Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/f2bc0db1-3bbc-3071-a926-f7b2ffb534ed.roa
File:                     f2bc0db1-3bbc-3071-a926-f7b2ffb534ed.roa (raw, json)
Hash identifier:          JKPa0IXMnYqUKVPGkAHMmikZtD8yYOIP1TzdmsL+ZuY=
Subject key identifier:   98:94:39:23:78:C2:ED:EA:BE:67:CF:4B:6D:0F:75:59:85:28:11:7D
Certificate issuer:       /CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
Certificate serial:       010D0C9F43285847AB6C14DFB73DD6639920BE40
Authority key identifier: 0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/f2bc0db1-3bbc-3071-a926-f7b2ffb534ed.roa
Signing time:             Sat 26 Oct 2024 13:00:42 +0000
ROA not before:           Sat 26 Oct 2024 13:00:42 +0000
ROA not after:            Fri 24 Jan 2025 14:00:42 +0000
asID:                     25697
IP address blocks:        152.44.44.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ab:6c:14:df:b7:3d:d6:63:99:20:be:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
        Validity
            Not Before: Oct 26 13:00:42 2024 GMT
            Not After : Jan 24 14:00:42 2025 GMT
        Subject: CN=733c6ef2-9ab6-437b-8e06-78a5fef87ca9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cd:dc:16:cf:6e:d1:7e:6f:17:35:4b:b1:23:
                    d4:3f:39:b4:89:92:96:b0:d6:11:90:9a:f6:e5:94:
                    bb:5f:71:81:22:58:c0:3f:e9:68:10:8c:21:ab:fa:
                    a2:d2:b2:5b:cc:a2:3c:de:69:6c:3a:6f:c7:06:ed:
                    1a:90:cd:17:a8:36:3d:3a:3d:ec:9b:d3:3a:fa:65:
                    d8:74:b3:8c:62:1b:57:e9:9e:21:05:f3:0c:3a:00:
                    9a:f3:76:c4:39:40:51:51:88:b1:0a:fd:51:05:f0:
                    4b:3f:ea:13:92:75:6e:8a:15:f2:1a:9f:29:c9:85:
                    c4:55:19:38:1f:5c:8e:9d:ef:45:28:86:a3:5d:e9:
                    ac:be:12:ff:41:72:7c:58:3b:c3:01:21:9d:0d:80:
                    3f:45:61:c4:73:43:fe:8e:b3:0e:de:ac:31:59:05:
                    8b:55:88:0d:99:31:38:73:04:0d:eb:cd:52:62:d8:
                    ef:d2:02:fb:7e:b0:cd:b9:fa:79:36:19:df:d1:25:
                    27:1c:70:a0:ad:d0:44:60:40:dd:05:25:1d:1c:c0:
                    68:09:4a:04:88:2d:5a:bb:1c:8b:19:16:ba:79:37:
                    e3:53:d2:7e:34:a4:67:f2:19:fc:11:0d:ee:64:73:
                    9f:6f:55:d2:bf:d0:0a:4b:6e:be:81:ca:5e:11:a1:
                    24:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:94:39:23:78:C2:ED:EA:BE:67:CF:4B:6D:0F:75:59:85:28:11:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/f2bc0db1-3bbc-3071-a926-f7b2ffb534ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl

            X509v3 Authority Key Identifier:
                keyid:0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.44.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:7a:ec:05:b5:12:a0:3e:02:db:db:e8:07:55:49:72:c3:ce:
         10:15:9d:8c:01:3b:84:f6:81:83:04:5b:60:50:fa:a7:97:04:
         f4:a0:22:ed:a1:67:90:2f:20:ca:c6:7b:c9:e9:f2:e5:8e:f1:
         6b:5d:85:c9:5e:b0:27:17:97:79:56:ce:9a:49:3e:bc:9e:2c:
         ca:b3:1c:e0:46:da:c5:65:10:16:c1:8c:b6:ee:c1:e8:07:56:
         63:86:77:d9:01:9f:3b:69:a6:d5:5a:4e:00:d6:bc:5a:5d:81:
         4d:a0:6c:72:6d:2e:50:d8:5a:8d:45:c6:aa:61:9a:95:f3:1a:
         05:30:fd:f5:c0:01:28:e6:03:ac:50:4b:d3:0f:d1:97:40:4e:
         84:81:66:40:38:62:9c:b7:77:6f:3c:1a:08:a1:a7:2c:97:55:
         a8:69:7d:55:5c:5e:1a:4c:b3:50:41:be:d3:96:77:48:43:46:
         56:c1:04:63:08:a4:9f:3c:6a:98:66:ce:b4:9e:0c:33:37:56:
         c6:96:07:2c:03:60:22:99:9c:80:0e:dd:8b:ab:f3:46:54:49:
         0e:c1:58:6b:6f:17:7d:2f:b1:d8:b3:78:3f:c6:ca:09:21:87:
         08:e4:82:58:29:d5:2e:09:c3:38:47:ee:e4:84:a6:4c:5c:1a:
         5a:58:0a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:35:31 2024 by rpki-client on console-fra.rpki-client.org