Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5564d4ee-0915-32be-9576-1592bad0fa2e.roa
File:                     5564d4ee-0915-32be-9576-1592bad0fa2e.roa (raw, json)
Hash identifier:          gos8X0nQVHzAsibbOEtJ7eN2DpMDT6xTOUtaTW/5xg8=
Subject key identifier:   0F:AC:37:72:E9:5D:BD:E8:83:4C:71:C3:17:C9:A8:F1:0D:A2:9E:55
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285845DEC9257173DE81FF816855C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5564d4ee-0915-32be-9576-1592bad0fa2e.roa
Signing time:             Tue 14 May 2024 13:00:34 +0000
ROA not before:           Tue 14 May 2024 13:00:34 +0000
ROA not after:            Mon 12 Aug 2024 13:00:34 +0000
asID:                     397237
IP address blocks:        156.154.71.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 May 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:de:c9:25:71:73:de:81:ff:81:68:55:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 14 13:00:34 2024 GMT
            Not After : Aug 12 13:00:34 2024 GMT
        Subject: CN=ad274bb3-bfa6-441f-98f4-7d41c6faddb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3f:e4:a7:f7:43:13:ca:fa:82:1b:2d:f5:ac:
                    e0:77:46:8e:9d:5c:01:de:c7:ef:24:b3:3d:07:86:
                    35:8b:39:a7:9f:04:de:f2:3f:bf:55:32:e0:43:81:
                    9f:d8:48:29:03:6f:a7:bd:87:04:21:9e:d5:02:00:
                    e8:ff:3a:bf:58:14:86:0e:d4:6b:8d:d8:cc:44:89:
                    b5:98:f2:ce:4f:87:11:2f:91:1e:26:0a:9e:4e:88:
                    85:f0:b6:aa:07:80:03:1d:29:69:10:be:61:02:4a:
                    fc:09:94:73:f9:83:7f:15:09:7d:f0:c7:b5:e8:58:
                    22:56:0d:d5:34:26:09:b0:ac:2c:94:b1:24:d3:75:
                    9f:80:ec:df:c0:62:ad:34:9b:1d:5f:a5:7b:e9:a9:
                    3f:95:40:cd:04:c8:77:d3:44:1a:ef:58:07:06:90:
                    5b:8f:3d:c9:5b:92:1c:32:26:73:3b:07:2b:a5:07:
                    43:a0:db:d4:d3:f1:8d:05:db:99:1e:1a:ac:71:07:
                    d3:70:d3:d1:44:25:33:52:a4:19:37:18:2f:98:77:
                    b4:cc:3a:b9:3f:26:f0:aa:20:d7:8c:95:41:75:c7:
                    70:0f:f3:2c:d9:5e:1c:98:28:44:0c:f7:6f:9d:e1:
                    be:17:ad:b9:6a:82:88:56:79:6d:66:2f:e7:f7:09:
                    d9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:AC:37:72:E9:5D:BD:E8:83:4C:71:C3:17:C9:A8:F1:0D:A2:9E:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5564d4ee-0915-32be-9576-1592bad0fa2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:2a:f6:ee:ad:be:43:85:aa:5d:65:8f:59:c1:9e:eb:c0:ba:
         57:8a:7f:54:a9:95:1f:b9:e9:3f:23:e0:69:9d:da:49:f5:9d:
         9c:b1:63:9a:39:03:99:51:79:3c:e6:2a:24:83:fd:80:5d:50:
         45:a2:61:59:28:ec:92:8f:92:eb:23:49:e0:aa:54:6d:9c:da:
         2d:48:47:5f:bc:a9:9f:ab:39:90:6b:b2:d1:52:fb:96:46:4a:
         11:35:bd:e9:36:37:82:4a:92:7d:a3:59:28:62:af:7d:fb:23:
         b7:e1:67:60:e4:5a:19:24:dd:d9:6c:54:d7:da:c7:2b:52:ed:
         2c:1d:e8:9d:3c:28:74:12:35:b6:9f:0f:35:b5:fb:4b:8d:c7:
         44:ff:d8:b7:2c:9e:6f:f2:10:5c:2f:89:0c:a7:6d:31:7a:24:
         12:d9:ea:79:d0:f8:69:78:b1:e9:bf:c5:d2:df:52:06:cb:01:
         07:c3:f2:3c:5e:a9:aa:ae:67:27:3b:8e:a3:4c:67:4b:3b:d1:
         d8:de:5a:1c:99:36:52:77:11:fd:f3:fc:b4:2a:da:e3:07:1e:
         31:5d:13:6d:1b:20:3c:3b:0f:8a:70:f3:dc:8e:5a:3e:91:4b:
         a9:29:40:f9:c4:3d:da:b8:cf:e5:fa:e0:e7:82:e1:ca:a4:73:
         ac:db:68:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 15:09:06 2024 by rpki-client on console-fra.rpki-client.org