Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9ab6632f-6428-3146-8796-aa7c747248c8.roa
File:                     9ab6632f-6428-3146-8796-aa7c747248c8.roa (raw, json)
Hash identifier:          wcQyXWzmZHGix920A/Zk9PwJJZyPnxu3vVDvexMGyUs=
Subject key identifier:   A3:B3:7B:12:9A:FE:F6:27:79:50:D7:F8:47:86:DF:1F:8C:CF:CD:C9
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F43285847CFF48DB21B1EFEE4E4D9C980
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9ab6632f-6428-3146-8796-aa7c747248c8.roa
Signing time:             Fri 08 Nov 2024 15:05:01 +0000
ROA not before:           Fri 08 Nov 2024 15:05:01 +0000
ROA not after:            Thu 06 Feb 2025 15:05:01 +0000
asID:                     81
IP address blocks:        152.60.4.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:f4:8d:b2:1b:1e:fe:e4:e4:d9:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Nov  8 15:05:01 2024 GMT
            Not After : Feb  6 15:05:01 2025 GMT
        Subject: CN=3b65b0d2-ef66-4521-a042-7f995d2e5554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:98:57:ad:87:2b:2a:b5:8b:33:2a:95:07:dc:
                    94:29:8b:54:7c:43:c8:73:7c:37:4d:c7:bd:b2:d8:
                    f5:1a:fe:9c:eb:7e:61:57:05:19:a8:c2:19:65:7e:
                    f2:15:e9:95:d6:27:e8:06:8c:56:c6:25:2c:8b:b9:
                    ae:0b:28:9f:db:37:d1:8f:05:77:86:9d:d1:d9:6e:
                    61:b3:41:fd:81:d1:22:cc:53:33:b3:03:44:fd:e6:
                    77:57:dd:16:bf:09:45:fa:6d:c2:4f:f0:5c:6a:9f:
                    22:b3:12:b8:48:41:c1:85:65:29:86:d6:85:be:f0:
                    f5:48:cb:40:8a:3a:a8:87:08:ad:04:9d:c1:14:6a:
                    65:53:17:4f:05:ad:7c:12:54:f8:8c:35:e4:81:bd:
                    75:a4:8e:33:d3:5e:b6:3e:b0:5a:34:1b:61:94:26:
                    cd:99:a0:2f:54:6b:59:3d:89:f0:49:89:d8:89:51:
                    7e:b3:d6:e0:b9:a0:6d:f1:a6:8f:92:ac:d7:a3:47:
                    5a:dc:3e:df:41:ef:c6:c6:7d:70:0f:3b:11:bf:98:
                    c3:6c:f7:18:73:79:39:56:bc:4d:3e:04:0e:81:5e:
                    35:39:10:b5:03:56:28:30:33:c6:a1:27:97:2e:11:
                    88:91:5d:cd:25:ba:c1:81:00:c9:30:25:50:67:91:
                    3f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:B3:7B:12:9A:FE:F6:27:79:50:D7:F8:47:86:DF:1F:8C:CF:CD:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9ab6632f-6428-3146-8796-aa7c747248c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.60.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:61:ab:9e:c6:ca:c2:28:f1:e3:de:0e:64:91:8a:db:e7:13:
         df:6a:c6:7b:27:f1:82:1a:44:c8:fe:26:b2:12:00:e6:10:15:
         be:01:e0:d3:9c:98:77:9e:07:db:25:fd:c3:84:29:15:c6:08:
         6a:b5:2c:7b:da:6e:1c:35:96:9d:ce:7f:13:ad:05:20:e3:42:
         a4:af:e8:11:5a:45:21:e1:d4:83:bd:0a:fd:6e:5b:7b:6e:96:
         b8:eb:35:97:42:8d:46:ad:21:e4:35:b6:bf:69:c8:98:7c:88:
         b7:3b:5f:d7:ce:2f:e6:31:a1:74:18:ae:b9:bd:18:7a:e0:31:
         47:d4:5d:db:1f:6e:a0:f5:cb:fd:8b:20:0c:a8:5e:ae:d5:5c:
         cd:82:a5:dd:bd:84:1d:f6:3e:2a:e4:2c:77:8c:26:77:68:18:
         c5:53:dd:c7:d8:68:24:c8:56:32:0c:a7:8e:1e:5a:e3:41:97:
         cf:67:ba:b6:50:71:2e:26:57:27:3c:01:80:2c:1e:8b:cf:1e:
         83:17:38:8d:d6:a6:10:1d:0e:6f:75:12:63:0f:0f:72:c8:b8:
         b0:c3:e3:13:6c:58:d6:44:a1:8f:cd:82:a9:f5:bb:84:9d:2b:
         71:3f:17:f2:95:68:b3:0b:3b:a2:ad:a7:3b:3b:4c:83:37:55:
         16:f7:4e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:37:34 2024 by rpki-client on console-fra.rpki-client.org