Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/6e935ba7-eeed-3ba5-9a90-345c4292fbd5.roa
File:                     6e935ba7-eeed-3ba5-9a90-345c4292fbd5.roa (raw, json)
Hash identifier:          qrzYm0jdCjKCLxGlaiHoVvgVlTPAtLpi0rBY437D6u8=
Subject key identifier:   E5:DF:DA:5C:4F:0B:36:46:08:29:09:97:17:F5:EC:5F:97:E7:24:16
Certificate issuer:       /CN=109078e4-3ad5-4242-9f3e-058161c97a9f
Certificate serial:       010D0C9F43285847643B714D81C6CFD15D940D00
Authority key identifier: D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/6e935ba7-eeed-3ba5-9a90-345c4292fbd5.roa
Signing time:             Tue 01 Oct 2024 01:00:31 +0000
ROA not before:           Tue 01 Oct 2024 01:00:31 +0000
ROA not after:            Mon 30 Dec 2024 02:00:31 +0000
asID:                     2572
IP address blocks:        150.199.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:64:3b:71:4d:81:c6:cf:d1:5d:94:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=109078e4-3ad5-4242-9f3e-058161c97a9f
        Validity
            Not Before: Oct  1 01:00:31 2024 GMT
            Not After : Dec 30 02:00:31 2024 GMT
        Subject: CN=c778dd10-bf69-4c4a-98a3-f7f12179d709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:4d:8e:da:23:1b:c4:ee:7b:04:b5:77:a4:a0:
                    d9:13:a1:8e:7a:e0:39:a8:d2:a3:43:79:67:1e:b1:
                    0e:c2:ce:68:82:4e:6f:ae:12:90:91:f4:dd:db:fd:
                    ba:12:c1:64:e4:74:0d:ed:6b:b0:db:d1:39:90:d5:
                    85:03:52:91:e3:7b:c5:cf:b0:81:64:0d:72:19:69:
                    5c:83:7a:53:62:28:e7:82:ec:f3:d7:f1:e5:2c:e9:
                    b6:46:cf:67:13:59:f1:26:98:3e:53:ab:2c:71:e2:
                    22:65:9b:92:5c:0b:d4:ef:12:31:ed:fc:6e:79:20:
                    52:e2:1f:99:07:e1:d8:3b:9a:cb:8d:2c:fc:80:6b:
                    b0:f2:dc:3c:e6:1c:cf:13:5e:95:26:0c:d1:19:b1:
                    aa:3b:2e:1b:f7:92:27:32:d5:da:71:00:6a:d1:34:
                    13:0d:88:2b:d6:e8:c8:9b:b9:1f:f6:d7:9c:f6:c5:
                    95:28:8a:cb:51:6c:d5:1c:75:4e:39:7d:61:c3:2d:
                    bb:b7:ce:84:26:3b:09:6a:58:ab:8f:8e:64:6a:19:
                    99:6d:50:7c:ce:7f:a5:0a:1c:79:7c:8a:24:e2:4f:
                    53:da:73:78:06:6f:79:2e:96:a7:c3:b3:a0:bf:8b:
                    60:e6:57:11:08:e8:3b:36:96:4a:53:ac:10:ae:54:
                    d5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:DF:DA:5C:4F:0B:36:46:08:29:09:97:17:F5:EC:5F:97:E7:24:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/6e935ba7-eeed-3ba5-9a90-345c4292fbd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.crl

            X509v3 Authority Key Identifier:
                keyid:D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.199.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:96:8a:cf:c0:dc:8b:b4:39:3d:19:74:32:53:fe:ae:18:4b:
         53:96:de:2e:15:61:7d:50:4b:94:7a:7a:60:39:92:42:80:e5:
         10:c7:f5:ae:94:58:94:90:e6:87:27:50:d3:f5:0a:be:f1:34:
         8f:7f:38:0f:da:31:ff:82:f9:e4:c0:76:f6:bd:9e:df:08:bf:
         27:5a:fa:d0:3a:cf:67:63:fd:f7:69:2a:be:a7:9a:10:10:67:
         2a:7a:27:37:fc:50:79:39:f6:f7:96:74:59:bf:4f:da:ac:08:
         91:91:26:da:97:19:5f:d8:30:9e:23:ba:18:32:80:74:db:65:
         a2:4a:57:93:25:1e:3f:bd:74:bd:dd:95:3b:13:12:ee:2d:db:
         40:c3:02:52:69:96:53:41:66:8a:87:fa:64:35:bc:93:43:b3:
         e0:e0:ce:87:49:1f:c7:5e:09:80:41:a5:d7:53:87:6d:23:bd:
         a8:96:78:e7:a2:2f:c5:7f:98:f8:85:84:0b:5f:59:85:63:bb:
         cf:eb:8d:8e:a5:88:dc:3a:76:39:61:fa:40:16:69:c2:04:ac:
         07:91:fb:78:d3:9a:2b:00:1b:08:a7:cd:ff:7b:65:35:d4:8b:
         95:dd:f0:30:d7:bc:41:c5:67:20:30:8f:04:7d:c2:ae:a8:a4:
         ab:c8:88:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:04:38 2024 by rpki-client on console-fra.rpki-client.org