Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/4d33ad72-cd69-3b39-af54-bb7f634a0f9c.roa
File:                     4d33ad72-cd69-3b39-af54-bb7f634a0f9c.roa (raw, json)
Hash identifier:          w7DHgdzheJkqBGKKrpsMnpiNKsPMh0lNSx6hQIt1Uok=
Subject key identifier:   BD:13:1C:59:F8:F2:0D:87:11:46:C0:77:52:41:FB:4C:9D:0E:95:5A
Certificate issuer:       /CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
Certificate serial:       010D0C9F43285845ECBE81390853AAFA6D262380
Authority key identifier: 0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/4d33ad72-cd69-3b39-af54-bb7f634a0f9c.roa
Signing time:             Sun 19 May 2024 13:00:33 +0000
ROA not before:           Sun 19 May 2024 13:00:33 +0000
ROA not after:            Sat 17 Aug 2024 13:00:33 +0000
asID:                     25697
IP address blocks:        209.151.156.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ec:be:81:39:08:53:aa:fa:6d:26:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
        Validity
            Not Before: May 19 13:00:33 2024 GMT
            Not After : Aug 17 13:00:33 2024 GMT
        Subject: CN=828e44bf-d828-4971-94c8-ece81d4ed1e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:24:d2:e1:9c:77:bf:ad:0c:1b:e9:d2:4a:27:
                    51:05:93:b3:82:f5:90:68:71:0e:89:86:93:b8:8a:
                    a2:0f:87:32:84:ee:b9:58:bc:53:c1:ce:93:5a:17:
                    6c:8e:67:90:57:a3:8f:f4:e0:e6:9c:c4:83:7c:40:
                    03:b0:f4:98:ae:ef:35:5b:3f:65:0c:55:30:c6:9c:
                    73:fd:0a:25:eb:ba:84:5d:ff:a9:99:33:02:4c:b7:
                    bb:b1:8a:70:5d:b9:6a:ec:79:80:e9:d2:e7:63:4e:
                    ff:39:32:e6:8a:ff:d7:b7:91:1d:28:ad:56:41:73:
                    45:b8:03:cf:09:bb:cf:1d:9c:8c:60:65:b1:b9:05:
                    0a:41:27:c7:2a:55:8b:ea:b4:37:dd:3e:d5:68:fc:
                    7a:63:60:13:82:c2:aa:63:5b:2f:bb:d2:79:82:bf:
                    55:ac:72:c1:74:2b:1f:a8:fa:52:84:04:ff:e2:2b:
                    da:a8:23:49:76:79:fe:c3:f7:13:7e:3e:25:e6:e1:
                    a4:70:48:e3:94:3a:6a:74:3c:6f:8a:5c:b4:cf:05:
                    88:97:54:e1:c9:80:8a:26:75:ab:bd:8f:ef:ac:0d:
                    6a:f3:28:a4:1e:62:36:af:8f:77:52:7d:0e:04:40:
                    a9:38:65:5a:43:5e:51:a0:2e:2d:71:19:c1:97:35:
                    1c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:13:1C:59:F8:F2:0D:87:11:46:C0:77:52:41:FB:4C:9D:0E:95:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/4d33ad72-cd69-3b39-af54-bb7f634a0f9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl

            X509v3 Authority Key Identifier:
                keyid:0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.151.156.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:88:ad:63:cc:39:59:87:fb:e5:52:54:e7:23:66:18:5a:1d:
         35:fd:bb:02:6e:db:0d:09:a7:7b:5a:a6:17:d2:b7:b0:49:1f:
         70:03:99:3a:5f:bc:bd:bc:3c:3b:32:9c:48:34:bc:8d:35:0f:
         7b:05:38:25:2c:de:65:91:d1:18:e3:e4:52:40:0c:6b:d5:04:
         dd:de:00:ec:fc:03:e6:17:90:b3:24:85:da:15:f6:84:81:03:
         8b:cd:42:14:e8:d7:a4:61:2f:b0:c7:11:0c:d1:9e:3a:af:73:
         be:46:8a:5c:fb:41:7a:91:d5:cf:a0:7c:c4:c9:eb:6d:17:c5:
         bd:75:6e:04:19:ac:56:c1:04:5d:fd:dd:df:50:9c:41:7d:f4:
         5d:e9:f0:2f:24:79:4f:3d:94:f7:df:a7:85:39:63:29:22:f6:
         fc:5f:bf:36:6d:a0:8e:03:42:ab:80:62:fe:20:7b:e7:f4:01:
         5b:0b:e8:0d:d1:46:1d:15:50:ef:f2:00:35:16:4f:52:b4:6c:
         09:70:4e:ac:36:ca:e8:be:ec:9f:30:7c:ee:2a:3e:6e:4e:f8:
         ad:8b:a8:f8:f6:82:de:ee:c9:82:31:22:35:7c:54:27:c6:db:
         57:94:4d:92:84:06:48:f6:d1:ed:c0:3f:d4:da:2d:13:7e:03:
         cb:3f:f0:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 14:55:29 2024 by rpki-client on console-ams.rpki-client.org