Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/4caf10e7-8922-3788-847a-b9e5bb1f9a86.roa
File:                     4caf10e7-8922-3788-847a-b9e5bb1f9a86.roa (raw, json)
Hash identifier:          H3vqhHyot9ELqlaIeWhHnuTR6feikvDMEy2qRugEHjE=
Subject key identifier:   14:5E:22:FE:0A:EE:12:C3:EF:F7:96:91:A0:05:ED:A8:A8:53:DD:B8
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F43285847CFF4806276E68A855E93B780
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/4caf10e7-8922-3788-847a-b9e5bb1f9a86.roa
Signing time:             Fri 08 Nov 2024 15:04:55 +0000
ROA not before:           Fri 08 Nov 2024 15:04:55 +0000
ROA not after:            Thu 06 Feb 2025 15:04:55 +0000
asID:                     81
IP address blocks:        152.16.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:f4:80:62:76:e6:8a:85:5e:93:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Nov  8 15:04:55 2024 GMT
            Not After : Feb  6 15:04:55 2025 GMT
        Subject: CN=ae21bd7b-63ad-4321-91a9-f008e76c2ec7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5c:a5:f4:8f:03:15:aa:a3:27:0b:d2:8f:ce:
                    4e:c8:05:b6:07:45:78:0a:18:24:3c:ab:c8:1c:7c:
                    3b:92:eb:b8:ed:ed:34:c8:63:ca:77:29:dd:34:92:
                    03:97:0c:5e:74:82:52:f0:6b:a9:1f:e3:99:c1:58:
                    51:29:f1:5e:1f:b5:10:62:11:46:8e:f6:04:8b:cf:
                    af:cf:68:c0:b7:06:0d:ba:88:4c:3f:92:0a:ac:a5:
                    fd:c8:cc:86:70:15:92:b4:76:c6:4c:02:34:e3:a6:
                    b4:f0:96:de:3d:1b:51:af:d9:56:01:ba:fc:4f:63:
                    ed:71:c9:b8:6a:42:21:54:51:1d:f1:da:bb:dc:a3:
                    d7:26:4b:4a:db:37:e5:98:09:3d:f2:fb:3a:d3:bf:
                    c8:b1:dc:89:46:36:b6:1d:62:03:f2:8b:5c:a9:91:
                    68:30:d6:80:24:91:63:cb:25:c8:0a:6e:f9:70:80:
                    ab:37:50:db:03:28:ff:29:1b:a6:32:d2:2e:45:03:
                    44:80:df:fd:46:70:6b:fb:59:46:79:bc:ab:ee:34:
                    1d:e2:12:de:a3:74:c6:f3:29:64:3f:75:06:32:10:
                    bb:c7:1c:ec:4c:ef:95:db:af:02:9f:8c:10:9a:a8:
                    5e:94:6b:a0:fe:d8:19:24:07:bf:0f:6b:6d:74:29:
                    35:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:5E:22:FE:0A:EE:12:C3:EF:F7:96:91:A0:05:ED:A8:A8:53:DD:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/4caf10e7-8922-3788-847a-b9e5bb1f9a86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.16.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:22:f8:7d:ae:71:27:4d:17:2d:5f:61:d4:77:81:89:9a:f8:
         ed:21:1b:1f:bc:3f:62:28:e0:15:9e:6f:3f:b1:52:c8:d6:05:
         d0:79:99:f8:60:a4:54:85:7e:71:a5:fd:9c:0a:c5:84:a8:96:
         c7:b0:7e:99:45:e2:64:43:d2:69:f5:1c:95:62:3e:24:bf:f6:
         46:e8:17:99:bb:44:29:96:b8:4c:9e:64:76:cb:d4:a4:db:06:
         34:7f:9c:7c:11:35:1a:03:3b:69:09:a5:37:8f:3d:6b:f0:72:
         10:53:5a:23:58:7d:db:3a:b7:cc:0f:5c:97:21:65:a8:d5:7d:
         49:26:b7:d7:b4:69:08:50:b5:e8:7d:f1:eb:61:0c:73:ad:a6:
         bd:60:ad:26:e4:85:c0:5b:d5:48:8a:43:97:b7:da:74:4d:7d:
         ea:d8:ae:3a:05:ab:68:76:70:ee:fa:c9:d3:ec:f7:5c:fa:c3:
         11:e8:f3:e2:99:19:6c:58:f1:38:64:cf:5f:17:5d:26:80:fc:
         6c:38:7e:18:40:4b:13:d3:c2:d6:1f:c4:24:9f:88:cf:57:7d:
         9b:eb:89:12:c4:9a:71:03:8d:08:8a:82:0b:96:55:f4:42:84:
         5c:5b:e4:d9:d9:ff:8f:11:b1:f1:ee:da:57:b6:89:0e:4f:70:
         71:ee:68:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:27:24 2024 by rpki-client on console-fra.rpki-client.org