Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/b9ad8e48-79fb-3f03-be70-8ccc5ec80ef5.roa
File:                     b9ad8e48-79fb-3f03-be70-8ccc5ec80ef5.roa (raw, json)
Hash identifier:          yOuADLOMlP638aa5O20zvDYUnmos3Z7Wlu3JmZvQwGs=
Subject key identifier:   16:38:F0:A5:77:D2:E4:E2:27:CA:14:E9:8A:24:64:25:FD:61:CB:66
Certificate issuer:       /CN=5d613e84-be93-4d7a-a56c-57a378f2c325
Certificate serial:       010D0C9F432858475910B2237114D49320384D00
Authority key identifier: 83:D9:7E:E5:89:0D:94:72:A3:71:AF:6B:D0:14:D0:CC:74:D3:1D:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/b9ad8e48-79fb-3f03-be70-8ccc5ec80ef5.roa
Signing time:             Fri 27 Sep 2024 01:00:31 +0000
ROA not before:           Fri 27 Sep 2024 01:00:31 +0000
ROA not after:            Thu 26 Dec 2024 02:00:31 +0000
asID:                     23188
IP address blocks:        150.195.240.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/5d613e84-be93-4d7a-a56c-57a378f2c325.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/5d613e84-be93-4d7a-a56c-57a378f2c325.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:59:10:b2:23:71:14:d4:93:20:38:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d613e84-be93-4d7a-a56c-57a378f2c325
        Validity
            Not Before: Sep 27 01:00:31 2024 GMT
            Not After : Dec 26 02:00:31 2024 GMT
        Subject: CN=0529d49c-ffca-4403-8192-088306350adf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:78:19:e4:c8:c2:ca:2b:49:9f:20:52:08:94:
                    b2:75:2f:ef:ab:5e:1a:c6:ce:65:79:68:18:e9:bf:
                    0e:67:c0:62:78:e4:d6:c1:26:07:e7:da:1a:c1:49:
                    59:f6:63:e8:d6:a6:84:4a:41:94:ca:73:4f:00:e8:
                    a0:a6:37:db:26:14:9a:67:df:73:a2:3f:65:af:b4:
                    c0:20:c9:78:7c:0f:2e:5f:2d:fa:56:12:92:af:b8:
                    0f:c5:09:db:77:aa:29:90:12:2c:30:e3:df:e3:ab:
                    cf:c2:ca:92:9a:fc:5a:84:11:1f:1f:47:6c:8a:2e:
                    80:30:a0:77:f9:ba:04:af:b2:6f:a6:3f:7a:e5:3e:
                    54:2d:18:2d:8c:4f:f4:d6:1d:7b:f4:d9:f0:e9:75:
                    50:ef:67:a7:38:1c:13:3c:5a:a5:c3:41:fa:1b:aa:
                    82:8a:c6:5a:f6:a5:1e:4b:5a:33:cb:8e:e2:74:92:
                    6b:46:11:3f:bd:a2:38:c7:9e:1b:ae:a5:79:2c:e0:
                    71:fb:2e:f3:0f:4c:90:99:14:2c:ec:3f:5c:ae:87:
                    60:af:a7:ce:39:ed:40:21:b0:3e:f6:d3:84:cb:05:
                    c3:35:d3:5c:39:3d:12:75:04:ff:c2:65:92:f0:e9:
                    c7:0a:28:01:ab:04:b0:70:1d:5d:ef:b3:4f:3c:09:
                    7c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:38:F0:A5:77:D2:E4:E2:27:CA:14:E9:8A:24:64:25:FD:61:CB:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/b9ad8e48-79fb-3f03-be70-8ccc5ec80ef5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/5d613e84-be93-4d7a-a56c-57a378f2c325.crl

            X509v3 Authority Key Identifier:
                keyid:83:D9:7E:E5:89:0D:94:72:A3:71:AF:6B:D0:14:D0:CC:74:D3:1D:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.195.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:31:50:56:87:b8:6e:35:db:56:1b:7c:56:bd:86:b5:e6:75:
         d9:a6:2a:64:03:63:28:37:6a:af:6e:6f:aa:92:6f:0f:d3:b9:
         01:5b:2e:bc:fe:d2:5f:3a:ec:1b:f9:85:7c:5a:39:17:7b:74:
         2e:7c:0e:88:74:f5:02:63:27:4c:ec:f6:1f:1a:43:b8:9c:6f:
         56:55:fd:bb:34:4a:a1:9a:83:4a:02:9d:26:c9:ff:73:08:79:
         d1:6d:4a:ce:47:ec:76:a5:29:5d:a1:a2:7c:46:68:5b:b0:bd:
         8c:a8:a6:fd:de:cc:5c:17:bb:31:87:0a:98:da:ac:85:55:2f:
         fe:11:13:76:67:5c:d4:ab:fd:60:69:f7:ae:1b:7f:71:33:27:
         3b:6a:bf:22:56:d6:b9:68:96:65:0d:d8:c0:a6:1e:a4:ca:9c:
         be:30:76:22:8a:2d:59:3b:3c:a5:ba:c6:25:53:8a:6c:e2:ca:
         f8:05:88:38:b3:84:a2:17:94:1d:0a:95:dc:a6:c5:41:0a:eb:
         c8:ec:04:f9:be:e8:58:79:4e:67:c0:9a:0b:aa:4e:05:94:e4:
         ee:90:97:41:8d:50:1c:f8:03:73:4a:d8:d7:5a:28:6e:20:78:
         84:8c:91:9e:ac:ae:aa:32:36:b3:64:33:b6:d2:76:bb:92:bb:
         f7:7e:5f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:32 2024 by rpki-client on console-ams.rpki-client.org