Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/ab0ebfa1-0df2-37d0-b376-8b5936cb300f.roa
File:                     ab0ebfa1-0df2-37d0-b376-8b5936cb300f.roa (raw, json)
Hash identifier:          ZrAzKrthzgMUji3eKgufVJLK3GIYt6s1j6LDjG1gc54=
Subject key identifier:   42:E7:8D:F3:7A:3E:B6:27:FE:CC:72:7C:D6:2C:8E:1A:AB:1E:2D:AC
Certificate issuer:       /CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
Certificate serial:       010D0C9F43285845ECBE7E3145259D5BEEDE54E0
Authority key identifier: 0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/ab0ebfa1-0df2-37d0-b376-8b5936cb300f.roa
Signing time:             Sun 19 May 2024 13:00:33 +0000
ROA not before:           Sun 19 May 2024 13:00:33 +0000
ROA not after:            Sat 17 Aug 2024 13:00:33 +0000
asID:                     25697
IP address blocks:        209.151.144.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ec:be:7e:31:45:25:9d:5b:ee:de:54:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
        Validity
            Not Before: May 19 13:00:33 2024 GMT
            Not After : Aug 17 13:00:33 2024 GMT
        Subject: CN=a7c3ec5a-f0c5-4508-b29a-24630ce17cf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:26:c2:27:b0:d0:b8:69:72:d5:a5:be:17:d6:
                    08:83:82:c7:3e:68:4d:2b:73:bd:69:92:ff:74:14:
                    3f:e5:e3:8f:50:9b:cb:d9:02:79:e5:98:23:6e:48:
                    ae:6c:5d:b9:d9:c4:b2:5b:69:86:50:86:ce:88:94:
                    d8:fc:97:76:76:99:59:31:72:5c:fc:ba:32:49:ef:
                    52:99:b4:cc:78:ab:21:46:a4:c0:3d:cb:ae:fe:7a:
                    10:82:2e:a1:bf:4e:3e:17:74:99:9b:ec:98:97:5c:
                    3c:c1:f1:85:91:ff:b7:b4:ca:33:8f:da:b6:c4:da:
                    56:7b:62:fd:43:a0:f5:1d:64:91:99:71:0a:27:93:
                    e7:7f:da:f7:58:9e:fb:e5:75:ce:7f:97:f3:f3:68:
                    ec:f2:ad:65:fe:e3:89:eb:f9:a7:46:42:bf:75:b6:
                    90:2f:eb:6d:de:13:15:75:eb:67:6d:af:f8:5b:96:
                    7c:94:42:c8:c9:58:63:58:c2:08:83:ce:7b:dc:b1:
                    0c:a9:20:af:81:76:64:67:1a:47:9a:e3:e4:e3:3e:
                    88:ab:7e:4b:61:e8:6d:64:f2:40:cb:6e:51:e0:e8:
                    03:a8:f5:66:04:03:45:8d:24:aa:1d:a4:a9:f6:aa:
                    f3:62:a6:49:c5:4d:6b:ab:43:33:36:cc:c9:d3:3d:
                    8b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:E7:8D:F3:7A:3E:B6:27:FE:CC:72:7C:D6:2C:8E:1A:AB:1E:2D:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/ab0ebfa1-0df2-37d0-b376-8b5936cb300f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl

            X509v3 Authority Key Identifier:
                keyid:0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.151.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:56:1e:8e:45:01:23:35:a7:c0:23:a3:b0:47:34:67:fb:b7:
         57:64:3b:f2:95:1f:32:1b:cf:6d:83:e3:c5:db:81:df:e3:fd:
         d0:fa:fa:55:dc:ed:04:99:52:09:1b:76:35:29:69:95:30:be:
         90:5c:ab:2f:e4:e1:f4:9c:b9:42:08:9a:ed:ae:40:ab:66:53:
         c5:98:6d:a8:9a:6f:08:87:d4:84:d9:6b:ff:fc:07:da:0b:da:
         b4:59:59:81:60:1c:b5:2b:97:14:e7:78:b3:2b:78:4f:fe:26:
         b5:ad:5e:6e:73:2c:7f:52:6e:c8:51:17:d5:43:a2:cc:05:e4:
         8a:1c:b9:9d:04:3a:f4:51:19:d8:e8:f4:34:36:7a:82:59:38:
         4d:72:ac:6f:cd:24:57:7b:87:43:02:05:84:aa:64:f8:81:70:
         26:1f:2f:da:47:60:21:c8:97:0d:53:0a:7a:00:ce:a2:79:fe:
         03:b7:b2:2d:f5:37:c9:89:08:72:0c:d6:ec:ee:77:37:9f:4c:
         2f:c1:f1:a9:22:94:75:38:68:af:51:49:95:08:aa:c8:7e:71:
         fe:ba:1c:50:ea:ce:35:be:dc:ff:bc:bd:da:72:fc:c4:51:09:
         eb:68:cb:35:1c:cf:ed:2c:d9:79:bc:dc:5b:47:4c:49:f5:04:
         84:c7:00:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 17:03:20 2024 by rpki-client on console-fra.rpki-client.org