Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8dfd6a34-a7e1-4a96-8334-a15990c8a58b/6a8ce612-572d-3e77-bb26-bd18757e474b.roa
File:                     6a8ce612-572d-3e77-bb26-bd18757e474b.roa (raw, json)
Hash identifier:          efugx7mObGCuihyeZMxA6VW8TcUWvhZoFpgVsy8CZ64=
Subject key identifier:   7A:74:C6:57:D3:5C:AB:E6:61:F3:64:5D:F2:36:E2:E3:4A:E1:B6:AF
Certificate issuer:       /CN=8dfd6a34-a7e1-4a96-8334-a15990c8a58b
Certificate serial:       010D0C9F43285847D4049C031F9A26044DDCCFC0
Authority key identifier: B9:2D:CA:F5:F6:F0:BE:CD:C4:8C:B1:37:34:74:41:B2:D8:4B:82:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8dfd6a34-a7e1-4a96-8334-a15990c8a58b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8dfd6a34-a7e1-4a96-8334-a15990c8a58b/6a8ce612-572d-3e77-bb26-bd18757e474b.roa
Signing time:             Sun 10 Nov 2024 02:00:27 +0000
ROA not before:           Sun 10 Nov 2024 02:00:27 +0000
ROA not after:            Sat 08 Feb 2025 02:00:27 +0000
asID:                     55013
IP address blocks:        148.150.5.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8dfd6a34-a7e1-4a96-8334-a15990c8a58b/8dfd6a34-a7e1-4a96-8334-a15990c8a58b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8dfd6a34-a7e1-4a96-8334-a15990c8a58b/8dfd6a34-a7e1-4a96-8334-a15990c8a58b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8dfd6a34-a7e1-4a96-8334-a15990c8a58b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d4:04:9c:03:1f:9a:26:04:4d:dc:cf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dfd6a34-a7e1-4a96-8334-a15990c8a58b
        Validity
            Not Before: Nov 10 02:00:27 2024 GMT
            Not After : Feb  8 02:00:27 2025 GMT
        Subject: CN=7e575632-3d49-4e4d-8f91-5e3bccd7d995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:58:6e:4b:36:0b:84:f9:d5:3c:cf:a7:fa:e5:
                    e8:0a:b6:53:29:09:d3:8b:77:c8:ed:f7:c0:8b:b3:
                    9e:cb:f0:9d:e7:6f:18:07:93:59:be:8d:42:4b:58:
                    90:cd:96:ea:73:d8:39:9f:7f:62:d4:49:60:91:7e:
                    36:64:5d:78:b2:ed:aa:9c:f5:55:a6:fd:98:18:40:
                    ce:07:c8:08:f1:6b:e7:95:67:62:75:ca:19:9e:6d:
                    c6:dc:6b:b0:7c:b1:1f:96:87:74:3b:4e:ff:9d:17:
                    67:ec:80:40:be:2b:3d:d1:50:22:5a:78:e4:31:33:
                    5a:6c:11:23:90:68:b8:01:9f:d8:07:c3:33:68:3a:
                    d0:55:bb:12:d9:ad:31:2d:cf:04:a3:3e:2a:90:87:
                    50:6d:63:20:4c:dc:66:da:d1:7b:86:00:6a:81:31:
                    e6:ec:5c:b7:6a:12:dd:c3:df:f8:8f:b3:37:75:dc:
                    22:14:b4:df:05:22:18:28:25:27:6e:22:d3:de:76:
                    d4:14:6e:21:3d:40:34:e2:33:08:fd:e9:50:5c:bf:
                    fa:1f:6a:9d:fc:de:c7:83:a1:a1:ab:28:96:36:18:
                    04:82:df:1a:27:e9:9e:c0:37:cc:c0:11:5b:9d:43:
                    1c:09:ef:3e:d7:2d:ba:2a:e4:aa:d7:7c:7b:fa:b6:
                    eb:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:74:C6:57:D3:5C:AB:E6:61:F3:64:5D:F2:36:E2:E3:4A:E1:B6:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8dfd6a34-a7e1-4a96-8334-a15990c8a58b/6a8ce612-572d-3e77-bb26-bd18757e474b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8dfd6a34-a7e1-4a96-8334-a15990c8a58b/8dfd6a34-a7e1-4a96-8334-a15990c8a58b.crl

            X509v3 Authority Key Identifier:
                keyid:B9:2D:CA:F5:F6:F0:BE:CD:C4:8C:B1:37:34:74:41:B2:D8:4B:82:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8dfd6a34-a7e1-4a96-8334-a15990c8a58b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.150.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:03:ce:3b:38:6f:67:6c:be:a5:1a:23:78:7c:7e:4a:32:7b:
         9c:79:14:ec:92:21:a2:08:3e:31:a3:70:29:fa:52:6a:77:91:
         b6:de:20:00:f9:dc:03:48:3f:5e:7f:c9:37:bc:61:21:e0:08:
         63:8a:5f:50:45:9a:0e:5f:e4:c9:a2:d3:15:1f:67:f8:6b:22:
         b5:91:3e:ba:37:50:aa:09:a7:57:9a:45:4f:f7:70:0e:6c:7c:
         bf:ef:d5:66:50:30:4e:84:a8:cb:04:56:b3:8c:af:57:2f:10:
         ac:df:9d:08:ae:47:a0:58:c2:64:8c:b5:3e:cf:f6:e7:6c:81:
         99:1a:32:9f:c2:18:d9:ec:cc:1a:f2:57:77:8d:bf:79:b2:02:
         74:50:97:e4:0f:6e:45:36:4e:0a:c8:e3:25:b9:f4:3d:9f:6c:
         1d:c9:5d:85:3a:ec:7b:11:e8:f5:d0:a8:53:26:2b:26:67:be:
         35:2b:bb:76:68:04:46:35:12:8e:99:12:ba:1a:34:d6:43:09:
         68:77:eb:12:eb:49:76:a0:70:f8:67:d1:1b:50:f7:36:5a:93:
         35:13:1a:a1:44:06:b3:d8:b6:48:3d:ac:ec:47:6c:66:75:3d:
         a5:a0:e2:63:f8:3c:88:b5:7c:46:0c:6f:77:6b:3a:1c:ba:e9:
         20:e9:4d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:30 2024 by rpki-client on console-fra.rpki-client.org