiZmMIY4MMJdJq3+Pfbm14fwa6OeWpMlrE=
Subject key identifier:   96:37:36:EC:30:CB:08:FD:8B:98:5E:96:3F:CF:EC:92:7E:F6:B5:1C
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F43285848530AF402017F110C564A8EE0
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/f34e6014-618b-3fd4-a619-df5015a41c90.roa
Signing time:             Wed 25 Dec 2024 14:00:52 +0000
ROA not before:           Wed 25 Dec 2024 14:00:52 +0000
ROA not after:            Tue 25 Mar 2025 13:00:52 +0000
asID:                     26744
IP address blocks:        150.252.202.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:53:0a:f4:02:01:7f:11:0c:56:4a:8e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Dec 25 14:00:52 2024 GMT
            Not After : Mar 25 13:00:52 2025 GMT
        Subject: CN=cf9f61f0-8d1d-44ae-9af8-2de884167788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a1:b1:8c:ab:6c:da:84:79:b5:66:5e:16:5c:
                    95:a8:fe:c5:ec:86:4e:79:10:ec:09:91:b4:f4:72:
                    78:66:d4:8f:78:5b:77:e1:36:54:3c:0f:55:b3:dd:
                    cf:f1:1e:0a:08:45:d2:38:c6:47:c8:44:0a:33:c8:
                    1b:d9:7d:98:f3:61:f5:09:56:62:cd:07:75:77:68:
                    26:13:38:be:37:2a:ad:af:8c:da:ac:05:63:ba:67:
                    ea:38:94:4b:72:6c:03:bc:f4:a5:0f:be:ef:59:11:
                    1e:ba:88:7b:eb:21:90:9d:04:d4:ac:d6:d9:51:69:
                    ec:f5:68:d5:ca:df:e3:fd:84:ec:31:81:74:b8:50:
                    3a:20:8f:b5:7c:17:b6:e2:c3:50:00:0f:7e:1c:06:
                    d2:ec:42:03:2b:3d:5f:36:c4:82:53:cb:e9:ec:58:
                    fb:2c:fa:b2:ca:7d:c9:8a:eb:08:a9:8d:64:6c:2f:
                    6f:52:51:47:61:3b:da:8f:a8:84:74:e3:5a:9f:3a:
                    1f:9c:2b:56:ba:08:b9:7f:04:7b:c7:9a:db:87:16:
                    b1:fc:a8:c8:4f:b6:9d:b8:4b:0b:ab:3c:18:7f:11:
                    21:5f:bb:70:6b:82:03:04:a6:20:e8:e0:1c:9f:1f:
                    08:85:78:f4:d9:2a:33:2b:d1:98:d2:05:4a:c7:4b:
                    45:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:37:36:EC:30:CB:08:FD:8B:98:5E:96:3F:CF:EC:92:7E:F6:B5:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/f34e6014-618b-3fd4-a619-df5015a41c90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.252.202.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:62:5f:b2:b8:67:63:87:cc:83:a6:91:98:fd:fb:7e:18:6a:
         98:9e:96:b6:42:bf:b3:1a:bf:53:35:22:11:8c:49:68:39:4c:
         21:f4:fb:0c:cc:a0:b2:df:69:6d:3a:2f:c4:03:24:f0:1c:c7:
         29:c1:14:91:21:08:d4:0a:47:a9:e2:44:fb:d8:5f:02:13:10:
         45:4d:a0:53:70:b8:4a:47:a8:95:74:e4:75:69:b1:fd:ee:ab:
         18:a7:d7:1b:af:a5:6c:67:50:ed:8c:5e:24:79:90:dd:9e:3c:
         b9:db:04:a9:ae:8f:be:b3:15:d2:35:f1:48:c4:3f:ab:ef:e0:
         f2:0a:65:85:9b:a5:bf:88:98:9e:6b:48:5a:10:69:97:11:fd:
         2d:bd:f4:a8:62:5b:53:24:ff:d4:43:a0:0b:b8:01:8d:22:bd:
         d3:ec:a5:e0:3f:06:1c:5b:4d:d5:d2:7a:4e:f1:2b:bf:c0:18:
         6b:ff:7e:e8:46:19:44:8f:59:d7:f4:4e:f1:22:da:da:41:81:
         6e:9f:bf:f5:c7:0a:3e:7b:e4:7e:04:7d:60:fa:b6:13:b0:3e:
         56:61:87:b1:e5:47:46:3f:2e:53:02:7c:ae:df:73:5f:24:45:
         f8:33:da:94:97:e4:7c:a9:eb:10:b1:9f:26:f8:16:ab:b0:fc:
         02:46:5c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:48:46 2025 by rpki-client