Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/fd7ed3b9-be61-3bf6-afd8-8c239578cde7.roa
File:                     fd7ed3b9-be61-3bf6-afd8-8c239578cde7.roa (raw, json)
Hash identifier:          c+2CimQKTOgobd+UwUBF3I85NzNzVvLROUFhPU2GTjk=
Subject key identifier:   FC:10:04:07:D2:FF:D7:62:89:27:DB:C8:CB:71:12:BF:0C:ED:94:33
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F43285847CFF485451A986CA74BECE900
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/fd7ed3b9-be61-3bf6-afd8-8c239578cde7.roa
Signing time:             Fri 08 Nov 2024 15:04:57 +0000
ROA not before:           Fri 08 Nov 2024 15:04:57 +0000
ROA not after:            Thu 06 Feb 2025 15:04:57 +0000
asID:                     81
IP address blocks:        152.26.179.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:f4:85:45:1a:98:6c:a7:4b:ec:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Nov  8 15:04:57 2024 GMT
            Not After : Feb  6 15:04:57 2025 GMT
        Subject: CN=14ee9d69-4c41-4290-80c6-7f9307d63a08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:82:52:27:f3:42:42:08:b6:69:95:e1:27:91:
                    e5:cd:f4:12:ae:25:09:03:6b:5a:5a:81:e2:3c:d2:
                    cc:fe:ba:9a:06:05:c7:f8:25:b1:41:c0:dd:49:24:
                    5b:ef:c3:d4:ff:86:59:cf:07:2e:b4:2b:8f:e9:b5:
                    a4:ac:f4:ca:9f:c8:17:9e:ee:86:92:82:90:37:a5:
                    91:67:32:0a:f5:ed:d8:0b:eb:4d:4d:9f:bd:57:e9:
                    a8:d2:fe:05:16:b8:97:6d:89:df:7c:1a:2f:31:42:
                    92:5c:66:a7:44:00:45:6b:72:d2:dd:bc:a7:31:8e:
                    50:b3:7e:b5:ba:64:5c:ab:2d:4b:6d:90:bc:e3:16:
                    ad:66:72:9e:a4:65:83:0e:5a:63:41:c9:0f:cd:fc:
                    5d:9b:7f:88:5c:97:24:69:c0:80:9c:92:f9:48:d0:
                    49:b8:55:d7:50:07:a1:d6:48:47:46:5a:79:83:74:
                    ed:e1:d0:e0:3c:ee:8f:ab:81:bb:83:36:36:f0:b6:
                    a4:38:18:e1:80:2a:a5:76:60:9c:87:13:dc:30:af:
                    13:13:90:3b:90:3f:3e:75:43:92:07:7f:ea:06:a8:
                    bd:ec:42:bf:75:a8:55:e2:c5:31:88:f2:2f:08:9d:
                    87:89:87:be:d7:f1:8a:c6:e5:2b:44:29:97:59:bd:
                    04:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:10:04:07:D2:FF:D7:62:89:27:DB:C8:CB:71:12:BF:0C:ED:94:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/fd7ed3b9-be61-3bf6-afd8-8c239578cde7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.26.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:b1:56:4e:31:4c:ea:9b:cc:0d:c5:49:42:35:d4:f5:2d:12:
         74:9a:45:ef:bc:8a:45:69:f4:e0:a0:7c:08:8f:ae:60:3c:44:
         bf:00:1f:75:d0:51:40:ba:9b:e3:f6:c6:ab:1e:ac:ca:be:78:
         09:56:fd:02:95:8c:c0:85:0c:40:16:9b:b7:72:96:99:56:d3:
         26:a5:f7:48:7d:c9:14:26:5c:7b:b3:85:7a:ba:4c:1f:30:63:
         18:d6:a2:f6:8b:29:59:c0:19:de:64:7e:ed:df:6d:02:e3:c6:
         ab:94:40:ae:05:58:26:cb:f1:c3:bb:ec:9e:59:f1:0e:fd:ce:
         87:67:f6:14:23:b4:75:0b:45:7b:6d:4b:8d:7c:86:7a:99:25:
         31:e7:c0:7b:1b:c0:fb:09:b1:b3:ad:3b:42:ae:97:11:50:d1:
         c1:09:42:ac:cf:ae:7b:c2:7d:3e:b4:60:ba:63:58:08:42:bb:
         eb:03:83:bc:8f:83:08:fd:cd:5c:76:45:7a:84:0d:4f:09:34:
         8c:79:96:5e:e3:b7:d8:bc:1b:3b:d0:9c:47:b7:5c:a8:00:0c:
         af:c7:99:f2:a5:ab:94:c3:ec:5f:16:39:21:b3:95:d4:59:b6:
         40:3b:5e:33:5c:03:28:46:fb:cb:3a:49:52:b0:23:48:68:0c:
         73:e4:e2:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:37:35 2024 by rpki-client on console-fra.rpki-client.org