Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/64c3e2d2-ce8a-319f-8815-d98b867c71b3.roa
File:                     64c3e2d2-ce8a-319f-8815-d98b867c71b3.roa (raw, json)
Hash identifier:          BcgYzXuuFIzflqw0CwBpTLBKj6xyMgEFIzTq3Fy54TI=
Subject key identifier:   07:66:AF:B7:69:DB:F2:BB:BE:84:39:51:7F:81:B1:40:CE:21:05:79
Certificate issuer:       /CN=6e10601c-e280-4510-9d84-b6d2b02b8446
Certificate serial:       010D0C9F43285847D139DE94AED7BFB7B6684C80
Authority key identifier: 4E:ED:44:97:58:9A:1C:39:9A:33:B8:A5:80:07:96:D7:83:3A:8A:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/64c3e2d2-ce8a-319f-8815-d98b867c71b3.roa
Signing time:             Sat 09 Nov 2024 02:00:28 +0000
ROA not before:           Sat 09 Nov 2024 02:00:28 +0000
ROA not after:            Fri 07 Feb 2025 02:00:28 +0000
asID:                     393397
IP address blocks:        156.146.64.0/24 maxlen: 24
                          156.146.65.0/24 maxlen: 24
                          156.146.66.0/24 maxlen: 24
                          156.146.67.0/24 maxlen: 24
                          156.146.68.0/24 maxlen: 24
                          156.146.69.0/24 maxlen: 24
                          156.146.70.0/24 maxlen: 24
                          156.146.71.0/24 maxlen: 24
                          156.146.72.0/24 maxlen: 24
                          156.146.73.0/24 maxlen: 24
                          156.146.74.0/24 maxlen: 24
                          156.146.75.0/24 maxlen: 24
                          156.146.76.0/24 maxlen: 24
                          156.146.77.0/24 maxlen: 24
                          156.146.78.0/24 maxlen: 24
                          156.146.79.0/24 maxlen: 24
                          156.146.80.0/24 maxlen: 24
                          156.146.81.0/24 maxlen: 24
                          156.146.82.0/24 maxlen: 24
                          156.146.83.0/24 maxlen: 24
                          156.146.84.0/24 maxlen: 24
                          156.146.85.0/24 maxlen: 24
                          156.146.86.0/24 maxlen: 24
                          156.146.87.0/24 maxlen: 24
                          156.146.88.0/24 maxlen: 24
                          156.146.89.0/24 maxlen: 24
                          156.146.90.0/24 maxlen: 24
                          156.146.91.0/24 maxlen: 24
                          156.146.92.0/24 maxlen: 24
                          156.146.93.0/24 maxlen: 24
                          156.146.94.0/24 maxlen: 24
                          156.146.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/6e10601c-e280-4510-9d84-b6d2b02b8446.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/6e10601c-e280-4510-9d84-b6d2b02b8446.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d1:39:de:94:ae:d7:bf:b7:b6:68:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e10601c-e280-4510-9d84-b6d2b02b8446
        Validity
            Not Before: Nov  9 02:00:28 2024 GMT
            Not After : Feb  7 02:00:28 2025 GMT
        Subject: CN=df0c9009-00a8-4f92-a136-6f3cb16e22c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:22:3c:ba:8a:9e:2a:0b:4c:71:cc:98:e9:e4:
                    b2:90:83:04:07:32:c9:d8:12:31:71:07:12:dc:54:
                    6b:d7:93:5a:72:26:18:99:cc:4c:5e:a4:c6:de:0e:
                    2b:69:94:3d:55:e2:a8:dd:0d:af:0a:5d:23:aa:7b:
                    db:95:5d:a7:33:d3:22:01:fd:71:95:c4:e8:d9:6d:
                    4e:3e:72:96:da:67:a7:f0:9c:c1:89:a6:cb:c0:ce:
                    29:09:44:ed:58:dd:1e:74:2d:bd:02:2f:37:7b:44:
                    82:2c:f1:d2:bb:45:c6:f4:70:5f:f9:69:c2:89:1e:
                    5f:6e:d4:50:da:5e:7d:2c:5b:b2:71:ab:ba:27:42:
                    e9:69:45:d6:bf:91:95:5f:58:b8:1f:b5:64:d7:a2:
                    6c:9c:f4:09:1d:fb:b8:32:3e:9b:3b:88:14:04:a1:
                    61:15:29:76:7c:d1:d1:07:92:f4:89:09:d4:28:97:
                    0c:64:e2:c0:ae:eb:bf:a7:2a:d8:d8:eb:c5:b5:4c:
                    c5:17:61:89:7a:1b:8f:03:d9:1d:b5:a1:2c:f3:32:
                    77:d8:74:72:e3:f8:45:69:5f:1c:0c:e0:66:b7:af:
                    f2:e8:a4:fb:b3:9f:e5:f6:4d:3e:bd:ac:c9:1c:25:
                    0f:80:65:94:1f:ef:e4:76:60:c7:bd:08:13:36:48:
                    0f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:66:AF:B7:69:DB:F2:BB:BE:84:39:51:7F:81:B1:40:CE:21:05:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/64c3e2d2-ce8a-319f-8815-d98b867c71b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/6e10601c-e280-4510-9d84-b6d2b02b8446.crl

            X509v3 Authority Key Identifier:
                keyid:4E:ED:44:97:58:9A:1C:39:9A:33:B8:A5:80:07:96:D7:83:3A:8A:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.146.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:00:1e:db:8d:93:61:2d:09:42:ef:4e:39:78:a6:8f:32:40:
         d2:b2:70:eb:ba:45:8e:32:95:13:3c:c7:d8:5d:8a:78:50:bd:
         d2:29:af:4e:10:14:91:37:39:93:fe:15:b3:db:e8:d1:ee:1b:
         26:d8:b0:bd:8f:f8:39:1c:30:62:b6:69:55:a6:15:31:2b:59:
         6c:ce:14:40:8a:3e:bf:1c:63:2e:c3:d9:92:ed:75:a3:1d:5e:
         b7:d2:bd:a7:35:5e:ba:6b:9e:b6:d2:47:60:e2:6f:b0:bc:d4:
         24:1d:b7:e5:62:50:a0:a9:dc:77:c0:78:19:b3:29:6f:ab:ed:
         a4:ab:23:4c:21:4a:76:52:b9:b2:4e:a0:fc:5a:75:b0:6c:84:
         de:05:34:5d:fe:65:68:98:9a:19:b7:3c:f8:c6:6f:18:03:eb:
         7d:36:45:4f:42:4a:d7:a6:d6:8c:e3:ac:71:29:ab:85:78:14:
         47:73:3a:52:f8:b3:26:79:8e:57:58:5e:e2:81:ea:c4:2a:b1:
         df:c2:ae:7c:93:6f:76:88:02:22:96:cd:b3:27:2d:33:79:bd:
         7f:3d:6a:06:b4:99:35:12:1d:85:e9:f8:b7:b2:e3:d3:e3:90:
         a7:72:45:c1:22:d6:5f:51:68:93:04:e3:1a:22:53:7c:b2:79:
         59:cf:01:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:36:43 2024 by rpki-client on console-ams.rpki-client.org