Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a969ab36-0b7d-3776-aba2-1070d8fa3c63.roa
File:                     a969ab36-0b7d-3776-aba2-1070d8fa3c63.roa (raw, json)
Hash identifier:          BLJ0kgXdRAVr8o+RuLonPDZq6oKF3TdfXEu+SnoNAaE=
Subject key identifier:   2C:83:41:30:10:C3:AD:32:BE:C3:AF:5B:79:94:3E:C4:EE:7E:6D:A5
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584511B587304929F1BFA2B77350
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a969ab36-0b7d-3776-aba2-1070d8fa3c63.roa
Signing time:             Sat 02 Mar 2024 02:00:26 +0000
ROA not before:           Sat 02 Mar 2024 02:00:26 +0000
ROA not after:            Fri 31 May 2024 01:00:26 +0000
asID:                     397237
IP address blocks:        156.154.102.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 May 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:11:b5:87:30:49:29:f1:bf:a2:b7:73:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  2 02:00:26 2024 GMT
            Not After : May 31 01:00:26 2024 GMT
        Subject: CN=9cbe0c9b-ce32-45e7-9e62-8f98cebfa7f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ff:c3:aa:04:2d:6b:b2:55:37:b5:92:bb:c7:
                    3c:b2:62:93:51:e7:85:1e:c9:73:00:7b:a6:59:9f:
                    12:c0:2e:44:8a:e9:eb:a9:23:49:6b:e3:ca:b7:8c:
                    5e:86:b1:d8:3d:b7:5a:25:1d:99:24:80:92:75:c7:
                    9c:11:00:bb:f1:f7:61:53:39:29:2b:f5:5a:35:8a:
                    e1:b0:e9:dc:bc:dd:58:83:d3:c7:27:6a:21:2d:4b:
                    07:4d:d1:94:89:d4:c3:72:a3:3a:26:91:24:19:09:
                    b5:f6:e6:7c:06:f9:af:a1:ef:a9:cf:99:96:cd:db:
                    27:53:0a:3f:10:dd:96:3e:6f:43:0e:8c:b2:40:dc:
                    69:ad:c5:5f:f7:83:cf:d6:1d:83:56:a1:59:a4:9f:
                    73:39:c1:ac:54:90:d4:9e:3f:09:19:f0:0b:26:c1:
                    78:62:a0:11:79:34:eb:c3:60:6b:48:1a:dd:7c:1d:
                    83:1b:05:10:32:cc:9f:18:ce:f6:d7:e6:9d:42:18:
                    71:c8:be:8b:6a:8a:22:5b:8f:8d:e2:39:68:6c:19:
                    1c:a9:79:f5:48:50:81:fe:54:d1:45:73:0f:63:60:
                    ce:2d:18:a8:0f:40:b5:5c:b9:f5:e2:46:91:ee:d3:
                    5a:c2:e7:e3:55:3b:01:e1:89:53:40:72:08:69:5a:
                    d0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:83:41:30:10:C3:AD:32:BE:C3:AF:5B:79:94:3E:C4:EE:7E:6D:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a969ab36-0b7d-3776-aba2-1070d8fa3c63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:31:1d:3a:d9:0f:57:8a:93:f8:cc:3b:21:78:f6:0c:61:75:
         77:60:0f:a9:b7:f3:b7:2d:10:b3:01:0e:b2:5e:a2:cb:90:87:
         b7:ef:d2:5c:f5:d5:14:c7:f5:62:4c:86:bb:9e:dd:e0:9a:a4:
         0b:27:aa:06:b6:61:15:a0:8e:e0:f3:38:f6:a1:51:30:00:14:
         bc:a6:b7:2a:5a:d4:ce:9c:38:04:22:ed:43:da:0e:0c:65:a0:
         a5:71:80:54:8c:87:f1:f6:66:2f:bc:a0:2a:ae:c7:67:b9:2a:
         66:58:a5:12:34:3f:16:85:9a:95:e8:6d:2a:4c:68:3b:f6:89:
         8d:64:d0:52:75:90:ea:ba:24:e2:ed:4d:ed:56:54:6b:ce:8e:
         be:de:8a:5b:99:55:eb:ce:73:cc:bf:88:a3:73:9b:ea:82:0c:
         9d:4e:f5:4d:5a:c1:fe:8a:cd:4e:2c:a3:93:af:84:c5:2a:2b:
         06:6c:d2:c0:62:0c:0f:97:a3:75:7f:63:f4:96:e9:9d:76:2f:
         54:c5:85:61:12:0d:97:55:4f:1c:42:30:2b:ce:6b:ab:0e:3b:
         f2:f3:72:ff:2f:a2:f6:db:ed:50:01:7c:e3:bc:35:e6:de:63:
         3e:c0:f7:48:8c:6f:24:15:8e:22:2d:b9:10:0d:fa:d7:9b:f1:
         dd:10:25:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 15:09:07 2024 by rpki-client on console-fra.rpki-client.org