Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08/b26b18aa-23fe-33bf-b219-a9830a4a5fbe.roa
File:                     b26b18aa-23fe-33bf-b219-a9830a4a5fbe.roa (raw, json)
Hash identifier:          kdkkPX4AEuV35h+cL+CbSDIwpjD19Y3uXe1I4N14N7M=
Subject key identifier:   ED:3B:21:BA:7E:E6:C8:5B:3E:0A:6B:0A:9E:85:0D:2D:FC:19:71:9A
Certificate issuer:       /CN=15a5c850-b5f7-4cfd-b31f-19d51bf3cc08
Certificate serial:       010D0C9F43285847643B749DE0D4CC562B2F8100
Authority key identifier: 26:4F:4E:7E:79:A7:DC:07:8E:0B:25:4D:0F:3A:C5:03:5F:C6:C2:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08/b26b18aa-23fe-33bf-b219-a9830a4a5fbe.roa
Signing time:             Tue 01 Oct 2024 01:00:31 +0000
ROA not before:           Tue 01 Oct 2024 01:00:31 +0000
ROA not after:            Mon 30 Dec 2024 02:00:31 +0000
asID:                     26773
IP address blocks:        144.77.151.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:64:3b:74:9d:e0:d4:cc:56:2b:2f:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15a5c850-b5f7-4cfd-b31f-19d51bf3cc08
        Validity
            Not Before: Oct  1 01:00:31 2024 GMT
            Not After : Dec 30 02:00:31 2024 GMT
        Subject: CN=2e508f6f-ded6-45c9-b411-c6e7e653a9c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:26:a8:86:32:17:c9:32:1b:aa:11:98:fb:4b:
                    6d:02:11:ff:24:42:87:64:e7:6d:50:76:8b:41:53:
                    64:8e:4f:b6:cc:21:c0:d6:73:25:49:26:26:97:8f:
                    eb:e3:fa:a0:bf:de:54:c6:23:4f:d0:85:11:5b:47:
                    8a:55:45:21:d6:5b:48:4d:98:99:3f:9d:4e:0e:58:
                    b4:57:f8:38:c5:e5:50:d5:c4:87:2f:d6:0b:c2:a7:
                    45:e3:1d:38:7f:11:51:9f:40:c8:9c:1a:a0:53:35:
                    96:1d:58:e2:13:97:df:9e:9b:2d:65:41:15:43:b0:
                    0f:d9:76:bb:48:b7:9d:3e:45:fc:5d:47:6c:af:05:
                    d6:fd:58:04:6f:2c:12:c2:92:22:ef:bc:43:ea:43:
                    63:dc:6a:68:fe:71:89:02:72:64:d5:1d:9b:24:5d:
                    45:98:c1:97:6a:be:25:5c:99:25:b8:8e:50:47:78:
                    23:51:8f:3c:73:c8:16:04:d7:af:fa:10:18:03:1a:
                    03:74:e3:7c:09:06:56:d3:85:d7:c9:6c:bc:b4:39:
                    a2:af:5d:af:6b:03:7d:97:3a:41:b1:ee:60:65:63:
                    20:20:1b:d4:ce:9c:ad:32:bf:97:b8:15:bb:57:09:
                    65:c1:6e:71:4b:c7:08:68:cc:7c:5f:03:b8:ce:d6:
                    7e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:3B:21:BA:7E:E6:C8:5B:3E:0A:6B:0A:9E:85:0D:2D:FC:19:71:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08/b26b18aa-23fe-33bf-b219-a9830a4a5fbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08.crl

            X509v3 Authority Key Identifier:
                keyid:26:4F:4E:7E:79:A7:DC:07:8E:0B:25:4D:0F:3A:C5:03:5F:C6:C2:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.77.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:88:47:bb:d7:12:64:c9:17:1d:ce:86:1c:73:84:2c:71:9c:
         db:5c:6b:9a:74:fb:b4:25:68:7e:2b:b8:a0:5e:4b:b3:d8:9a:
         c7:d2:94:e3:cb:96:01:81:f6:da:04:74:b5:6b:80:f0:47:4a:
         86:22:dd:4c:a7:a2:1e:bc:f2:97:04:ab:8d:66:b4:1c:3f:fa:
         42:90:33:3b:fd:4e:12:d7:d2:3c:a1:1b:e2:85:ff:48:c8:57:
         9d:30:72:c7:2f:3f:22:80:4e:57:58:dd:06:37:72:49:4b:70:
         b6:51:35:54:55:85:8b:a1:23:ee:7f:16:0c:a9:20:81:5a:35:
         6b:ef:f8:8f:58:3d:8c:f4:ff:23:10:2e:2f:f3:76:9e:6d:c8:
         18:f1:4b:dc:67:e4:32:bc:e5:75:60:2d:28:bd:5b:d3:42:70:
         d8:2b:f5:7d:a5:4e:95:0e:f3:00:ab:ba:2b:9b:4e:21:81:9a:
         23:7a:65:e1:25:cd:73:fb:56:d9:6f:80:84:50:14:2d:0d:8e:
         0b:8f:7f:3d:51:d2:73:fd:f8:da:59:11:5f:57:1c:d0:1d:89:
         f5:0b:03:39:d7:f0:49:1c:b2:f9:4f:00:f2:d4:74:a5:80:50:
         0a:ff:8e:00:79:ff:b7:1e:4d:ed:43:5c:13:b7:f0:c9:ae:f2:
         fe:30:d0:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:04:38 2024 by rpki-client on console-fra.rpki-client.org