Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/eb9326df-0150-3250-b938-62f7bde0ad4b.roa
File:                     eb9326df-0150-3250-b938-62f7bde0ad4b.roa (raw, json)
Hash identifier:          uvTxDfBY9vqKt0fjZZ3+hRybX8/JFUrHAs4grasGm7g=
Subject key identifier:   AF:91:51:C9:CD:BF:F0:BC:EB:BE:A6:86:93:CD:14:B7:14:5F:0C:37
Certificate issuer:       /CN=86b35f71-51ac-43ff-b604-cba3552c4c8c
Certificate serial:       010D0C9F43285845777DCF9E879B7933D3DD3CA8
Authority key identifier: 64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/eb9326df-0150-3250-b938-62f7bde0ad4b.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     399441
IP address blocks:        104.153.150.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:cf:9e:87:9b:79:33:d3:dd:3c:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86b35f71-51ac-43ff-b604-cba3552c4c8c
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=b655b33e-beab-4089-b75e-764518cde357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c3:ce:60:c9:11:e6:f5:98:3d:d5:53:0c:33:
                    dd:2e:7d:c0:e7:52:58:f9:7a:99:66:ac:e1:36:56:
                    49:64:74:8b:83:0a:bd:2c:56:01:5e:29:41:ad:c2:
                    59:df:06:96:4a:ca:ff:b5:82:25:51:f5:fd:1a:33:
                    57:d7:66:d3:14:61:90:0f:f7:f2:f4:a6:24:8f:f2:
                    3f:2e:9f:cd:7c:cc:f5:f6:99:32:ea:01:6c:44:8a:
                    19:84:a8:6e:98:19:0b:0d:55:28:b0:50:4f:4e:ee:
                    c7:eb:da:2b:88:aa:58:3a:97:2a:25:82:d7:9c:4e:
                    0c:67:9d:6c:5b:46:54:60:5a:b3:b2:10:fa:83:21:
                    04:f9:b2:75:9c:2f:8c:d8:2b:f1:5b:62:14:b6:7d:
                    f1:89:fa:11:b5:1d:9e:5a:c2:c1:36:bd:9a:88:f2:
                    d0:c4:45:e9:63:88:a5:51:8f:96:33:fc:7e:1c:cd:
                    6c:4a:f7:58:00:a1:80:80:38:4e:41:28:22:89:61:
                    8c:79:56:82:ec:00:9d:68:58:3c:33:15:92:5b:48:
                    8d:38:97:34:78:7a:c4:cf:56:2d:e6:89:50:08:22:
                    0f:e7:31:dd:b0:42:96:cd:81:3e:de:bd:43:03:f3:
                    62:d5:2a:6b:a9:2d:1c:dc:ab:fc:b8:f6:67:7a:17:
                    27:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:91:51:C9:CD:BF:F0:BC:EB:BE:A6:86:93:CD:14:B7:14:5F:0C:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/eb9326df-0150-3250-b938-62f7bde0ad4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl

            X509v3 Authority Key Identifier:
                keyid:64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.153.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:fa:a1:21:12:2d:f8:be:6d:c8:0a:0b:cf:8a:1a:03:42:b4:
         f9:45:73:cc:d0:d5:43:d0:ac:d7:d2:1e:e8:6f:5c:9f:38:bb:
         d9:8a:0f:2f:69:53:d2:bc:d3:2b:f2:c6:07:de:24:c0:23:78:
         95:9a:f5:63:0c:52:48:17:bf:e9:a1:19:76:04:9e:5c:e0:e1:
         bb:71:27:da:ba:41:c5:53:20:9c:a5:99:14:05:31:d0:a0:98:
         19:76:ea:23:a7:37:2e:08:a7:18:96:1c:e5:82:2e:25:33:ca:
         37:64:66:e6:6f:46:96:c7:36:cf:be:7e:93:21:3a:f2:21:be:
         fe:53:e3:36:6d:2c:1e:7c:db:c6:6b:25:08:c5:f3:46:3c:d8:
         df:e3:65:d6:60:75:32:5c:ab:07:0f:a5:83:f4:1c:b5:a0:47:
         c9:80:af:cf:a1:58:0f:0a:04:09:d4:54:78:8c:e9:fa:89:6d:
         5e:85:eb:9c:9c:58:86:72:d3:3d:a1:f4:39:cd:46:bf:7b:d4:
         d1:36:48:ef:27:3a:67:e9:ea:a2:79:ce:b3:c8:0d:a7:69:b3:
         be:26:a1:94:16:e2:b3:d1:06:c0:3a:5c:09:fe:6c:a2:b3:9a:
         1b:f3:01:25:e2:81:cd:37:d8:a3:7b:21:86:10:d7:53:9c:1f:
         71:c7:3e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:01:02 2024 by rpki-client on console-fra.rpki-client.org