Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9f208eee-d802-35b6-8f4c-4c6ecb2f42ec.roa
File:                     9f208eee-d802-35b6-8f4c-4c6ecb2f42ec.roa (raw, json)
Hash identifier:          ChCtsxUc4kPh/xWkG5NbsIFcd8rnSEAVxUFIEph+sss=
Subject key identifier:   1D:2A:BF:DB:F8:CA:68:E0:53:46:BE:37:66:17:55:D5:54:D0:BF:41
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F43285847CFF48804BF4BACD97F02B800
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9f208eee-d802-35b6-8f4c-4c6ecb2f42ec.roa
Signing time:             Fri 08 Nov 2024 15:04:59 +0000
ROA not before:           Fri 08 Nov 2024 15:04:59 +0000
ROA not after:            Thu 06 Feb 2025 15:04:59 +0000
asID:                     81
IP address blocks:        152.26.69.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:f4:88:04:bf:4b:ac:d9:7f:02:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Nov  8 15:04:59 2024 GMT
            Not After : Feb  6 15:04:59 2025 GMT
        Subject: CN=00e9e4ae-8a5b-4d65-8716-4f06e68e6d7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:96:44:ea:8b:0c:f2:10:0a:66:88:64:9b:e1:
                    ef:20:c8:50:07:ba:3c:6a:c9:b4:fb:ee:88:5f:7c:
                    c8:49:42:a3:b5:8c:24:6f:e9:94:df:08:55:9d:62:
                    97:1f:14:63:a4:d1:c5:98:4b:ea:fc:e4:10:03:44:
                    ad:75:d6:dc:af:f9:82:ae:02:ea:76:13:97:32:3d:
                    33:8d:63:dd:ed:56:5b:59:cc:37:3d:71:bb:5a:74:
                    68:7d:ca:0c:1c:05:07:2d:dc:1f:34:11:05:1f:e1:
                    d9:82:77:ee:fd:d0:e7:1d:38:6a:1f:5a:1b:a2:57:
                    08:e7:b6:df:03:7f:f4:38:42:cc:21:f7:f3:f5:cc:
                    7b:ac:fe:11:60:a7:12:1f:76:bb:68:b0:93:75:96:
                    ac:85:9d:95:58:7f:ec:8d:76:90:fb:d8:96:07:83:
                    11:89:e7:90:eb:bf:fb:e4:42:19:ab:fb:c0:a0:0f:
                    fd:e6:bc:9d:89:e7:10:83:ee:f0:18:09:e4:04:77:
                    89:6d:75:cc:cb:47:7b:1b:8e:9a:ac:40:f7:2d:cc:
                    49:2a:68:47:3d:67:cf:b0:d1:53:59:12:3a:f1:b1:
                    e7:a4:2f:11:4d:0b:fa:a8:38:4c:a0:ce:5d:37:d9:
                    f3:07:0a:bd:11:87:3e:c1:11:4e:44:c4:36:8f:31:
                    8f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:2A:BF:DB:F8:CA:68:E0:53:46:BE:37:66:17:55:D5:54:D0:BF:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9f208eee-d802-35b6-8f4c-4c6ecb2f42ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.26.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:32:25:a7:6a:e9:b7:52:4d:72:67:46:e3:62:5f:36:fc:06:
         02:a3:27:42:87:b5:15:05:83:bf:4f:69:63:8b:44:50:e2:c2:
         73:e5:10:c5:82:8c:07:f0:6e:72:6f:6e:9d:6c:34:6f:b1:6c:
         03:56:14:4a:3d:da:d9:a6:6a:d5:a2:65:92:28:61:eb:67:d3:
         dc:5b:e3:ea:52:69:5e:d5:18:b1:fb:f0:0a:9e:7b:4e:9a:47:
         52:99:e3:aa:a6:8e:a2:f4:2f:61:07:40:e3:81:8c:d8:a5:c7:
         a9:37:b8:d8:03:9c:40:bb:f6:01:73:1e:af:9f:ad:05:66:33:
         cf:d4:01:e8:b1:ca:42:fc:3f:d7:36:4d:bb:78:3d:3a:57:b3:
         25:88:76:fc:64:fe:0a:64:1a:5a:0a:fe:68:29:22:83:90:db:
         63:09:b2:de:e6:d8:05:9a:7f:c8:3c:d5:2d:60:fe:b7:c5:8a:
         34:c7:ae:e9:70:f9:6e:f2:a9:89:7b:00:64:a8:90:21:7a:2f:
         7b:88:bd:9d:f5:30:96:a2:5e:fa:35:68:40:f1:1f:e3:f2:09:
         c5:3d:b8:16:35:45:8b:99:de:82:fe:dc:ef:0f:08:fd:97:5e:
         6b:77:c0:83:69:4e:09:0b:ff:d1:6f:95:a3:c7:c6:2b:c9:46:
         d7:5f:71:97
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfP9IgEv0us2X8CuAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI0MTEwODE1MDQ1OVoXDTI1MDIwNjE1MDQ1OVowLzEtMCsGA1UEAxMk
MDBlOWU0YWUtOGE1Yi00ZDY1LTg3MTYtNGYwNmU2OGU2ZDdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5ZE6osM8hAKZohkm+HvIMhQB7o8asm0++6I
X3zISUKjtYwkb+mU3whVnWKXHxRjpNHFmEvq/OQQA0Stddbcr/mCrgLqdhOXMj0z
jWPd7VZbWcw3PXG7WnRofcoMHAUHLdwfNBEFH+HZgnfu/dDnHThqH1obolcI57bf
A3/0OELMIffz9cx7rP4RYKcSH3a7aLCTdZashZ2VWH/sjXaQ+9iWB4MRieeQ67/7
5EIZq/vAoA/95rydiecQg+7wGAnkBHeJbXXMy0d7G46arED3LcxJKmhHPWfPsNFT
WRI68bHnpC8RTQv6qDhMoM5dN9nzBwq9EYc+wRFORMQ2jzGPnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB0qv9v4ymjgU0a+N2YXVdVU0L9BMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvOWYyMDhlZWUtZDgwMi0z
NWI2LThmNGMtNGM2ZWNiMmY0MmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmBpFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD0yJadq6bdSTXJnRuNiXzb8BgKjJ0KHtRUFg79PaWOLRFDiwnPlEMWC
jAfwbnJvbp1sNG+xbANWFEo92tmmatWiZZIoYetn09xb4+pSaV7VGLH78Aqee06a
R1KZ46qmjqL0L2EHQOOBjNilx6k3uNgDnEC79gFzHq+frQVmM8/UAeixykL8P9c2
Tbt4PTpXsyWIdvxk/gpkGloK/mgpIoOQ22MJst7m2AWaf8g81S1g/rfFijTHrulw
+W7yqYl7AGSokCF6L3uIvZ31MJaiXvo1aEDxH+PyCcU9uBY1RYuZ3oL+3O8PCP2X
Xmt3wINpTgkL/9FvlaPHxivJRtdfcZc=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:37:34 2024 by rpki-client on console-fra.rpki-client.org