Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/ba4b248e-79c9-3541-84a5-dedb0427e48b.roa
File:                     ba4b248e-79c9-3541-84a5-dedb0427e48b.roa (raw, json)
Hash identifier:          bmSzRPP6qQpDmvjvBUPJTeOTZRMF/r0z2mnJ68bfiRw=
Subject key identifier:   27:1F:13:B0:9C:1C:BC:F7:24:30:B0:71:FD:75:04:BC:9A:C7:6E:C4
Certificate issuer:       /CN=88390227-7474-42cc-ab77-86c936657096
Certificate serial:       010D0C9F432858473A5B860168AC8A0D3C0781C0
Authority key identifier: 2A:C4:61:4D:D3:E3:D7:37:5E:4A:B4:61:47:C4:FF:55:D8:49:D3:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/ba4b248e-79c9-3541-84a5-dedb0427e48b.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     16509
IP address blocks:        207.230.151.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/88390227-7474-42cc-ab77-86c936657096.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/88390227-7474-42cc-ab77-86c936657096.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:86:01:68:ac:8a:0d:3c:07:81:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88390227-7474-42cc-ab77-86c936657096
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=07574125-803d-419b-83cd-8fe0706aa80c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:09:1f:28:3b:ce:a1:c2:01:b8:7b:83:68:60:
                    39:60:78:2e:97:40:3d:05:d4:20:fd:13:35:77:2f:
                    2b:91:c1:6f:97:db:46:b0:ce:b3:c7:95:c4:3c:89:
                    10:9d:6d:89:08:a7:14:21:24:66:6e:23:3e:ef:b9:
                    f6:b8:a3:ac:e9:df:97:6d:cb:ae:e2:0b:30:f0:a1:
                    bc:d1:f5:c7:9d:fa:7f:77:9e:b6:7e:db:fd:77:ca:
                    94:0d:b6:e8:0c:b5:c3:b4:51:28:01:ea:b1:cb:82:
                    1d:01:84:28:9a:59:ce:6c:cd:1b:22:27:0f:67:c7:
                    93:13:f6:3f:4f:99:93:50:66:e1:8d:ee:52:9a:0f:
                    9a:a4:2c:06:a6:af:f7:f1:91:b1:40:15:e9:39:41:
                    70:59:10:89:3a:f5:ff:9d:a8:c2:f7:0b:d9:1f:84:
                    68:4c:c0:12:33:9d:e2:41:c5:b2:ea:e9:70:a1:ec:
                    0e:89:ce:ca:01:92:e9:83:95:3b:cf:fe:39:08:70:
                    d2:c8:de:52:56:2b:34:04:11:24:44:d5:bd:e5:87:
                    4c:b7:88:d0:5d:4b:36:af:7e:62:5d:e2:58:5a:1c:
                    5e:63:f0:77:7f:44:8c:e3:d2:d2:7c:97:87:da:2c:
                    fe:85:b9:4d:a4:6c:a1:01:8f:93:e0:bb:08:f0:93:
                    30:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:1F:13:B0:9C:1C:BC:F7:24:30:B0:71:FD:75:04:BC:9A:C7:6E:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/ba4b248e-79c9-3541-84a5-dedb0427e48b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/88390227-7474-42cc-ab77-86c936657096.crl

            X509v3 Authority Key Identifier:
                keyid:2A:C4:61:4D:D3:E3:D7:37:5E:4A:B4:61:47:C4:FF:55:D8:49:D3:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.230.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:9f:5a:00:c8:25:70:8e:b9:e9:e3:e1:93:d8:cb:fb:ac:cd:
         e4:83:da:7a:36:c9:c4:fc:0f:6b:30:89:92:b6:71:fc:30:98:
         6c:a7:34:aa:b2:b8:b0:60:da:ef:5e:6a:09:0d:96:67:dc:25:
         18:3e:54:98:48:66:3b:59:5a:93:7b:a7:a5:31:4a:d3:8d:c5:
         15:b0:98:1d:9f:1d:d0:50:c4:0f:34:30:a0:f0:06:ae:d6:6c:
         85:8d:4d:62:30:6e:31:b8:e8:2e:8f:7b:35:da:a8:09:4d:e2:
         d3:cb:d0:03:5a:a6:38:93:5b:6b:19:86:7b:f7:44:3d:15:55:
         96:67:cc:71:34:99:f1:bc:12:e5:0e:b8:f6:30:8d:6a:59:cc:
         f6:8f:c4:89:ef:a8:cf:e9:a5:52:52:5c:fa:bb:01:a7:88:13:
         0e:80:bc:cb:84:4d:38:f9:69:0a:f4:e1:11:7b:71:ab:91:1b:
         3d:82:0c:18:e0:58:5c:37:97:69:15:4a:c5:96:88:92:a2:34:
         ff:94:77:4c:fc:10:61:ec:e2:ed:07:34:66:b2:b0:32:e7:92:
         d9:2e:12:76:25:56:b7:5e:f0:01:65:b9:6f:9d:be:5b:ea:89:
         3f:4c:f7:fe:92:6f:9e:64:28:d8:29:d6:52:87:40:57:0b:12:
         f1:e0:8a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:17 2024 by rpki-client on console-fra.rpki-client.org