Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/cfbac226-9694-3b77-98b0-76526b389042.roa
File:                     cfbac226-9694-3b77-98b0-76526b389042.roa (raw, json)
Hash identifier:          OYQxeUAUXUqR0yvSzqXLXRqzMVwaz4WiM02ndBsjOgo=
Subject key identifier:   A3:41:3F:4E:09:83:CD:5E:48:E8:54:31:6B:C8:33:19:19:C6:03:AF
Certificate issuer:       /CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
Certificate serial:       010D0C9F43285847AB6C14ED41C43C1A8CF06640
Authority key identifier: 0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/cfbac226-9694-3b77-98b0-76526b389042.roa
Signing time:             Sat 26 Oct 2024 13:00:42 +0000
ROA not before:           Sat 26 Oct 2024 13:00:42 +0000
ROA not after:            Fri 24 Jan 2025 14:00:42 +0000
asID:                     25697
IP address blocks:        209.151.159.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ab:6c:14:ed:41:c4:3c:1a:8c:f0:66:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
        Validity
            Not Before: Oct 26 13:00:42 2024 GMT
            Not After : Jan 24 14:00:42 2025 GMT
        Subject: CN=ae216529-aec1-47d8-907e-b0e9d2b6c1e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:db:1f:fa:a6:82:cb:19:24:09:2f:11:07:cd:
                    b7:cb:b6:07:97:e1:55:b5:04:f4:77:78:84:33:d3:
                    cc:69:38:49:8d:d7:f3:4d:ad:6f:bd:70:2b:77:6d:
                    0c:16:fa:35:f5:35:e3:4c:55:d2:e9:f9:99:4b:74:
                    3f:6e:20:e7:a3:84:b7:72:04:b6:9a:1c:dd:65:8b:
                    bf:a4:6f:4e:78:5b:93:df:00:b0:c5:5d:ba:5d:e2:
                    ff:c7:84:3a:12:78:a3:c4:42:fe:e6:bf:ec:f9:e2:
                    8c:3d:72:bc:2c:c8:0d:d3:39:62:98:59:79:ac:b2:
                    cd:bc:c6:d1:08:8c:b5:39:65:35:d5:5f:ed:ce:af:
                    ff:60:7f:1e:2c:0e:43:52:be:f8:dc:5c:1c:25:36:
                    a1:ac:0e:19:24:6b:fc:ad:a1:1d:15:a3:74:bb:a6:
                    84:29:33:c1:4b:91:8a:30:d2:db:ca:bd:7b:f1:c6:
                    12:1e:e5:c8:f3:b7:95:5b:9b:e2:ae:69:16:59:0d:
                    46:af:49:87:83:b2:62:75:f5:68:d9:70:fb:01:22:
                    42:03:4b:ee:8e:05:57:c2:aa:5a:51:52:a8:cf:a7:
                    f4:6a:ae:b1:a1:2c:70:20:ef:1c:71:0b:bd:7f:b5:
                    e8:94:8c:a5:e5:b7:59:2a:23:1c:a7:f0:53:77:b6:
                    83:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:41:3F:4E:09:83:CD:5E:48:E8:54:31:6B:C8:33:19:19:C6:03:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/cfbac226-9694-3b77-98b0-76526b389042.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl

            X509v3 Authority Key Identifier:
                keyid:0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.151.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:1a:57:86:e3:10:31:54:d7:54:39:12:21:19:c1:9e:a7:81:
         07:f4:22:13:b8:f4:39:06:aa:3f:a9:d6:f4:f3:f3:14:00:93:
         2b:87:17:0a:a0:5a:18:3c:f7:3e:93:55:d0:63:ee:48:4b:14:
         1b:b8:d4:2a:fe:0a:c7:2c:15:b4:d1:8b:3d:90:0b:fc:31:dd:
         53:67:25:fe:8c:91:9e:79:16:d9:21:cd:a4:10:3f:db:fc:2f:
         fd:ba:4c:f7:dc:09:ab:1b:81:64:b1:08:6d:07:7a:1f:73:48:
         dc:b3:f7:4e:5d:1a:f3:64:d5:ef:47:11:a2:d5:52:50:62:a4:
         0b:7b:9b:ae:42:3e:0c:fa:ed:b5:4b:71:d3:61:34:c3:b6:4f:
         7d:91:24:e6:40:0a:e1:81:7c:48:fa:92:eb:a7:cc:1d:99:d2:
         99:9b:3b:14:61:b6:d4:76:60:80:90:30:48:aa:71:c2:29:47:
         48:86:5e:85:b8:cf:a3:ca:6b:ca:3b:2f:2e:97:00:f7:a8:4e:
         72:f6:51:2e:d3:6a:01:2d:bd:b6:a0:e5:37:d7:de:e3:34:5b:
         34:2f:08:e8:69:90:d3:92:1f:a8:ec:d5:81:09:ff:f6:8d:5c:
         2f:48:9d:3b:dc:b2:a8:80:f6:42:d1:0d:0e:85:19:da:82:eb:
         94:3c:96:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:22:17 2024 by rpki-client on console-ams.rpki-client.org