Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff/e10ed7ed-a460-30b5-8436-83e581cb88dd.roa
File:                     e10ed7ed-a460-30b5-8436-83e581cb88dd.roa (raw, json)
Hash identifier:          nEV+Z32bobfrz6U3DuB0saD0dfCAakfmaDL57lRaClI=
Subject key identifier:   F7:B8:F7:13:31:3B:70:B3:BF:22:EF:A5:FF:F7:6B:55:E8:72:91:CF
Certificate issuer:       /CN=804758a5-8bfa-463f-a66c-d50aa7237fff
Certificate serial:       010D0C9F432858483F80396FAB157300FC9AED00
Authority key identifier: C5:AC:F5:21:04:22:63:10:CB:AA:76:9F:4D:D9:1D:6F:49:B9:93:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff/e10ed7ed-a460-30b5-8436-83e581cb88dd.roa
Signing time:             Wed 18 Dec 2024 14:00:52 +0000
ROA not before:           Wed 18 Dec 2024 14:00:52 +0000
ROA not after:            Tue 18 Mar 2025 13:00:52 +0000
asID:                     8987
IP address blocks:        150.148.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff/804758a5-8bfa-463f-a66c-d50aa7237fff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff/804758a5-8bfa-463f-a66c-d50aa7237fff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3f:80:39:6f:ab:15:73:00:fc:9a:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=804758a5-8bfa-463f-a66c-d50aa7237fff
        Validity
            Not Before: Dec 18 14:00:52 2024 GMT
            Not After : Mar 18 13:00:52 2025 GMT
        Subject: CN=d4786fe5-4e80-4cde-bcef-d36e6e2cb1e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b2:9c:bd:fe:40:cf:91:01:6f:5e:9d:e6:41:
                    0b:bd:34:e2:09:9f:03:6c:d4:fe:6e:9e:f3:7b:8a:
                    1b:54:1c:f0:c7:95:af:49:81:3e:f8:02:10:e4:b0:
                    1f:7d:58:6a:93:06:8b:54:7e:3a:2b:94:16:ea:4c:
                    4b:6e:71:4a:9c:ad:a1:60:60:7a:d4:82:d6:8e:18:
                    56:9a:53:70:9a:db:b2:a4:39:ef:1e:0a:cc:e1:cc:
                    44:eb:df:4b:a4:bc:f7:a4:3c:3b:73:ac:eb:4e:dd:
                    cd:53:e3:d3:9f:2c:8d:d2:36:23:dc:a5:3a:a0:b9:
                    d3:07:9b:c9:35:cd:32:60:1d:68:6a:25:62:c0:1a:
                    56:14:d2:3f:1c:c2:3b:38:a1:5f:f0:3f:e5:ba:57:
                    8c:ff:4c:c9:4f:2c:3a:11:14:aa:6f:55:31:d2:20:
                    40:66:e1:30:7b:90:89:e4:be:7b:03:d7:8a:d1:c5:
                    6c:41:18:47:fa:7b:a0:a5:9b:d8:cc:70:b2:74:0a:
                    23:de:11:8a:6f:60:82:9e:2b:7a:52:6a:43:9c:89:
                    10:6c:cc:62:ec:e8:e0:14:ea:f3:cf:b5:94:22:46:
                    67:cd:d1:84:31:61:b2:ca:63:5f:d0:43:3a:bc:38:
                    ca:50:25:c9:2e:41:70:59:96:32:71:06:05:88:80:
                    e2:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:B8:F7:13:31:3B:70:B3:BF:22:EF:A5:FF:F7:6B:55:E8:72:91:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff/e10ed7ed-a460-30b5-8436-83e581cb88dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff/804758a5-8bfa-463f-a66c-d50aa7237fff.crl

            X509v3 Authority Key Identifier:
                keyid:C5:AC:F5:21:04:22:63:10:CB:AA:76:9F:4D:D9:1D:6F:49:B9:93:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.148.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:4d:f2:66:a5:6c:39:80:3d:35:11:80:80:2c:9c:e3:30:49:
         43:ef:9a:06:4e:21:9d:90:36:df:30:f4:f1:89:a8:72:3d:df:
         73:32:c6:68:46:cc:12:03:09:2e:3b:f1:dd:db:67:84:e0:43:
         a7:93:07:78:4c:ad:40:75:28:4a:d5:74:5c:60:f2:90:c9:b4:
         d7:c6:7f:94:c9:da:3e:70:c1:8b:75:e3:ad:68:fc:24:a6:fc:
         b7:3e:02:dd:1b:16:ef:6b:a1:a5:bd:41:be:ee:c7:f7:c1:5d:
         61:9d:45:6a:ff:db:ac:37:cf:1c:58:ed:68:e0:f5:1e:5a:53:
         62:0d:ea:85:b4:b5:68:4b:0f:18:c3:4c:d9:61:53:c4:64:b5:
         d9:c3:9a:4a:a8:ed:41:19:e9:e0:83:91:d1:f7:46:74:3e:43:
         c0:60:a7:e5:e4:c2:ed:e0:12:1f:1b:0c:36:ac:1d:9f:fb:8d:
         05:b8:c4:71:08:2d:fd:e4:7c:1d:68:1b:c7:44:fb:7c:77:ed:
         0f:0b:cd:a9:67:44:d6:39:42:42:9a:7c:f2:00:47:c0:65:1d:
         c5:9f:eb:cb:24:02:8d:ef:d8:75:08:3b:b4:40:86:06:b9:c4:
         80:33:14:5d:e9:f4:63:c1:13:ae:13:ef:0f:c9:20:52:23:29:
         7f:59:8c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 06:38:11 2025 by rpki-client