Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/07a4d280-1ea4-3f08-b03b-15184f283a6f.roa
File:                     07a4d280-1ea4-3f08-b03b-15184f283a6f.roa (raw, json)
Hash identifier:          fM0rFCbv+J1/v2YIF+lc+3mNlAwXS+vIraaGjxAuaxs=
Subject key identifier:   13:8A:C0:05:FA:EB:51:AC:B3:7B:6A:DB:4C:0F:11:D8:AC:21:E7:C6
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584780264DA3D112A09A5DD59480
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/07a4d280-1ea4-3f08-b03b-15184f283a6f.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     399157
IP address blocks:        156.154.176.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Oct 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:4d:a3:d1:12:a0:9a:5d:d5:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=620aa588-9fb2-4362-8512-d7796616eab2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d5:cc:09:64:bb:bc:b5:d0:54:6f:19:a4:32:
                    84:96:ce:ef:5a:d2:de:36:05:f7:de:14:00:d9:e4:
                    05:ad:d6:18:94:5c:64:92:83:7b:65:2a:81:ed:68:
                    ca:07:6f:36:c8:05:ea:1e:83:df:ba:be:6a:78:1a:
                    72:8c:89:f0:5b:56:11:fd:fb:49:0d:91:e5:ec:89:
                    14:39:dc:05:2e:68:b0:44:d2:ca:ca:0b:91:37:e9:
                    9b:2c:31:87:ec:e1:e4:d3:4a:56:3a:70:ce:bc:5c:
                    0b:e9:1f:47:d8:51:01:47:4e:e1:cd:6c:d5:a5:56:
                    26:b2:b5:e7:9e:1a:8a:6e:95:63:88:c9:fa:bd:0a:
                    58:07:b7:0a:f1:3c:01:b4:58:1e:0d:c8:d9:98:25:
                    8c:39:f1:44:15:7e:cd:3a:c5:b7:d2:ce:05:ce:49:
                    75:24:42:de:89:ef:2f:43:18:f1:17:a3:b9:e7:30:
                    7b:31:e9:15:14:48:2f:85:70:8a:af:d0:a8:3e:81:
                    e4:5d:f0:94:40:d6:0b:8e:77:39:2e:27:1e:d5:42:
                    36:90:3b:8e:35:a1:cb:e5:76:cd:f7:1c:42:b0:ed:
                    10:81:ab:15:16:a1:e1:f4:48:68:5f:fb:c1:a8:db:
                    31:04:25:78:d2:d5:ca:a0:cb:45:bc:f6:7e:5a:06:
                    77:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:8A:C0:05:FA:EB:51:AC:B3:7B:6A:DB:4C:0F:11:D8:AC:21:E7:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/07a4d280-1ea4-3f08-b03b-15184f283a6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.176.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:5a:06:e8:43:33:dc:f3:81:84:14:6a:0d:8a:ed:36:d9:46:
         45:94:f3:24:d9:0e:4e:a2:a9:8e:c4:9b:4c:e9:f6:41:96:1f:
         46:b0:c4:e1:de:e0:9d:72:68:13:66:fb:14:12:5e:60:fa:9b:
         23:ff:b4:d5:ff:8e:60:86:a8:7a:03:db:ca:c4:35:c4:8e:df:
         bf:c4:02:df:d7:26:f6:16:cf:44:04:1c:53:d2:86:4c:e9:89:
         9f:6e:d0:b0:ac:3c:5a:4d:0c:42:49:ef:f4:7d:b8:19:49:a4:
         d6:f6:ee:f8:71:91:f9:43:81:95:70:7f:32:e9:43:27:7f:e5:
         a4:93:4c:c2:d9:59:27:db:d9:c5:c8:8e:47:56:7c:f4:88:26:
         59:6b:93:ed:08:b0:af:7f:a0:d3:9b:35:2e:be:2d:fc:fb:95:
         80:66:76:36:59:5d:ca:bc:61:1d:dc:42:0e:12:cc:b7:89:30:
         f1:05:a4:fc:d3:29:8d:0f:c0:dc:5d:16:40:c8:3c:91:f5:73:
         3f:52:45:38:15:52:53:95:10:ef:52:c9:3e:72:b4:08:a4:07:
         76:67:a1:13:e1:34:24:e9:94:f6:8b:e0:b3:a4:cb:82:72:a8:
         87:59:c7:bc:91:9f:a1:3f:83:86:98:26:3f:39:56:82:92:3b:
         ae:c8:5a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 18:47:24 2024 by rpki-client on console-fra.rpki-client.org