Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/c75bc56e-ab55-39c9-b16a-ba4b38bc447e.roa
File:                     c75bc56e-ab55-39c9-b16a-ba4b38bc447e.roa (raw, json)
Hash identifier:          ABu16MjGLmnNb2VGvba8hAg8pZVqvR858g+GET+lfXw=
Subject key identifier:   B5:F7:BC:E0:6B:32:21:FC:D4:64:34:49:C2:FD:2F:27:EF:E2:61:BC
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F43285847CFF4886173DB8F186EA2BA00
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/c75bc56e-ab55-39c9-b16a-ba4b38bc447e.roa
Signing time:             Fri 08 Nov 2024 15:04:59 +0000
ROA not before:           Fri 08 Nov 2024 15:04:59 +0000
ROA not after:            Thu 06 Feb 2025 15:04:59 +0000
asID:                     18538
IP address blocks:        152.26.88.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:f4:88:61:73:db:8f:18:6e:a2:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Nov  8 15:04:59 2024 GMT
            Not After : Feb  6 15:04:59 2025 GMT
        Subject: CN=51fceff6-0770-421e-a07a-8ec92fb85863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:79:84:d3:83:e8:01:41:40:83:ee:b7:2b:13:
                    13:00:aa:65:db:b8:f1:fd:0d:a0:80:91:e0:df:98:
                    c7:21:10:0a:04:5a:71:38:02:80:11:be:ed:36:b6:
                    48:fa:f1:0f:72:d6:a8:cb:a6:8c:c9:08:3a:ae:c0:
                    6f:4f:0c:43:65:ea:b8:63:7d:fa:f0:87:03:45:6a:
                    53:99:c9:37:9a:09:ad:2f:87:17:80:dc:8b:60:1d:
                    bb:21:f9:19:39:2c:14:6c:24:ed:b8:61:0b:eb:6b:
                    bb:00:f1:9f:bf:41:81:3d:2e:9c:09:b2:15:f0:50:
                    81:fd:ef:35:d1:35:0e:a7:03:2b:ed:35:43:95:5b:
                    b5:01:b6:8d:c3:e2:c4:37:39:b2:93:c8:88:ae:4f:
                    20:34:a4:f0:c5:10:d8:d7:73:73:3f:36:79:6e:a6:
                    a2:16:82:8e:fb:25:7f:14:ea:df:a0:9a:96:d6:a7:
                    b7:6c:7f:05:3e:47:be:d0:3d:80:99:03:b5:ca:93:
                    86:a9:db:6b:e8:94:a0:08:1b:a2:e5:46:14:b7:96:
                    ce:8b:14:94:64:26:ea:ee:18:29:e0:cd:9a:d7:32:
                    c4:73:10:ac:d8:5a:b5:05:13:2b:70:b6:85:34:d0:
                    55:a5:e8:92:d7:02:f7:71:c0:cd:df:f5:76:17:6f:
                    8f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:F7:BC:E0:6B:32:21:FC:D4:64:34:49:C2:FD:2F:27:EF:E2:61:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/c75bc56e-ab55-39c9-b16a-ba4b38bc447e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.26.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:56:4c:64:a2:16:fe:51:db:da:89:10:54:c1:5f:7d:ee:ee:
         1a:8e:f0:d0:80:02:07:c9:8e:9f:82:c7:62:16:a9:39:95:13:
         79:a0:33:f6:fd:ce:59:89:a2:62:62:39:e9:c1:22:f8:50:a7:
         60:63:0e:7a:77:28:57:fc:4f:f9:99:de:58:c5:9e:a9:d1:5e:
         c3:ea:c3:6d:ae:45:95:d4:46:ef:15:1e:cb:4a:5f:88:c7:95:
         f3:b9:69:fd:a7:13:18:56:02:a3:92:a4:7b:f6:d7:a3:34:76:
         30:f2:9a:15:f4:ba:63:4d:7a:4e:b1:43:ff:8d:20:03:31:f0:
         fa:34:54:b1:44:ab:20:35:49:15:c2:50:5d:78:ba:4e:50:3a:
         9e:a4:f4:00:d0:77:84:47:b1:2d:2f:7d:03:1a:11:a0:08:05:
         80:91:fd:71:2c:5c:88:1f:d1:44:ee:c7:b8:8e:bc:db:7a:c8:
         77:bf:fe:90:61:e2:1f:b8:91:e8:d3:e8:bf:73:4c:aa:9b:0d:
         98:70:74:fa:52:ee:1a:4f:04:17:d7:33:d1:f3:19:85:db:48:
         86:d0:5b:0d:0d:e2:08:9c:28:c3:40:d2:79:3c:13:4f:0f:7a:
         82:59:52:00:c7:99:cb:03:94:d3:a2:ac:bb:22:84:a5:ae:86:
         2c:8a:6a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 16:04:27 2024 by rpki-client on console-ams.rpki-client.org