Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/3611eb1d-586a-3087-8c7c-45e34fe9b737.roa
File:                     3611eb1d-586a-3087-8c7c-45e34fe9b737.roa (raw, json)
Hash identifier:          quLvGUeGXtXTr+GLxNQ1VC4TokxUCBgdCyLuKEeAPN8=
Subject key identifier:   79:5A:BC:59:FB:38:83:81:5C:5C:A1:23:4C:4D:EE:3F:8D:FF:6F:D4
Certificate issuer:       /CN=628d865a-2d19-4af1-984a-6c443304d9f0
Certificate serial:       010D0C9F43285847F42D325ADB02DFB2C26B7100
Authority key identifier: 25:8B:BC:FC:CC:F8:56:36:9E:6B:8D:EE:95:D3:D1:0F:49:98:08:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/3611eb1d-586a-3087-8c7c-45e34fe9b737.roa
Signing time:             Thu 21 Nov 2024 14:28:15 +0000
ROA not before:           Thu 21 Nov 2024 14:28:15 +0000
ROA not after:            Wed 19 Feb 2025 14:28:15 +0000
asID:                     81
IP address blocks:        152.30.92.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f4:2d:32:5a:db:02:df:b2:c2:6b:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=628d865a-2d19-4af1-984a-6c443304d9f0
        Validity
            Not Before: Nov 21 14:28:15 2024 GMT
            Not After : Feb 19 14:28:15 2025 GMT
        Subject: CN=55f1d412-8cbb-4041-ba09-83be71b9e4ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:99:d7:68:51:aa:58:59:00:ad:8d:59:9e:b4:
                    4f:75:19:22:a3:20:82:e4:53:27:12:ff:de:90:6e:
                    26:77:10:31:3f:55:bc:95:3c:67:75:18:f1:0e:1d:
                    47:db:57:bb:75:57:28:ba:96:9b:94:64:5b:c1:0a:
                    af:03:8e:4e:c3:2f:c0:42:22:d0:20:48:01:81:26:
                    71:98:74:89:45:cb:7e:a7:39:18:6e:87:2b:ef:8a:
                    91:89:24:38:aa:b9:ca:f0:5c:b7:4b:0d:ff:fc:cd:
                    35:b5:8b:83:a0:ff:0f:c9:aa:2d:53:83:e7:12:a9:
                    62:4d:eb:e2:46:a7:3f:0f:a4:d1:e4:75:c0:3b:4a:
                    2b:f4:e5:50:34:8c:a6:a9:f6:5b:5a:9c:c3:e4:d8:
                    6c:cf:f1:16:cf:1d:8e:a9:19:06:31:90:ff:b0:40:
                    97:b5:fb:37:48:f6:9e:6c:56:a1:b3:6b:e3:37:b3:
                    5e:0b:63:55:0c:f3:75:94:a8:07:8f:d8:20:72:7a:
                    f1:47:49:5d:ad:c6:9e:4b:f0:07:ea:1c:2e:4c:c6:
                    67:a9:76:d2:cd:c7:31:2c:46:d9:a0:f3:62:cf:e1:
                    22:31:5f:3a:6c:b2:8a:69:ed:a1:8c:e6:65:7d:24:
                    41:0e:d9:94:1e:de:43:05:54:40:74:5e:58:04:63:
                    e3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:5A:BC:59:FB:38:83:81:5C:5C:A1:23:4C:4D:EE:3F:8D:FF:6F:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/3611eb1d-586a-3087-8c7c-45e34fe9b737.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.crl

            X509v3 Authority Key Identifier:
                keyid:25:8B:BC:FC:CC:F8:56:36:9E:6B:8D:EE:95:D3:D1:0F:49:98:08:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.30.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:5a:5a:37:d9:83:2d:a9:c1:e6:d6:ab:e5:82:9f:cd:41:d6:
         f0:b7:ca:1e:82:15:e6:18:d7:26:bf:e4:41:84:b6:9b:6c:2c:
         17:58:ee:80:50:5d:4d:6d:fd:34:c9:d1:81:30:44:c0:13:96:
         ae:e3:29:76:18:d1:69:86:51:60:3f:65:a3:8d:7b:4d:a0:47:
         57:9d:1b:fd:5f:44:89:5b:70:96:b5:aa:4b:59:9d:5b:d0:37:
         32:c3:60:52:5e:fe:86:58:95:f0:49:f5:a8:3e:38:1f:e0:9d:
         f3:e6:08:05:87:bf:4e:1b:63:56:d9:6d:f2:13:38:f0:d6:5c:
         dc:21:6a:c1:e8:92:26:5f:74:0a:de:98:15:b3:23:a2:bd:35:
         d6:09:5a:4c:bc:60:85:30:d8:87:ba:ad:b0:af:71:99:43:17:
         02:f8:d2:4d:f7:43:22:e5:f9:ef:ac:b9:af:0a:2e:05:d8:e6:
         57:f0:75:4c:b6:b5:33:55:53:be:9b:1f:fe:84:e7:87:23:b8:
         67:3a:24:86:fc:26:0a:36:30:22:1d:eb:16:ed:cc:3d:15:98:
         cc:71:ce:9c:ca:af:ba:1d:46:eb:10:d3:2c:58:05:a4:40:4a:
         d0:88:ec:31:65:72:59:0f:5f:ad:fe:e7:0f:8d:ad:5d:b8:0c:
         46:1c:34:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:25:51 2024 by rpki-client on console-ams.rpki-client.org