Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/3f19cad0-6ddd-35a7-877d-c343355be8b2.roa
File:                     3f19cad0-6ddd-35a7-877d-c343355be8b2.roa (raw, json)
Hash identifier:          mFUtt/32jkeFb0KQyq1A9ru2scALBPz8CZ8qcyR/SI0=
Subject key identifier:   DC:1D:32:CE:B3:C2:8E:49:7D:BC:EA:97:57:39:34:23:F7:F1:A7:77
Certificate issuer:       /CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
Certificate serial:       010D0C9F43285847AB6C14C0D3E4002B50D8E640
Authority key identifier: 0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/3f19cad0-6ddd-35a7-877d-c343355be8b2.roa
Signing time:             Sat 26 Oct 2024 13:00:42 +0000
ROA not before:           Sat 26 Oct 2024 13:00:42 +0000
ROA not after:            Fri 24 Jan 2025 14:00:42 +0000
asID:                     25697
IP address blocks:        152.44.32.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ab:6c:14:c0:d3:e4:00:2b:50:d8:e6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
        Validity
            Not Before: Oct 26 13:00:42 2024 GMT
            Not After : Jan 24 14:00:42 2025 GMT
        Subject: CN=72f00193-03c2-4f53-bff0-2e93a3ce81b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:08:5d:09:04:a7:90:95:7f:11:ba:c0:d1:80:
                    f8:68:56:06:04:bc:12:41:d8:98:d1:79:4d:f0:75:
                    25:0b:75:ac:8c:3c:a2:be:ec:5e:4e:ee:f0:6f:95:
                    d9:c4:60:ea:4e:8d:a6:34:4a:ac:0f:09:11:f0:8a:
                    79:60:f0:55:e9:41:45:63:bb:a9:db:93:f1:3d:6d:
                    f3:49:95:a0:d8:95:ef:ac:bc:a2:1f:4b:a7:b1:56:
                    0d:c6:40:14:6a:47:1f:95:a3:f2:e2:d3:b8:8f:8a:
                    24:f3:93:44:8a:8d:f0:58:41:17:77:c7:a7:af:af:
                    b2:f4:09:3e:7e:5f:06:e2:11:90:0d:17:3c:1b:bb:
                    19:54:03:04:33:21:88:1e:bc:72:7b:fb:60:75:64:
                    66:33:34:0e:1b:ef:53:be:a9:d7:11:05:52:a1:a8:
                    fb:3b:c4:87:35:1c:ea:c1:72:fb:ef:a6:b8:b4:9b:
                    16:1e:f8:4f:ce:ca:a3:2a:20:09:86:63:dd:a7:97:
                    7a:71:d7:6d:66:da:44:09:db:b3:37:c5:c6:6c:c7:
                    c6:67:89:b3:78:17:c4:b7:34:36:51:d2:d7:8d:09:
                    0f:82:0a:ff:2c:e7:0a:08:70:08:bc:f9:69:2b:cc:
                    e8:4a:72:6f:5e:db:4b:34:6d:a1:7f:1f:c0:18:fa:
                    e2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:1D:32:CE:B3:C2:8E:49:7D:BC:EA:97:57:39:34:23:F7:F1:A7:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/3f19cad0-6ddd-35a7-877d-c343355be8b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl

            X509v3 Authority Key Identifier:
                keyid:0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.44.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:06:04:3a:0a:69:80:16:6a:77:3f:5b:4b:22:ce:51:e7:e9:
         67:17:8c:d9:ca:db:7b:35:1d:ee:1c:6c:85:85:df:05:b5:a2:
         66:3e:cf:85:ed:d4:78:21:b0:cf:19:f7:15:51:3b:17:e1:46:
         e7:79:de:86:fe:a8:80:36:6a:59:65:56:12:04:e9:62:9e:56:
         c3:4c:6d:99:1f:bf:a6:57:59:f6:96:82:89:9c:c2:84:70:e5:
         3f:d1:1c:a5:93:37:91:f9:dd:9e:c8:b2:72:92:85:d8:52:fa:
         60:2c:b3:37:d5:aa:74:f9:fb:33:dd:52:69:bc:f8:86:2d:63:
         97:05:98:bd:a7:13:ce:fb:21:f2:ae:aa:7c:1c:19:03:a0:b3:
         e3:5c:b2:f2:58:ec:bd:ba:81:be:b4:b9:99:9a:a0:92:91:1b:
         54:a3:c0:51:98:3f:c1:f8:61:27:ca:a6:19:b5:87:6d:37:2a:
         7f:81:35:f0:7e:a5:21:5e:c7:2b:c3:08:aa:b2:5a:db:c1:f3:
         3c:3f:01:9f:50:e5:5e:8c:8e:2f:f5:26:23:74:65:70:77:f1:
         25:78:e5:a7:42:0e:86:d7:54:c1:26:e0:d2:10:8c:29:39:f3:
         2a:fd:dc:ba:bf:cd:9b:28:9b:dd:d1:6c:a0:fb:03:4a:fe:81:
         d1:ac:ca:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:35:31 2024 by rpki-client on console-fra.rpki-client.org