Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/6a7cc440-c701-3906-b2fe-594c62786924.roa
File:                     6a7cc440-c701-3906-b2fe-594c62786924.roa (raw, json)
Hash identifier:          pD5Do39XCx6u6fUTpeF8ncD9eMUm8dgD7C4oFvBYuiM=
Subject key identifier:   09:13:92:89:11:40:78:13:14:E5:74:03:8A:8A:E7:F7:82:39:D6:5A
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F43285845A15DFF4EE4DACC9833201480
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/6a7cc440-c701-3906-b2fe-594c62786924.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     29538
IP address blocks:        128.1.152.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5d:ff:4e:e4:da:cc:98:33:20:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=4414dbf7-8126-4b19-a907-9a9b92b64363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:16:d5:7d:c8:12:f6:90:2c:de:7b:fa:77:94:
                    a1:2c:42:81:e9:45:40:d5:9e:7c:7d:f5:1f:cd:fa:
                    7d:b3:fa:03:6e:80:7c:e6:2b:14:3b:ba:7c:ef:d0:
                    37:c0:41:e4:90:bd:45:4c:4c:af:06:da:3d:f9:c5:
                    46:9e:6f:18:ac:95:11:0d:8d:f3:fe:c1:38:40:62:
                    63:69:9b:f0:d7:50:3f:8f:5e:78:27:43:92:51:ab:
                    9b:f7:90:f3:86:61:b9:2b:10:bb:84:bd:4d:d8:3a:
                    02:70:3d:fd:bb:e7:5a:0b:e0:25:9d:0c:e5:a4:78:
                    c0:e1:bf:c7:cc:33:61:f6:76:61:d3:96:13:88:bb:
                    f7:11:47:01:4c:1c:b4:ce:72:2f:aa:36:98:fc:13:
                    65:ad:04:2e:27:a8:9c:47:94:18:37:b0:58:30:17:
                    86:15:75:ce:52:89:07:06:ff:81:68:2d:0f:1d:47:
                    22:3c:25:f3:36:0b:1d:09:ea:69:90:c4:e3:f4:4a:
                    e8:7f:77:6f:08:e3:e8:4e:c2:48:a5:77:93:fb:77:
                    8b:5e:11:92:6d:87:40:bb:c8:bc:75:80:61:dd:d4:
                    5e:cd:52:b9:d7:8d:80:e5:64:89:6d:33:53:5e:84:
                    c5:e5:fb:52:53:55:d9:6a:86:b1:a9:3e:32:64:c3:
                    18:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:13:92:89:11:40:78:13:14:E5:74:03:8A:8A:E7:F7:82:39:D6:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/6a7cc440-c701-3906-b2fe-594c62786924.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.1.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:04:c4:ae:fb:c0:5f:e0:8f:cf:70:ac:98:e7:39:88:d8:fd:
         8b:1b:dd:1c:31:e5:69:8d:86:6a:80:08:4b:57:1b:80:4a:60:
         79:66:ae:f3:d0:b6:e1:8c:66:06:af:7d:7d:bb:1e:48:c4:87:
         1a:15:7b:89:89:99:d5:f9:a7:a4:42:c3:e3:37:8d:e1:b2:13:
         14:9e:8d:d6:23:bb:21:0e:1a:d6:4f:a3:42:7b:2a:03:6f:f4:
         4a:06:43:14:e9:9c:d3:94:7f:ae:48:8b:f9:44:b1:5a:23:96:
         f8:88:6d:dc:7c:f6:40:34:c8:ed:20:93:01:55:f0:f7:be:51:
         02:92:a3:84:fa:98:31:ad:21:5e:29:78:da:32:eb:61:d9:eb:
         b9:98:05:15:b6:4f:8b:da:3a:33:0d:43:b9:f2:e0:bc:b5:13:
         15:c1:2e:94:cc:93:ad:66:ae:6f:51:f0:95:29:df:1f:6a:9c:
         d3:65:ed:d5:6d:19:11:0e:ff:36:94:56:f8:f2:67:90:f9:15:
         57:6c:54:5d:7d:48:b3:a5:4f:a4:d5:43:af:11:76:78:94:f8:
         a7:7d:c9:d5:01:8e:72:48:20:db:2f:b1:80:13:6f:d9:69:d9:
         51:b0:c0:a9:da:3c:9f:27:a4:fd:28:9a:11:bf:78:41:04:ba:
         76:53:cb:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 07:51:15 2024 by rpki-client on console-ams.rpki-client.org