Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/c1beb45d-0a3d-33f9-911f-d29bafacb3db.roa
File:                     c1beb45d-0a3d-33f9-911f-d29bafacb3db.roa (raw, json)
Hash identifier:          1TGN9eQJXCLN/0esp7b4rwMTrIQ5rEXnMS0T8+co3JI=
Subject key identifier:   85:1D:E6:3C:53:54:D8:A1:60:81:A6:B9:AD:B0:56:A6:53:E0:FF:4A
Certificate issuer:       /CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
Certificate serial:       010D0C9F43285847AB6C14CEE5F49C2CB57BFAD8
Authority key identifier: 0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/c1beb45d-0a3d-33f9-911f-d29bafacb3db.roa
Signing time:             Sat 26 Oct 2024 13:00:42 +0000
ROA not before:           Sat 26 Oct 2024 13:00:42 +0000
ROA not after:            Fri 24 Jan 2025 14:00:42 +0000
asID:                     25697
IP address blocks:        152.44.40.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ab:6c:14:ce:e5:f4:9c:2c:b5:7b:fa:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
        Validity
            Not Before: Oct 26 13:00:42 2024 GMT
            Not After : Jan 24 14:00:42 2025 GMT
        Subject: CN=a86b0275-e691-4dd7-8389-99b9246a7f1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:aa:8c:50:aa:1c:84:48:52:ba:07:c7:42:62:
                    3d:e6:1e:92:ba:a9:ec:5e:75:b3:cd:a6:7c:71:97:
                    15:eb:42:59:4c:06:87:8f:1b:02:e5:4d:db:91:ce:
                    9f:db:42:af:87:f8:10:17:ea:77:1b:27:b4:cb:cc:
                    f0:43:3a:fb:96:80:96:d7:c6:a3:53:de:8c:b1:5f:
                    17:11:9a:ea:b3:83:38:5b:a1:69:34:64:ff:c4:ec:
                    76:1f:97:38:51:c2:5b:03:a0:19:0e:35:fb:78:8b:
                    7e:08:68:97:a0:84:9c:53:0d:fd:13:a8:40:85:8f:
                    dc:2e:6a:e6:22:5a:81:c6:4c:fd:5a:a1:28:4c:a6:
                    eb:ef:7d:62:20:13:2c:fd:9b:5a:e0:09:17:27:63:
                    af:57:54:e0:20:b2:3a:5c:49:7c:61:23:73:40:d1:
                    ea:86:57:e5:26:b9:26:bf:2d:3e:7c:e1:b5:45:28:
                    17:ae:27:5e:32:e1:5d:b6:7e:3b:3c:8d:50:e8:1e:
                    56:d9:70:32:d9:f8:e1:78:07:1a:af:85:00:c0:85:
                    86:88:a3:97:3b:d8:53:0d:bd:4e:06:5d:cc:85:ef:
                    22:f3:95:9c:c1:b5:79:7b:af:f0:5e:d1:1f:cf:09:
                    71:cd:95:8d:8c:da:1d:f8:1a:c7:02:b6:94:d6:7c:
                    2a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:1D:E6:3C:53:54:D8:A1:60:81:A6:B9:AD:B0:56:A6:53:E0:FF:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/c1beb45d-0a3d-33f9-911f-d29bafacb3db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl

            X509v3 Authority Key Identifier:
                keyid:0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.44.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:28:bf:50:18:eb:25:77:a6:bd:14:c5:b9:d2:a4:b5:7b:c1:
         45:07:ba:38:92:0b:9c:7d:d7:a5:11:e1:9e:87:0e:a4:38:97:
         9e:39:98:ff:70:df:50:62:15:de:0e:61:64:64:ed:20:52:cb:
         cb:b6:d1:1f:e2:11:61:cb:7b:4e:1d:41:a3:ee:f5:84:fa:30:
         01:25:10:6b:c4:cb:67:2e:e5:f8:25:20:98:cd:53:a1:d8:c9:
         c3:66:64:fe:47:e6:db:16:22:71:a9:05:70:ee:ac:11:fa:ad:
         b7:8c:71:e9:52:03:d7:94:15:19:3e:40:af:83:f3:c5:3f:88:
         53:e9:5d:81:8c:e1:61:5d:22:4d:79:0a:48:c9:4c:6e:91:62:
         6c:ba:eb:cb:2c:33:0b:18:f5:09:78:a4:09:27:0f:eb:8c:2b:
         27:e0:b0:0c:eb:9b:d8:a2:11:6b:cb:05:e2:ec:5a:4c:b8:7c:
         1c:e3:de:88:3c:18:ec:a7:5b:88:ce:20:bd:1c:fb:47:3e:b1:
         fb:1d:a2:42:53:dd:0a:d1:95:7c:37:c9:69:e7:4d:ed:26:8a:
         cf:b5:d5:6e:25:15:08:26:ec:c7:ab:34:60:d8:38:50:ba:ef:
         04:41:7a:48:3d:9d:c9:bd:f2:62:e9:51:01:5e:98:72:1b:5b:
         bc:f1:16:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:22:17 2024 by rpki-client on console-ams.rpki-client.org