Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/78ff09fd-92a5-3eca-a2de-4d319b9fb608.roa
File:                     78ff09fd-92a5-3eca-a2de-4d319b9fb608.roa (raw, json)
Hash identifier:          I6nPu9siL9/rH4JzJScYppxsx2zFl6iV7JMz/wxji90=
Subject key identifier:   98:E8:E1:56:41:DF:35:E7:9C:46:DF:64:55:95:40:C2:94:A2:F2:F7
Certificate issuer:       /CN=a2159823-806a-4879-9de9-7be634e8cd31
Certificate serial:       010D0C9F4328584761718EB9BF639F322CB85400
Authority key identifier: A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/78ff09fd-92a5-3eca-a2de-4d319b9fb608.roa
Signing time:             Mon 30 Sep 2024 01:00:31 +0000
ROA not before:           Mon 30 Sep 2024 01:00:31 +0000
ROA not after:            Sun 29 Dec 2024 02:00:31 +0000
asID:                     13945
IP address blocks:        151.193.122.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:61:71:8e:b9:bf:63:9f:32:2c:b8:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2159823-806a-4879-9de9-7be634e8cd31
        Validity
            Not Before: Sep 30 01:00:31 2024 GMT
            Not After : Dec 29 02:00:31 2024 GMT
        Subject: CN=e2e3c12f-cb72-4f67-b24c-bd331d590b6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c6:5f:3b:9a:12:90:a4:bd:5f:67:70:f9:7b:
                    85:2e:af:9a:ea:f3:f7:db:fd:b8:2c:7d:d1:71:14:
                    64:7f:0e:f7:4c:8b:28:82:d7:2b:28:d7:12:d8:0d:
                    55:66:02:2b:77:a5:60:6a:a9:8b:5a:c4:20:53:50:
                    2b:ce:7e:de:ca:94:cb:41:88:43:9b:f3:9d:b7:2f:
                    84:fc:7f:1f:36:dc:a2:03:25:9e:b3:29:0b:3d:d6:
                    89:14:19:20:6d:56:cf:80:3c:80:d2:ef:6d:3e:86:
                    ad:a9:7d:1d:56:b3:ca:59:cd:04:58:76:24:c4:a4:
                    31:45:f0:a3:1b:5b:dc:9d:a0:73:00:36:5e:85:f4:
                    a5:f5:55:47:a5:47:cf:9b:d1:b6:2f:d2:ca:39:3a:
                    c8:c8:15:f6:1d:b9:30:f1:3a:6c:3c:e2:37:a7:ad:
                    0c:d7:8d:36:ba:4d:2e:96:bb:25:0a:5a:c6:24:27:
                    98:a9:7c:77:76:a7:5e:49:e4:d1:b8:80:28:fe:e8:
                    dd:8f:39:51:98:ea:8a:b4:aa:1a:49:c6:f8:29:59:
                    1e:8c:50:19:c5:dc:d9:3e:1b:83:5e:fd:c7:5b:30:
                    23:b1:6c:c8:95:b6:45:cf:fa:0e:d4:c5:c1:94:f3:
                    3a:67:1e:b5:cb:16:60:e3:a9:75:73:c1:2f:28:76:
                    3f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:E8:E1:56:41:DF:35:E7:9C:46:DF:64:55:95:40:C2:94:A2:F2:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/78ff09fd-92a5-3eca-a2de-4d319b9fb608.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.crl

            X509v3 Authority Key Identifier:
                keyid:A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.193.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:b4:d9:33:2a:3f:f5:52:ba:18:6f:b8:a1:d0:61:d7:2f:9c:
         d5:9a:be:ff:2e:29:23:83:c3:13:94:3a:90:db:02:13:63:10:
         a4:20:2e:d0:09:ff:04:42:5d:c5:f5:ea:49:c7:1d:63:e8:42:
         13:bc:31:f4:c3:9a:3d:c1:38:f3:99:a2:e3:c6:db:66:3f:7e:
         03:22:66:57:c7:69:89:67:a5:00:85:c1:93:3f:6c:3a:3d:6c:
         b7:c3:50:48:ba:53:2b:57:30:20:3a:83:26:bb:bd:bc:16:80:
         5b:86:94:c9:cb:a8:2f:95:95:ab:38:d9:e1:50:fd:e9:de:0b:
         0f:31:61:b1:bb:8e:59:9e:d8:f4:ff:d7:06:79:53:db:f0:12:
         ed:4a:65:7a:76:6c:2a:fc:ec:3a:48:82:cc:ab:2c:04:b0:c5:
         02:0d:38:11:33:48:aa:b1:c5:03:fd:cc:2d:e6:0b:1c:02:4d:
         7a:21:7b:c9:80:16:e7:05:1b:71:5a:80:c0:95:3f:64:a6:07:
         65:71:91:b6:61:fb:12:f0:66:c8:60:ad:56:39:1e:22:c1:7f:
         0d:82:e7:a2:c1:0f:d5:20:26:c6:33:17:76:69:4e:d8:a4:86:
         69:25:25:a5:0b:73:e1:b2:c1:83:ed:7f:85:ad:13:15:c9:26:
         d9:35:06:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:41 2024 by rpki-client on console-fra.rpki-client.org