Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/150b2426-c419-4e4b-b73d-c495cce8cfdd/bdd55083-6ce6-3837-add9-5ff3851a5c95.roa
File:                     bdd55083-6ce6-3837-add9-5ff3851a5c95.roa (raw, json)
Hash identifier:          eRijWzZbRyu0fdt1o2aIiVihAZLO/Nfd7xEqB+zeicc=
Subject key identifier:   B4:48:BF:D6:6A:35:A3:22:3A:3E:CC:C9:9F:BC:C8:98:6D:F5:F8:F2
Certificate issuer:       /CN=150b2426-c419-4e4b-b73d-c495cce8cfdd
Certificate serial:       010D0C9F4328584716105C14E303E64F2F8A0F40
Authority key identifier: 7B:B0:DE:F8:D8:73:D2:3C:62:65:9C:34:18:FF:AB:19:23:2C:26:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/150b2426-c419-4e4b-b73d-c495cce8cfdd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/150b2426-c419-4e4b-b73d-c495cce8cfdd/bdd55083-6ce6-3837-add9-5ff3851a5c95.roa
Signing time:             Tue 03 Sep 2024 01:00:31 +0000
ROA not before:           Tue 03 Sep 2024 01:00:31 +0000
ROA not after:            Mon 02 Dec 2024 02:00:31 +0000
asID:                     16668
IP address blocks:        192.41.214.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/150b2426-c419-4e4b-b73d-c495cce8cfdd/150b2426-c419-4e4b-b73d-c495cce8cfdd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/150b2426-c419-4e4b-b73d-c495cce8cfdd/150b2426-c419-4e4b-b73d-c495cce8cfdd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/150b2426-c419-4e4b-b73d-c495cce8cfdd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:16:10:5c:14:e3:03:e6:4f:2f:8a:0f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=150b2426-c419-4e4b-b73d-c495cce8cfdd
        Validity
            Not Before: Sep  3 01:00:31 2024 GMT
            Not After : Dec  2 02:00:31 2024 GMT
        Subject: CN=17c2b303-baac-4992-ae37-230b37258d23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:09:2f:4c:da:d5:ca:45:5f:ef:d2:a5:b5:50:
                    a8:2e:72:d4:cb:d9:5e:2f:27:13:a2:3c:f9:ae:8e:
                    92:5c:c5:4a:04:7b:c3:2a:de:55:1b:f2:d7:95:51:
                    ef:7a:cd:ed:04:c1:cc:7f:c8:ae:50:04:8c:2e:5e:
                    d4:c8:28:32:aa:ac:47:41:f9:12:1d:e7:4e:2a:54:
                    cc:74:2b:5d:b3:53:c8:5a:7b:de:d9:6c:c7:3c:61:
                    1f:9a:51:c9:5a:e8:8b:b3:ef:01:6a:8e:1b:05:eb:
                    ae:f8:41:20:73:09:8e:7d:cb:a9:9e:68:34:39:14:
                    2a:4f:8e:e5:57:73:1d:59:d2:88:7e:2e:7f:e0:38:
                    d8:a7:e2:7a:aa:6e:45:09:57:b6:be:d3:ec:72:ed:
                    dd:a1:39:a0:13:fe:ec:21:f3:d3:b5:b7:f8:7a:52:
                    72:be:18:a0:22:09:cc:e3:e1:87:f5:a1:7f:99:0a:
                    f6:b8:dc:9f:06:77:55:51:6e:54:a4:95:16:cd:db:
                    59:55:e8:d3:e7:07:7a:b1:a7:a7:31:49:2b:9e:dc:
                    dc:34:1a:f2:f5:84:55:09:88:77:f2:a9:06:13:77:
                    12:3f:ec:5f:b5:a7:b8:9b:8a:67:83:f6:eb:8b:e8:
                    88:af:4a:ce:64:f3:5d:7f:94:c2:24:07:86:91:61:
                    c4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:48:BF:D6:6A:35:A3:22:3A:3E:CC:C9:9F:BC:C8:98:6D:F5:F8:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/150b2426-c419-4e4b-b73d-c495cce8cfdd/bdd55083-6ce6-3837-add9-5ff3851a5c95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/150b2426-c419-4e4b-b73d-c495cce8cfdd/150b2426-c419-4e4b-b73d-c495cce8cfdd.crl

            X509v3 Authority Key Identifier:
                keyid:7B:B0:DE:F8:D8:73:D2:3C:62:65:9C:34:18:FF:AB:19:23:2C:26:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/150b2426-c419-4e4b-b73d-c495cce8cfdd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.41.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:83:ff:97:30:89:03:ee:72:5e:c5:b5:b6:2a:d5:7d:2e:e0:
         f1:bf:a7:93:5f:c7:01:43:99:b5:d1:60:ae:1d:46:ba:69:82:
         c1:5f:71:bf:60:61:61:34:0a:b1:cf:0a:4f:a5:bd:32:b1:39:
         5c:09:3a:35:a5:65:c2:42:4f:70:7c:d6:50:7c:ef:fd:81:70:
         2f:66:29:bf:45:96:1d:21:4b:bb:c3:71:af:d4:de:31:5b:25:
         f7:05:2d:ef:cd:49:54:5e:df:e2:a6:ee:52:2d:42:b8:db:28:
         b9:47:bd:bc:68:bd:22:45:9e:63:04:50:ee:08:a8:ac:47:7d:
         79:8f:25:89:c0:f2:6b:87:14:05:ed:dc:31:d5:7d:93:6f:a8:
         37:c5:4d:df:76:50:c0:0e:c8:35:de:72:59:05:7d:6e:a5:ed:
         ae:99:ef:68:a4:fa:67:e9:46:10:5e:b5:04:05:bb:a2:b3:a2:
         b2:74:74:92:e2:8e:12:4b:14:17:62:ce:ce:72:71:11:e4:b5:
         d6:16:54:a5:46:96:98:4c:20:05:ad:c8:af:59:59:1f:3f:5e:
         b7:66:ec:07:82:da:2f:a3:fb:d0:9c:52:2a:1d:68:d9:a9:99:
         00:e7:69:58:99:05:ca:c5:1f:33:61:69:00:45:ee:83:18:b8:
         a2:e3:be:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:35 2024 by rpki-client on console-fra.rpki-client.org