Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/86bf22de-20a8-35a9-8b4d-3d31183807c8.roa
File:                     86bf22de-20a8-35a9-8b4d-3d31183807c8.roa (raw, json)
Hash identifier:          3sZHQwgmsouKM4VNBAQviCxB+4JMMj/GEBxjU6LdzD8=
Subject key identifier:   23:D5:07:5B:97:9F:3A:DE:DA:BD:30:33:6F:03:40:1D:D6:34:38:67
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584511B585A493FB8B29DE2F1E80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/86bf22de-20a8-35a9-8b4d-3d31183807c8.roa
Signing time:             Sat 02 Mar 2024 02:00:26 +0000
ROA not before:           Sat 02 Mar 2024 02:00:26 +0000
ROA not after:            Fri 31 May 2024 01:00:26 +0000
asID:                     397217
IP address blocks:        156.154.102.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 May 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:11:b5:85:a4:93:fb:8b:29:de:2f:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  2 02:00:26 2024 GMT
            Not After : May 31 01:00:26 2024 GMT
        Subject: CN=27625ffd-e520-4f98-919c-8be81d229608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f8:7b:0c:95:24:b5:a6:36:70:9a:c1:1d:92:
                    73:9d:b5:e3:07:64:3e:02:d0:05:3c:ba:c0:54:c9:
                    72:83:d2:5a:b4:8a:61:36:c9:82:d4:78:6e:29:a0:
                    f6:fa:00:db:a4:4a:01:d5:a5:fc:e4:40:98:86:27:
                    bd:b7:e4:f1:6a:68:a8:f5:b4:59:3a:4b:07:78:40:
                    20:fd:21:f4:a3:c4:ed:19:f0:2c:68:d3:6f:b4:7a:
                    bb:40:3d:bd:96:f3:88:8b:71:40:e8:f8:b7:89:e0:
                    93:92:ea:b8:a0:38:2c:09:ef:78:e0:0d:6b:b4:03:
                    97:b7:91:f8:87:cd:e8:03:ba:50:40:5c:92:36:8f:
                    25:81:bf:ba:4e:03:31:c5:0f:25:41:04:be:d0:7c:
                    24:3b:56:72:84:c6:3a:23:ac:c3:ce:5c:29:10:fb:
                    7b:d5:a7:1d:da:37:2c:f3:3e:9f:eb:ff:57:2b:57:
                    50:ef:64:25:da:52:19:b0:6f:7f:a2:62:4e:8a:7b:
                    f4:f7:9f:7a:55:6b:95:12:5f:e8:0e:66:32:9a:ec:
                    c1:8c:e0:b1:ae:b5:4a:cd:47:3a:95:f9:58:86:bd:
                    e4:0a:6a:00:74:42:16:bb:8a:46:2a:60:42:e5:27:
                    30:92:73:23:3f:92:50:31:ca:88:a5:c9:b9:9d:08:
                    16:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:D5:07:5B:97:9F:3A:DE:DA:BD:30:33:6F:03:40:1D:D6:34:38:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/86bf22de-20a8-35a9-8b4d-3d31183807c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:86:33:c5:09:18:72:e1:35:bc:df:9e:00:ef:dd:92:37:21:
         9a:1c:94:ad:5e:32:93:bc:ec:27:56:14:be:99:eb:2f:78:05:
         e4:47:cb:a0:33:cf:13:d9:59:95:e5:16:bb:2f:06:12:4f:1c:
         ba:cb:07:67:c9:4d:7d:ea:9f:57:2a:62:68:12:6f:9c:7a:03:
         d5:c8:aa:18:92:0b:f3:d4:44:cb:fb:94:17:55:29:2a:b7:3d:
         03:38:93:75:a5:a8:f9:13:1d:b6:0b:9b:4e:2c:ea:67:06:ec:
         e5:9a:76:5a:0f:77:a7:a9:c0:4f:da:ed:a8:6d:72:01:d5:72:
         a1:c9:5e:24:99:c0:b9:3c:94:c4:71:9f:82:56:2b:16:03:63:
         70:29:a2:c8:2f:9f:56:16:69:0d:b0:bd:3c:70:61:14:50:1d:
         f2:00:ee:89:c6:b3:59:dd:0b:2c:07:b4:9b:c9:c2:71:d7:43:
         04:d8:2b:10:74:4e:2e:92:53:e6:bc:d6:70:66:ce:d1:9f:a4:
         1d:d0:ed:45:42:d5:8f:49:67:1e:ef:43:a6:0f:ff:4d:68:a5:
         dd:39:bd:a7:71:7a:8a:c3:1b:bd:67:2a:20:c9:73:42:86:d6:
         42:86:9d:6b:05:25:76:f9:35:82:20:33:75:ab:97:f9:b0:0f:
         d8:3c:85:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 15:09:07 2024 by rpki-client on console-fra.rpki-client.org