Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/23e032e6-3f6d-3991-81e7-9288eea2ba97.roa
File:                     23e032e6-3f6d-3991-81e7-9288eea2ba97.roa (raw, json)
Hash identifier:          3q3WVHvZiWg8uC9GEGUqBb7baD0hQiipUrVa6tG2KZs=
Subject key identifier:   94:4B:6B:6F:AE:14:32:72:44:83:91:CD:2C:0C:AA:1A:CD:65:49:2F
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F43285847CFF48682C3C4106534C61F40
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/23e032e6-3f6d-3991-81e7-9288eea2ba97.roa
Signing time:             Fri 08 Nov 2024 15:04:58 +0000
ROA not before:           Fri 08 Nov 2024 15:04:58 +0000
ROA not after:            Thu 06 Feb 2025 15:04:58 +0000
asID:                     81
IP address blocks:        152.26.210.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:f4:86:82:c3:c4:10:65:34:c6:1f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Nov  8 15:04:58 2024 GMT
            Not After : Feb  6 15:04:58 2025 GMT
        Subject: CN=730d9549-4ced-46d2-aa4b-8002bc5c9f2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0d:93:e9:45:35:91:89:2e:71:2c:b0:94:bd:
                    2c:0f:21:a9:dd:de:ff:ef:dd:8d:5b:0b:b1:ce:3b:
                    20:5c:a3:47:8f:41:af:1e:20:a2:1b:74:c5:15:6f:
                    52:4a:7c:53:e8:aa:d9:ea:74:ec:79:51:31:85:0d:
                    65:c7:ae:1f:47:a7:cb:a0:5c:71:67:b6:69:f3:0b:
                    0b:66:6b:c4:9b:51:80:3b:45:d5:bc:79:76:11:ba:
                    6e:5f:f8:c8:37:bf:87:17:16:a0:89:45:6c:b5:68:
                    f6:e1:d6:79:98:e0:7c:d7:23:4b:77:99:f5:b8:00:
                    f4:78:30:6e:a9:1e:a2:ed:e7:0a:92:42:8c:33:6e:
                    25:fc:96:ee:e4:7b:ca:38:b3:ca:57:f9:dd:c2:23:
                    e7:61:98:e3:2e:e7:63:94:81:81:73:0f:e4:bb:d8:
                    b3:41:49:ad:44:6d:7e:cf:7b:be:29:ed:cf:5b:ae:
                    32:3e:17:cb:76:63:90:0b:a7:b5:3f:a2:68:f0:17:
                    98:68:7f:fe:b1:4d:16:3c:38:32:7c:d1:2f:9e:63:
                    e1:f2:8e:37:01:62:ac:54:60:ec:db:68:11:47:ff:
                    ae:c9:da:91:ef:df:1d:62:6a:1a:77:ad:45:2e:8d:
                    2b:02:4e:57:4f:ca:ca:52:df:b6:f2:67:42:d1:c8:
                    8a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:4B:6B:6F:AE:14:32:72:44:83:91:CD:2C:0C:AA:1A:CD:65:49:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/23e032e6-3f6d-3991-81e7-9288eea2ba97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.26.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:94:f9:ab:dc:59:b5:c0:e4:90:d8:4a:6c:b5:15:93:4d:d4:
         1e:c9:e8:c3:8d:9f:29:75:fd:de:a1:e5:92:92:80:b9:9b:7b:
         14:28:9b:f3:d1:3f:48:be:f7:d4:ac:89:c6:57:d4:f4:3c:2b:
         40:09:9d:70:98:27:19:13:3c:f3:ad:c0:19:bc:8f:d8:d2:35:
         6b:79:de:a5:f8:6b:28:fa:b0:3b:5f:a1:87:0f:67:00:20:dd:
         df:7d:f9:de:d3:5a:18:a6:da:ed:0b:00:fd:ce:b2:0b:4a:6a:
         23:f2:9d:d7:3e:73:27:ba:86:1a:f5:ac:28:fc:d0:b4:bc:f8:
         a1:96:ad:f5:e5:63:f3:8a:3c:dc:e1:7d:d6:87:3a:16:85:5b:
         76:23:e6:e7:6c:ae:46:60:7b:a8:bb:07:2d:70:52:c6:d8:be:
         dd:35:3e:38:b7:f6:40:7b:f7:d6:8f:51:a0:d6:89:19:4c:e1:
         85:db:ae:af:26:08:41:d1:9b:3d:c4:6e:4f:9a:c2:b3:01:08:
         82:10:2d:18:8d:21:fa:9a:a7:15:61:e8:7e:b7:51:f4:bb:7b:
         24:75:ac:4f:87:83:c4:5d:69:46:2f:72:79:f4:04:7e:48:48:
         e8:ca:22:79:78:cc:7c:db:01:09:2e:d1:91:5c:0d:91:29:77:
         33:69:ac:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:27:23 2024 by rpki-client on console-fra.rpki-client.org