Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/582ecfb5-56b8-3ec5-900e-e804feb4a7d2.roa
File:                     582ecfb5-56b8-3ec5-900e-e804feb4a7d2.roa (raw, json)
Hash identifier:          TYrROTz9IutxCby6Z8auHbAN2tOkiq5lzTokpfGlojc=
Subject key identifier:   B4:FA:37:AD:E4:5B:0C:B3:E0:DC:CD:7C:46:20:B1:6D:2C:39:5A:F2
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F43285847CFF4856FE9E54A7CF7058B80
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/582ecfb5-56b8-3ec5-900e-e804feb4a7d2.roa
Signing time:             Fri 08 Nov 2024 15:04:57 +0000
ROA not before:           Fri 08 Nov 2024 15:04:57 +0000
ROA not after:            Thu 06 Feb 2025 15:04:57 +0000
asID:                     81
IP address blocks:        152.26.181.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:f4:85:6f:e9:e5:4a:7c:f7:05:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Nov  8 15:04:57 2024 GMT
            Not After : Feb  6 15:04:57 2025 GMT
        Subject: CN=dd0472f2-b56e-470e-b643-ca8cde680ddc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e6:8b:12:70:ab:0a:d9:aa:34:eb:01:0f:9b:
                    ee:6c:1f:95:7e:55:98:95:c2:7f:e4:f5:b8:83:be:
                    e4:89:a8:d2:85:c1:1f:fa:e6:10:60:32:6d:23:1f:
                    d0:33:d7:f4:7c:c0:0c:fe:18:52:ff:59:ae:bf:14:
                    ea:6e:34:bb:33:f6:06:c4:08:ed:7c:f9:1d:b1:93:
                    cd:97:fa:86:d1:84:47:75:c4:b2:c5:f6:6f:95:a3:
                    6f:ea:71:22:4e:a0:0f:d4:b4:36:a3:54:19:e3:2e:
                    b3:c4:ae:ed:d4:4a:69:f0:ae:0e:83:88:23:33:3a:
                    40:c6:3f:b6:f5:75:44:fe:f1:cb:27:d8:a2:d3:6e:
                    26:d8:44:53:8b:ab:39:e6:16:38:8c:3c:d4:1e:3c:
                    f3:c0:81:33:6d:1c:d8:b3:03:7d:f0:1c:f6:39:fc:
                    5f:dd:89:90:20:af:dc:0b:99:7c:40:7f:7e:df:38:
                    0f:ef:7c:c5:05:8a:be:cf:65:3b:9d:89:1f:45:a0:
                    94:99:16:7e:b4:ed:f0:41:f7:8b:7c:f3:c4:38:2e:
                    52:64:a9:c3:64:7c:80:95:c6:d5:56:11:0e:8b:f0:
                    61:a7:88:34:6b:c2:bf:12:2c:6f:55:f5:4b:1a:95:
                    8e:45:42:23:65:2d:51:40:0c:09:29:8f:14:09:1c:
                    9a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:FA:37:AD:E4:5B:0C:B3:E0:DC:CD:7C:46:20:B1:6D:2C:39:5A:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/582ecfb5-56b8-3ec5-900e-e804feb4a7d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.26.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:a6:39:9e:d1:92:e0:bc:11:2a:eb:2b:57:97:fe:46:6b:f7:
         94:2f:0a:99:09:07:d8:0a:2f:e9:e6:2e:e3:64:38:4d:5d:26:
         43:27:70:bf:e5:02:a6:89:2f:de:b8:d1:6d:b4:34:6d:2f:a0:
         4e:5d:13:76:2b:71:a0:d1:a1:f5:0f:3a:66:40:8d:86:50:94:
         ae:99:fd:74:19:b2:e6:ca:e1:95:11:52:9e:af:72:8d:26:91:
         cc:14:22:16:9a:1d:b2:10:f9:57:d2:c1:d8:71:1b:e3:52:ca:
         d4:66:6f:cf:2d:74:63:d9:a9:15:51:a0:bd:ef:d1:bd:7b:1a:
         27:4d:a4:87:92:0f:d5:37:b9:23:41:f3:1a:64:dc:89:7e:2d:
         e3:08:87:6f:05:dd:16:5a:73:93:6f:5a:14:1e:ad:fd:45:31:
         25:8e:24:3c:16:31:57:c8:6f:41:79:fa:6b:4d:ac:29:b8:bc:
         25:5c:71:4d:f4:71:37:b9:d5:5b:d2:d5:d8:3e:ed:68:5e:19:
         d2:b5:cc:48:2e:1c:1f:61:6a:71:d2:2d:9e:ba:10:7d:55:d2:
         3d:ab:f9:84:5c:ee:08:72:58:e0:ca:36:88:a8:ee:8a:92:70:
         7f:5f:b9:8d:2c:5d:1d:81:38:cc:f5:87:a2:1e:64:84:3a:ca:
         86:29:d7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:28 2024 by rpki-client on console-ams.rpki-client.org