Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e1b22581-fa18-33b0-9835-83116eba7a46.roa
File:                     e1b22581-fa18-33b0-9835-83116eba7a46.roa (raw, json)
Hash identifier:          yt1besgIKNWivb8Hh5WNiS5Hq+wnptKZoVR8+8sskbo=
Subject key identifier:   37:04:B2:D9:F9:25:AE:71:AB:9A:6D:74:1A:0F:5B:74:6D:42:32:7F
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F43285847CFF488A877D4429A9AFBF880
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e1b22581-fa18-33b0-9835-83116eba7a46.roa
Signing time:             Fri 08 Nov 2024 15:04:59 +0000
ROA not before:           Fri 08 Nov 2024 15:04:59 +0000
ROA not after:            Thu 06 Feb 2025 15:04:59 +0000
asID:                     6559
IP address blocks:        152.28.192.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:f4:88:a8:77:d4:42:9a:9a:fb:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Nov  8 15:04:59 2024 GMT
            Not After : Feb  6 15:04:59 2025 GMT
        Subject: CN=1268cdf6-a10d-4f9e-bf23-c1b2db34dc15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:03:37:ac:0d:a7:83:34:a5:a4:68:4a:33:07:
                    cc:91:e7:49:20:d4:2e:eb:48:1f:eb:67:76:65:29:
                    22:59:69:65:db:fe:7a:f7:6d:57:e2:bf:65:8b:e8:
                    a8:5f:e3:01:a7:d8:f1:5f:e8:52:5c:a6:63:70:36:
                    d1:78:e4:ad:67:dd:b9:86:e7:48:1a:1d:da:c4:67:
                    0a:a9:7c:8b:8a:fa:1e:a9:d7:b1:e8:67:b3:bc:b8:
                    d7:ad:76:78:43:63:e9:d7:9e:94:3d:e8:5c:2a:9a:
                    a4:4c:aa:e8:7c:0d:ae:cd:67:30:d6:92:ad:70:fc:
                    8d:d7:d4:c9:08:c8:0c:30:66:6f:44:5d:47:2b:28:
                    a5:bc:00:f6:a5:df:2b:53:8a:18:e9:7e:55:ca:36:
                    bc:35:c5:e3:67:dd:4f:0d:f3:17:fc:ff:ae:98:7a:
                    75:71:f9:60:be:19:4a:f0:be:ee:83:80:9a:31:a5:
                    65:22:a6:8d:33:dc:10:5b:d0:e3:a4:d0:9c:eb:84:
                    77:8f:aa:99:e7:6a:33:f5:96:57:c9:e2:c4:b4:91:
                    a6:37:fe:40:8f:aa:3a:ca:53:e3:d6:8a:29:79:14:
                    5b:f4:4a:63:05:ca:16:f0:1d:13:58:0e:24:cc:1c:
                    ae:a6:f4:ab:06:fd:c5:3a:ab:3b:9e:cf:7a:08:6f:
                    1b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:04:B2:D9:F9:25:AE:71:AB:9A:6D:74:1A:0F:5B:74:6D:42:32:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e1b22581-fa18-33b0-9835-83116eba7a46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.28.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:fb:f7:99:51:f1:4b:99:d9:99:cb:00:52:f0:26:85:e9:37:
         1b:5d:17:41:99:09:ac:aa:dd:b5:db:3f:d9:ea:ca:59:2a:c7:
         1d:ff:a5:12:8a:c1:3b:34:2b:59:ea:44:3a:5f:d0:a3:18:57:
         48:89:45:3d:21:c2:4d:f1:d6:13:a5:9c:72:1b:f3:53:81:8f:
         e9:0d:e7:11:a3:57:a1:cb:c1:a9:a8:46:c8:86:af:48:06:7e:
         7a:14:1b:63:63:69:6b:64:7b:71:72:fd:f3:43:d5:17:12:f9:
         1d:6c:77:b9:0b:d3:39:47:09:1c:67:d9:43:96:14:ec:89:d6:
         93:25:8b:bb:17:13:dc:63:f5:89:b1:67:d8:24:96:67:5f:35:
         ea:55:d4:02:5d:94:7c:a8:95:1d:ce:8e:13:8b:e3:ee:f8:a6:
         63:6d:d9:bd:98:9c:ba:5c:22:3c:40:7f:1d:53:4b:7c:7d:82:
         1d:8d:95:a0:05:96:0e:f6:91:01:9a:87:4a:24:c2:7b:57:05:
         f9:c7:14:03:48:1e:69:a2:2f:fa:59:57:6b:9e:b5:09:cf:e6:
         dc:dd:df:3f:fa:53:f9:da:13:78:34:12:32:a3:58:5b:7a:3b:
         a7:e9:6d:73:45:c6:f7:1a:3b:f0:6f:1d:f4:c2:fc:ee:78:7e:
         36:21:b2:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:37:35 2024 by rpki-client on console-fra.rpki-client.org