Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/11187bab-92f5-30ea-872d-e655c27df6dd.roa
File:                     11187bab-92f5-30ea-872d-e655c27df6dd.roa (raw, json)
Hash identifier:          +QJvC6RhraBtWkt1kPrGUmNoOZ+chDQlXyGlhcDaXIE=
Subject key identifier:   30:10:D7:55:C3:2D:F2:D6:FB:E0:D2:28:05:8A:56:4A:AD:26:79:C4
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F43285847CFF48B208FB38B07BD98C600
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/11187bab-92f5-30ea-872d-e655c27df6dd.roa
Signing time:             Fri 08 Nov 2024 15:05:00 +0000
ROA not before:           Fri 08 Nov 2024 15:05:00 +0000
ROA not after:            Thu 06 Feb 2025 15:05:00 +0000
asID:                     81
IP address blocks:        152.46.26.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:f4:8b:20:8f:b3:8b:07:bd:98:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Nov  8 15:05:00 2024 GMT
            Not After : Feb  6 15:05:00 2025 GMT
        Subject: CN=f5525663-6621-4434-8ace-d99e2c735c9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:ca:81:2d:40:59:ae:c8:99:9d:71:e5:ab:6b:
                    55:91:8c:8d:99:ad:1e:2b:68:32:9b:8c:70:5b:36:
                    54:2c:38:9b:18:81:db:04:ea:f3:4c:76:0f:c1:f2:
                    6e:18:a6:10:3b:0d:ce:5c:7d:b0:af:2f:75:16:0a:
                    4c:c0:99:2c:be:7a:f5:f0:bf:e5:fc:48:98:80:80:
                    d8:79:98:50:f2:7f:15:5e:bd:97:8d:0f:12:33:74:
                    ca:4b:0f:f3:47:09:90:aa:a6:97:fd:fd:14:20:ad:
                    ed:7a:98:01:1b:6c:ed:77:f3:d7:a3:19:fd:e5:ef:
                    de:af:c5:30:d3:48:b6:80:5f:b4:27:5d:3f:07:33:
                    b0:c8:03:26:0b:a3:7b:24:8b:57:dc:a1:74:b9:51:
                    ce:c9:ea:86:24:fd:f9:45:f2:bd:41:6c:03:9e:64:
                    38:d7:59:d5:b4:ce:d4:a4:ae:28:2f:5b:4e:34:33:
                    ce:2c:8c:20:7d:02:16:18:0f:64:c9:58:d7:35:34:
                    73:a8:ee:e0:75:6c:a0:28:2b:92:f4:bb:89:bf:6d:
                    1e:36:21:bc:2d:bb:8e:8d:20:25:0e:99:f3:fa:18:
                    18:8e:14:88:17:75:8b:c5:a3:2f:ba:39:77:3a:a5:
                    b9:64:08:b9:64:bd:b1:21:e8:05:a1:ac:5d:2d:2e:
                    10:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:10:D7:55:C3:2D:F2:D6:FB:E0:D2:28:05:8A:56:4A:AD:26:79:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/11187bab-92f5-30ea-872d-e655c27df6dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.46.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:e1:8c:53:13:db:41:4b:3b:85:23:8d:43:37:37:65:ab:7d:
         70:25:34:d3:95:47:b5:08:7a:d8:53:75:e6:33:78:84:c5:29:
         13:c2:a0:54:fb:64:86:c4:98:23:35:bd:49:dd:f2:47:ad:b9:
         15:a6:7b:e1:3a:f5:10:64:64:0d:dd:b4:9b:53:76:2e:42:11:
         9b:f7:66:64:e9:6f:d7:3a:05:99:81:07:7f:9a:f2:eb:27:01:
         71:25:0d:4f:56:29:75:e4:a9:f0:92:1e:31:36:c6:0d:8b:94:
         ce:d8:cc:10:50:59:68:3a:70:36:8b:1b:3b:7b:d9:58:21:1a:
         59:03:d0:a1:cb:cd:fa:55:07:85:13:13:bf:41:11:45:77:a7:
         dc:be:2c:44:c4:46:ca:cf:68:50:00:55:0a:d2:51:a0:c4:77:
         f6:aa:a7:3f:f4:a1:90:fe:3a:f1:25:1b:41:c0:65:8a:ac:1e:
         17:1e:32:3d:b2:70:7a:c5:a4:57:98:35:c3:42:23:2c:45:24:
         b1:9a:5a:c3:86:c7:5f:b9:5d:af:d9:90:dc:f6:ab:2d:e3:77:
         fa:b2:4e:d3:81:e3:55:d9:94:41:c8:42:02:ec:6c:be:a2:4f:
         31:cc:22:09:3c:2d:21:db:d1:04:ec:51:0a:1c:81:bf:8c:4a:
         68:4d:8e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:33 2024 by rpki-client on console-fra.rpki-client.org