Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/14990178-c30c-3376-a5ad-8df6ed3a6b93.roa
File:                     14990178-c30c-3376-a5ad-8df6ed3a6b93.roa (raw, json)
Hash identifier:          MxD/OFhiKq/QDzgBKRfFUB3GkkpDobNJXptCfFcyTYo=
Subject key identifier:   7C:05:C3:F9:98:A7:84:57:27:4E:AF:5F:76:65:67:4D:ED:81:C5:9D
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285845CE08FF301D69F946004F8480
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/14990178-c30c-3376-a5ad-8df6ed3a6b93.roa
Signing time:             Wed 08 May 2024 13:00:34 +0000
ROA not before:           Wed 08 May 2024 13:00:34 +0000
ROA not after:            Tue 06 Aug 2024 13:00:34 +0000
asID:                     397224
IP address blocks:        156.154.54.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 May 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ce:08:ff:30:1d:69:f9:46:00:4f:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May  8 13:00:34 2024 GMT
            Not After : Aug  6 13:00:34 2024 GMT
        Subject: CN=0b7a7a35-1dd5-48eb-8fae-cdb6339a5071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:20:05:90:be:5e:83:d2:33:67:84:f4:62:e2:
                    d6:99:72:23:89:4d:51:94:eb:85:bc:3b:f1:91:dd:
                    b4:0b:85:0b:25:cb:f6:e1:3f:bf:db:26:2a:0b:12:
                    ac:14:aa:e3:f9:41:61:68:ec:85:71:bd:21:14:31:
                    7b:30:48:bf:4a:ee:e0:80:19:a9:0f:a5:3f:8e:e2:
                    40:0a:49:04:58:1f:d7:29:e7:a3:b8:83:cd:5c:aa:
                    25:2c:67:3c:eb:2f:a0:91:a5:8b:3e:be:fc:b8:33:
                    6a:6b:05:59:61:dc:a2:ae:17:06:7b:89:16:da:1e:
                    8c:6f:57:ae:9a:5a:ca:9a:14:55:12:70:27:77:12:
                    52:89:0a:fb:95:39:8f:f2:54:e9:98:23:53:b3:f0:
                    3e:b9:89:f7:e2:22:73:79:3c:3e:48:ab:72:12:0d:
                    09:66:74:4d:75:be:7b:f3:ec:51:f0:db:7d:08:b9:
                    67:ff:9b:fa:35:d2:da:30:c5:ea:c0:87:0b:d2:5d:
                    47:75:f2:45:de:55:05:15:38:f8:9f:c4:18:cd:54:
                    30:03:11:ea:5b:89:49:2d:8d:7b:00:7e:28:f0:e3:
                    bc:57:37:c0:df:46:ab:ce:47:19:95:3c:f5:36:a6:
                    72:73:16:46:36:d2:c9:85:27:ec:dc:63:19:bd:d8:
                    b7:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:05:C3:F9:98:A7:84:57:27:4E:AF:5F:76:65:67:4D:ED:81:C5:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/14990178-c30c-3376-a5ad-8df6ed3a6b93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:62:e2:14:bd:cd:51:ba:5d:2b:1b:c4:e5:be:eb:d7:1d:3c:
         e6:b7:d6:87:5b:47:51:4d:b5:36:fc:d2:e7:eb:71:fd:41:4a:
         bc:88:a7:c6:6e:32:62:2c:a2:68:e5:cf:37:c6:89:a1:9a:af:
         a6:00:b3:81:bd:28:95:d9:ed:76:ec:4b:d3:ae:c4:bb:66:0a:
         5d:c8:67:a9:35:32:e6:59:ea:06:3f:87:0f:a0:da:1f:c4:6d:
         fa:03:f8:8a:6f:8d:86:24:c9:fa:af:38:e9:01:d1:b5:37:2b:
         72:97:a0:a6:6e:aa:95:84:bf:a5:88:d0:1b:cd:63:7a:e5:d7:
         b9:ca:fe:4f:74:d6:c0:f6:2c:41:f5:be:3a:09:7f:b4:de:e9:
         d8:71:40:bf:9e:f0:29:e0:a9:69:3e:5b:06:b5:68:31:71:dd:
         83:cf:d7:ff:de:ae:52:64:55:28:12:03:f7:46:22:0d:e5:90:
         5d:55:29:7d:a9:b9:df:b2:28:50:b3:a8:f9:c3:67:c8:e9:9f:
         bd:11:90:0f:8b:28:48:6c:6a:9a:3c:18:4f:49:8f:7d:50:cc:
         4c:c4:19:a3:81:77:20:e4:2c:cb:eb:35:b7:1c:73:26:d0:97:
         b5:2f:5a:35:d9:b5:9d:f7:74:24:60:0a:b8:a8:91:89:0c:dd:
         49:c3:ea:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 15:09:05 2024 by rpki-client on console-fra.rpki-client.org