Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/306596e4-3705-3a24-96bb-030be1db9b99.roa
File:                     306596e4-3705-3a24-96bb-030be1db9b99.roa (raw, json)
Hash identifier:          RjkPey1uqvITty+04pTJfA2wYALNs0byYRyhYZw39gg=
Subject key identifier:   4D:50:A8:09:03:3B:FF:17:27:98:E0:6D:B3:9B:0D:58:EB:78:0D:E8
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F43285847CFF489CECAA9D1C36AFD7549
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/306596e4-3705-3a24-96bb-030be1db9b99.roa
Signing time:             Fri 08 Nov 2024 15:05:00 +0000
ROA not before:           Fri 08 Nov 2024 15:05:00 +0000
ROA not after:            Thu 06 Feb 2025 15:05:00 +0000
asID:                     81
IP address blocks:        152.45.6.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:f4:89:ce:ca:a9:d1:c3:6a:fd:75:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Nov  8 15:05:00 2024 GMT
            Not After : Feb  6 15:05:00 2025 GMT
        Subject: CN=8ff0e1ab-c916-4b09-97a9-208ec9f38810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e7:25:b9:13:b4:7a:73:4c:c6:2b:ba:8d:32:
                    8f:be:c2:a2:71:15:f1:27:15:33:e2:41:7a:4d:4e:
                    a9:57:91:1c:d9:ca:d1:1e:5f:85:db:ab:99:46:d5:
                    83:bb:b4:f6:f8:5f:7d:ae:bc:1c:d5:05:bf:03:41:
                    55:d9:55:8b:0e:bc:94:0d:e5:4c:98:57:91:9b:fd:
                    e5:7c:0d:6d:dc:7b:5c:60:cf:e3:bb:36:45:94:4f:
                    85:f3:6d:8b:aa:bd:19:0a:fb:16:4b:88:7d:4f:69:
                    9a:c9:15:82:df:e6:a1:15:7a:7c:5b:51:3f:70:b0:
                    f4:a8:f2:8f:f9:9a:57:ea:b9:b0:8b:4a:6d:9a:bf:
                    a2:b6:9e:49:60:73:a4:e7:ed:a2:2c:28:ad:0d:54:
                    48:a2:83:bb:6f:ce:29:11:ac:32:2b:41:11:ae:da:
                    c0:d0:e1:6f:cd:5d:0d:cd:09:3f:ba:eb:2a:5a:a6:
                    80:ee:c8:95:d0:5d:59:b0:cd:94:3a:4c:43:1c:d2:
                    67:31:40:e4:ee:93:0c:4d:bf:af:67:61:c2:19:00:
                    1a:30:ff:2e:65:10:d4:30:b3:38:32:e4:d4:df:18:
                    16:51:9e:07:0f:ca:15:5e:83:75:00:f5:6f:8f:24:
                    91:b5:1a:98:ce:f0:70:b9:fc:0c:42:4b:3d:63:22:
                    a9:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:50:A8:09:03:3B:FF:17:27:98:E0:6D:B3:9B:0D:58:EB:78:0D:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/306596e4-3705-3a24-96bb-030be1db9b99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.45.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:b9:51:2c:c4:48:fe:ae:d4:02:9a:c5:78:38:55:b5:05:18:
         28:4e:24:b1:26:eb:ac:d6:c7:fd:bf:f0:10:81:ef:de:2e:71:
         cc:97:7c:63:ef:23:07:c5:83:44:61:60:9b:dc:9d:2c:53:72:
         2d:b0:5d:6a:2f:ef:b9:da:0b:ec:08:be:cd:05:a1:8c:32:a4:
         82:c1:6c:5f:6e:1e:d1:5a:c0:30:6d:39:22:ba:b8:b5:16:6d:
         99:ed:ed:ae:1b:58:2d:2a:7a:51:66:fd:5f:9d:6e:aa:b0:e8:
         3f:85:01:5a:16:45:e0:0a:3b:77:e7:de:a7:99:82:2a:4a:2d:
         59:fa:c3:55:7a:51:98:5a:fa:ee:d2:7c:47:8d:d0:a1:9a:5d:
         31:06:c8:51:68:6c:fb:f0:5f:78:a3:fe:c6:a9:df:ca:50:12:
         1a:ae:91:c3:ac:cd:a7:8c:17:06:91:b5:0d:fc:d1:6b:7a:c1:
         a5:29:70:9d:49:55:c9:b2:a2:d3:55:42:63:cf:2d:9b:ea:db:
         64:03:8d:75:46:f1:4b:09:55:b6:f5:4c:96:13:d0:f7:f9:ca:
         a9:40:d2:04:b9:c7:ba:64:93:4e:4e:b3:fa:1d:19:22:b8:b7:
         29:5c:55:3e:87:ce:4e:34:d0:74:04:70:07:89:06:5e:71:bd:
         54:28:b7:a3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfP9InOyqnRw2r9dUkwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI0MTEwODE1MDUwMFoXDTI1MDIwNjE1MDUwMFowLzEtMCsGA1UEAxMk
OGZmMGUxYWItYzkxNi00YjA5LTk3YTktMjA4ZWM5ZjM4ODEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+cluRO0enNMxiu6jTKPvsKicRXxJxUz4kF6
TU6pV5Ec2crRHl+F26uZRtWDu7T2+F99rrwc1QW/A0FV2VWLDryUDeVMmFeRm/3l
fA1t3HtcYM/juzZFlE+F822Lqr0ZCvsWS4h9T2mayRWC3+ahFXp8W1E/cLD0qPKP
+ZpX6rmwi0ptmr+itp5JYHOk5+2iLCitDVRIooO7b84pEawyK0ERrtrA0OFvzV0N
zQk/uusqWqaA7siV0F1ZsM2UOkxDHNJnMUDk7pMMTb+vZ2HCGQAaMP8uZRDUMLM4
MuTU3xgWUZ4HD8oVXoN1APVvjySRtRqYzvBwufwMQks9YyKpSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE1QqAkDO/8XJ5jgbbObDVjreA3oMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvMzA2NTk2ZTQtMzcwNS0z
YTI0LTk2YmItMDMwYmUxZGI5Yjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmC0GMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAa5USzESP6u1AKaxXg4VbUFGChOJLEm66zWx/2/8BCB794uccyXfGPv
IwfFg0RhYJvcnSxTci2wXWov77naC+wIvs0FoYwypILBbF9uHtFawDBtOSK6uLUW
bZnt7a4bWC0qelFm/V+dbqqw6D+FAVoWReAKO3fn3qeZgipKLVn6w1V6UZha+u7S
fEeN0KGaXTEGyFFobPvwX3ij/sap38pQEhqukcOszaeMFwaRtQ380Wt6waUpcJ1J
VcmyotNVQmPPLZvq22QDjXVG8UsJVbb1TJYT0Pf5yqlA0gS5x7pkk05Os/odGSK4
tylcVT6Hzk400HQEcAeJBl5xvVQot6M=
-----END CERTIFICATE-----
Generated at Sun Nov 24 16:04:25 2024 by rpki-client on console-ams.rpki-client.org