Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff/e10ed7ed-a460-30b5-8436-83e581cb88dd.roa
File:                     e10ed7ed-a460-30b5-8436-83e581cb88dd.roa (raw, json)
Hash identifier:          fCz1wmpr67Pj0Vr9rbokDx2Dz8Njo6xUnwfP8DrfkZU=
Subject key identifier:   DE:D9:DD:F6:26:E1:F6:4A:32:6A:22:5E:84:74:D7:F0:EA:4C:05:FD
Certificate issuer:       /CN=804758a5-8bfa-463f-a66c-d50aa7237fff
Certificate serial:       010D0C9F43285847600B9DB4BE7FAAAE55F3ED80
Authority key identifier: C5:AC:F5:21:04:22:63:10:CB:AA:76:9F:4D:D9:1D:6F:49:B9:93:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff/e10ed7ed-a460-30b5-8436-83e581cb88dd.roa
Signing time:             Sun 29 Sep 2024 13:00:41 +0000
ROA not before:           Sun 29 Sep 2024 13:00:41 +0000
ROA not after:            Sat 28 Dec 2024 14:00:41 +0000
asID:                     8987
IP address blocks:        150.148.192.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff/804758a5-8bfa-463f-a66c-d50aa7237fff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff/804758a5-8bfa-463f-a66c-d50aa7237fff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:60:0b:9d:b4:be:7f:aa:ae:55:f3:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=804758a5-8bfa-463f-a66c-d50aa7237fff
        Validity
            Not Before: Sep 29 13:00:41 2024 GMT
            Not After : Dec 28 14:00:41 2024 GMT
        Subject: CN=26242abe-eadb-4fab-8f70-c4d2103706ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:bc:b7:e7:72:fa:38:37:7c:58:cb:8b:70:ea:
                    5b:a9:2f:76:65:07:6c:b1:8c:74:55:65:0f:63:d7:
                    f9:29:df:30:4d:18:24:a3:e2:51:93:15:b6:5c:87:
                    86:88:3d:5f:d8:45:e4:24:1d:6d:ec:38:91:0b:68:
                    5d:a8:1c:d7:0d:ec:ec:31:72:af:c1:04:90:2b:e6:
                    54:2d:42:40:be:81:83:cf:0e:75:84:40:46:09:a5:
                    f4:a1:a7:c8:55:d0:c1:00:54:46:63:72:ad:27:10:
                    6c:94:74:0c:db:fb:b9:65:50:54:3e:08:4f:45:46:
                    c0:6e:48:9e:98:2a:54:11:b8:c2:2c:6a:4d:dc:46:
                    f2:b5:ee:37:57:40:cc:c1:d7:ae:ba:d6:ec:64:79:
                    5d:da:d7:7a:23:84:87:33:b4:16:37:96:69:01:67:
                    a9:19:d4:af:87:44:7f:9a:76:60:9b:e7:2e:64:9d:
                    c5:24:24:3d:fd:2d:16:02:81:41:74:f8:c5:4d:3e:
                    94:03:65:5a:7d:8d:2f:8a:da:9a:d7:e5:5f:7c:a0:
                    07:56:36:38:2e:7c:0f:24:4e:d0:6e:16:d6:ca:66:
                    1a:66:59:dd:44:27:77:b6:0c:a0:56:58:6e:ff:59:
                    e2:cb:d1:df:1f:26:64:e8:f7:1d:c3:2a:09:1a:2f:
                    99:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:D9:DD:F6:26:E1:F6:4A:32:6A:22:5E:84:74:D7:F0:EA:4C:05:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff/e10ed7ed-a460-30b5-8436-83e581cb88dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff/804758a5-8bfa-463f-a66c-d50aa7237fff.crl

            X509v3 Authority Key Identifier:
                keyid:C5:AC:F5:21:04:22:63:10:CB:AA:76:9F:4D:D9:1D:6F:49:B9:93:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.148.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:e6:02:77:93:66:69:0c:08:d9:ad:22:ad:9a:05:fb:a0:13:
         2e:d2:38:e8:af:b7:2a:ad:bb:4c:8d:c3:3d:33:77:03:7f:70:
         0f:c1:5e:18:d6:61:7e:06:3f:73:b0:43:27:7a:b3:b4:dd:10:
         5a:d1:22:92:66:f8:2a:63:e8:01:3e:4d:a3:5d:c9:a6:f8:b7:
         e4:23:ac:c5:ce:76:09:7f:ff:70:ce:55:7a:cf:8d:51:b8:07:
         5f:71:53:01:c9:8e:bb:b2:c1:a8:77:b2:2e:54:21:74:b7:5a:
         8f:c7:60:70:67:95:2c:2c:30:e8:64:1e:fe:22:91:1f:a7:ec:
         95:d5:34:c6:d2:a4:6f:85:89:69:3e:87:4a:34:99:56:dd:4e:
         55:c8:dd:26:c8:a4:56:f7:83:69:78:03:00:34:71:54:5c:52:
         71:91:7a:48:ea:0e:02:3f:72:1c:70:f2:2b:c6:10:22:0e:35:
         9e:e0:c4:5a:1c:ec:af:75:5b:b4:9d:42:93:9b:d5:66:fd:11:
         33:b0:41:00:00:91:e5:a2:0a:e3:00:bb:05:70:97:fb:f5:5e:
         81:70:b8:ae:00:0e:6a:cb:9a:6b:74:09:bf:cf:f1:af:3c:ad:
         69:fd:d0:de:33:db:29:be:0a:5f:e1:7f:b3:c2:19:68:b7:da:
         fb:b4:22:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:38:40 2024 by rpki-client on console-fra.rpki-client.org