Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/117e558f-8cef-32dc-94d2-9728217ba29d.roa
File:                     117e558f-8cef-32dc-94d2-9728217ba29d.roa (raw, json)
Hash identifier:          kWDOUFH3P30lqNaGb63g+Z8H2sdG70+xsxx01k5wEEc=
Subject key identifier:   50:AD:37:50:D0:48:D1:31:39:3A:D2:0A:45:EE:D6:3B:28:CF:93:CF
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F43285847CFF48D426F08BD64C6B54840
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/117e558f-8cef-32dc-94d2-9728217ba29d.roa
Signing time:             Fri 08 Nov 2024 15:05:01 +0000
ROA not before:           Fri 08 Nov 2024 15:05:01 +0000
ROA not after:            Thu 06 Feb 2025 15:05:01 +0000
asID:                     81
IP address blocks:        152.46.6.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:f4:8d:42:6f:08:bd:64:c6:b5:48:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Nov  8 15:05:01 2024 GMT
            Not After : Feb  6 15:05:01 2025 GMT
        Subject: CN=2a88ab34-973b-4dd9-b132-b3162a5730db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:de:c1:84:aa:44:8f:07:22:8b:0a:41:5b:35:
                    c0:15:67:06:00:69:6d:96:6f:2d:0e:ab:22:c9:e9:
                    dd:70:d3:25:fa:49:1b:6c:c3:fb:e6:70:6c:88:68:
                    91:a1:ff:9d:72:20:d2:22:19:12:f6:0f:b5:c3:50:
                    b8:17:12:8a:25:c5:88:d9:fd:af:91:ca:e3:a5:02:
                    75:6c:e3:ad:04:08:1b:14:06:f0:b3:f1:f4:17:7a:
                    50:de:f4:13:d0:15:8e:7a:53:32:f3:b7:5d:26:44:
                    0a:61:8a:da:1f:4d:84:f9:a9:f6:f1:7b:72:5c:7a:
                    5c:ac:d4:52:d8:5f:8c:f1:cf:39:f6:4a:fd:58:a5:
                    85:3f:86:4e:a7:d3:c5:5e:dc:90:e7:5d:31:ca:a6:
                    a3:03:20:85:dc:0a:d1:7a:e6:e8:79:d5:10:db:17:
                    14:88:38:56:f1:cc:06:8d:92:3b:b8:14:00:4f:cb:
                    f0:cf:24:ad:52:fb:ff:4a:e5:86:cd:eb:3e:c1:f7:
                    f1:2b:e7:1a:11:d2:7c:fe:0f:36:fc:1d:e6:38:17:
                    7b:fa:9f:32:31:5b:58:31:bb:bf:af:62:70:86:64:
                    13:42:c0:26:bc:aa:bf:56:ad:aa:c4:9d:24:c5:8b:
                    14:dd:59:29:5a:fd:c5:1d:9f:da:cf:8c:55:c9:50:
                    ec:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:AD:37:50:D0:48:D1:31:39:3A:D2:0A:45:EE:D6:3B:28:CF:93:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/117e558f-8cef-32dc-94d2-9728217ba29d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.46.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:7a:f1:18:53:d6:ba:de:5e:28:7e:01:48:e3:c5:bf:fa:51:
         fa:5d:3b:8f:5e:b8:01:13:43:e1:6f:27:38:a8:6a:3f:97:30:
         0a:d2:92:e3:e9:82:24:50:16:34:98:9b:d0:a6:9e:fc:7d:a9:
         92:0a:93:2b:6d:0c:92:35:d5:cf:5b:d7:e7:b8:04:5e:59:30:
         69:b5:e9:ae:e2:28:71:a8:d2:00:ce:b0:09:1a:0b:6e:ad:ca:
         81:1f:4b:1d:0b:39:9f:a2:03:ac:b7:1e:1d:68:95:c0:c0:01:
         c7:6d:f8:3c:a2:dd:d4:57:3c:74:fb:42:6e:ef:a8:c4:1a:31:
         00:28:a9:17:62:bd:7a:c5:0e:f8:eb:b3:ef:a4:bf:9c:0b:af:
         3c:99:ba:f0:2f:9a:c9:be:92:38:64:fb:27:92:de:20:41:5d:
         db:74:6e:03:2e:37:9d:76:dc:e2:be:39:ff:00:a9:44:dd:ee:
         4b:e4:dc:79:d0:96:8b:35:eb:4a:2b:e3:68:2f:fb:5b:73:c2:
         82:64:ea:f3:5e:dc:fd:ec:ba:73:d0:11:31:c6:3e:fa:51:0b:
         da:be:b2:2f:c5:bf:ff:bf:3a:f4:bc:1b:16:22:49:86:31:b1:
         40:b0:d6:db:2e:b8:cb:5a:43:d0:7a:42:5a:a5:9c:9d:82:ef:
         d4:56:9c:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfP9I1Cbwi9ZMa1SEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI0MTEwODE1MDUwMVoXDTI1MDIwNjE1MDUwMVowLzEtMCsGA1UEAxMk
MmE4OGFiMzQtOTczYi00ZGQ5LWIxMzItYjMxNjJhNTczMGRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkN7BhKpEjwciiwpBWzXAFWcGAGltlm8tDqsi
yendcNMl+kkbbMP75nBsiGiRof+dciDSIhkS9g+1w1C4FxKKJcWI2f2vkcrjpQJ1
bOOtBAgbFAbws/H0F3pQ3vQT0BWOelMy87ddJkQKYYraH02E+an28XtyXHpcrNRS
2F+M8c859kr9WKWFP4ZOp9PFXtyQ510xyqajAyCF3ArReuboedUQ2xcUiDhW8cwG
jZI7uBQAT8vwzyStUvv/SuWGzes+wffxK+caEdJ8/g82/B3mOBd7+p8yMVtYMbu/
r2JwhmQTQsAmvKq/Vq2qxJ0kxYsU3VkpWv3FHZ/az4xVyVDsLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFCtN1DQSNExOTrSCkXu1jsoz5PPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvMTE3ZTU1OGYtOGNlZi0z
MmRjLTk0ZDItOTcyODIxN2JhMjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmC4GMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEp68RhT1rreXih+AUjjxb/6UfpdO49euAETQ+FvJzioaj+XMArSkuPp
giRQFjSYm9Cmnvx9qZIKkyttDJI11c9b1+e4BF5ZMGm16a7iKHGo0gDOsAkaC26t
yoEfSx0LOZ+iA6y3Hh1olcDAAcdt+Dyi3dRXPHT7Qm7vqMQaMQAoqRdivXrFDvjr
s++kv5wLrzyZuvAvmsm+kjhk+yeS3iBBXdt0bgMuN5123OK+Of8AqUTd7kvk3HnQ
los160or42gv+1tzwoJk6vNe3P3sunPQETHGPvpRC9q+si/Fv/+/OvS8GxYiSYYx
sUCw1tsuuMtaQ9B6QlqlnJ2C79RWnAo=
-----END CERTIFICATE-----
Generated at Sun Nov 24 15:27:23 2024 by rpki-client on console-fra.rpki-client.org