Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/dd95e269-7c40-3c0a-bf42-77a3bf7072c8.roa
File:                     dd95e269-7c40-3c0a-bf42-77a3bf7072c8.roa (raw, json)
Hash identifier:          Wtd+guntdYr4faTgU3eYy2gKAWGKZCg+9H9sRxsJ9VU=
Subject key identifier:   1A:ED:70:6A:C6:44:B0:0B:51:28:E3:3D:33:0B:55:89:05:24:56:F2
Certificate issuer:       /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial:       010D0C9F43285847537B7F082DE98F89D19ED540
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/dd95e269-7c40-3c0a-bf42-77a3bf7072c8.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     23470
IP address blocks:        104.156.150.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:7f:08:2d:e9:8f:89:d1:9e:d5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=bd686ccb-06d6-438b-a0bf-d0371aa5b029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:29:2a:18:82:b5:16:9a:c7:da:6e:18:c1:8c:
                    fe:a9:69:8e:e3:e6:7d:4c:0b:89:a2:fc:fb:cc:19:
                    4c:08:25:aa:37:db:79:13:9f:bb:ba:56:c7:fb:48:
                    e5:d8:07:e3:e2:88:15:c4:98:4d:8c:6c:7b:08:da:
                    42:e1:5f:8c:48:83:2d:12:47:86:f7:72:70:43:0c:
                    7e:0b:06:fa:26:b7:bd:e5:35:f6:41:31:6e:89:cb:
                    e6:f4:93:49:9d:1b:b4:00:6d:69:15:e8:b8:b0:5e:
                    7e:0b:55:42:ed:cb:10:62:3a:5d:e1:4d:d6:85:89:
                    e5:0b:b7:62:cc:e5:a2:a8:5b:c0:66:4d:e1:cb:4a:
                    55:7d:f8:7c:2f:2d:fc:ad:43:67:ea:26:5a:49:b3:
                    7d:7b:c7:61:65:3e:00:58:89:cf:e6:61:8c:22:30:
                    70:d9:90:63:3f:08:68:b9:c0:a0:07:c8:fd:c9:43:
                    75:60:8d:2e:ad:03:33:5d:60:d0:85:d9:60:47:50:
                    7f:d6:9d:75:7c:cb:a3:e6:49:84:a6:e0:3a:9c:0e:
                    f5:91:1a:ab:a5:5b:f7:da:6b:a4:88:ad:52:35:1b:
                    ab:ba:33:e0:7a:69:0f:f0:25:5f:3a:3a:c6:9e:be:
                    7a:51:6e:f4:d8:df:c9:6d:16:f4:25:c8:2b:2b:3f:
                    1d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:ED:70:6A:C6:44:B0:0B:51:28:E3:3D:33:0B:55:89:05:24:56:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/dd95e269-7c40-3c0a-bf42-77a3bf7072c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl

            X509v3 Authority Key Identifier:
                keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.156.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:29:f4:d8:ee:74:6b:89:ae:d8:75:4d:79:5b:b0:9d:4b:78:
         de:01:ca:9c:50:80:50:49:d8:9f:7b:bd:4b:f6:37:2f:0e:03:
         b0:fd:49:43:9a:c8:c8:a6:c0:b0:43:bb:8e:3c:cd:80:82:e3:
         f5:c4:49:9d:52:d2:64:13:17:45:d2:5c:4d:b9:2f:0c:9a:4a:
         5e:42:b9:dd:5c:7a:a7:b2:d6:a0:5b:3a:fa:c0:31:02:2b:77:
         ab:93:a2:bd:e3:1f:bc:12:17:7b:7a:e4:3d:9a:ba:1c:2c:83:
         a0:6b:b8:7d:9e:5a:91:dc:1f:d2:3d:02:03:83:ac:09:2e:aa:
         e3:e0:f8:58:9a:02:3a:dc:39:18:5f:47:1b:67:c1:fd:5e:12:
         fd:c4:2d:c2:99:fa:26:e0:94:39:30:9e:cf:a9:1d:2e:31:88:
         b8:eb:5e:36:d3:71:d9:d6:ca:b4:e3:06:7f:c4:b4:3a:4b:25:
         d0:32:2c:e3:22:16:60:bd:7b:67:a5:6c:9a:48:13:a8:04:42:
         31:7f:5f:89:6a:ed:e1:86:5d:66:d8:d0:dd:17:53:91:67:1c:
         ed:6a:7e:ff:cb:8a:62:e3:79:5b:3a:03:16:09:e8:18:49:c5:
         4a:f3:70:fc:79:30:00:70:68:06:d4:5e:8a:c3:5b:55:b7:24:
         27:ec:4a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:41 2024 by rpki-client on console-fra.rpki-client.org