Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/08209b0a-6f5a-3156-b100-e902a59d6ef5.roa
File:                     08209b0a-6f5a-3156-b100-e902a59d6ef5.roa (raw, json)
Hash identifier:          cdSIIGQI8lydnCmmQ9PrUd7ZxI5ChAw74ou1AEKl6Bw=
Subject key identifier:   9A:7F:32:52:94:A7:70:33:88:62:27:37:2C:90:94:AF:F1:DB:BE:8D
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847527CA0C5B25183A71AEC0680
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/08209b0a-6f5a-3156-b100-e902a59d6ef5.roa
Signing time:             Tue 24 Sep 2024 16:27:21 +0000
ROA not before:           Tue 24 Sep 2024 16:27:21 +0000
ROA not after:            Mon 23 Dec 2024 17:27:21 +0000
asID:                     397221
IP address blocks:        156.154.108.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:52:7c:a0:c5:b2:51:83:a7:1a:ec:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 24 16:27:21 2024 GMT
            Not After : Dec 23 17:27:21 2024 GMT
        Subject: CN=e3ce0b01-0ec6-40de-b39d-15ea878b939f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:de:3d:8b:b5:f1:d4:6b:98:99:06:de:78:69:
                    8f:4f:bb:c0:7b:ba:fb:ae:1d:ab:74:20:55:fd:1c:
                    ba:ef:f7:40:b2:57:bb:a3:80:0a:c9:71:1e:74:76:
                    47:12:5f:17:cd:88:d7:df:60:3e:b8:28:ff:db:75:
                    ea:4a:65:b2:05:67:bf:b2:b9:1b:22:9a:ae:82:87:
                    5a:69:99:56:4a:5a:fa:1f:00:1b:30:1f:9f:b1:fa:
                    ae:59:fd:4d:5e:28:33:21:f0:41:80:e4:25:a2:01:
                    e3:89:b5:35:a5:b3:9b:c1:db:73:4a:4e:cc:ee:5e:
                    3a:aa:7c:de:ff:8d:e9:a0:00:b7:07:25:14:3c:0a:
                    7f:5d:ae:df:a4:8c:20:85:14:64:71:73:1a:45:c6:
                    8f:97:86:26:02:ee:9b:d5:aa:14:07:2e:e1:5c:71:
                    51:48:36:c4:e9:66:f7:f3:18:a7:1f:44:42:d2:89:
                    ea:68:12:12:b0:7c:a5:3b:56:d1:82:af:4e:af:b4:
                    9b:5a:f8:7b:35:b8:70:ac:99:c7:67:bb:4f:1c:f5:
                    c8:54:70:62:75:fb:6a:ea:9c:33:88:ce:cc:52:4b:
                    de:28:fd:5e:ae:8f:6c:bb:f6:a8:b4:28:95:eb:b5:
                    aa:b8:54:73:b2:d6:c9:95:f7:93:88:74:78:ac:e8:
                    38:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:7F:32:52:94:A7:70:33:88:62:27:37:2C:90:94:AF:F1:DB:BE:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/08209b0a-6f5a-3156-b100-e902a59d6ef5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:60:72:bc:e6:12:cb:bf:cd:24:59:96:bf:46:85:2b:0f:37:
         c7:59:66:3d:f4:f9:cb:4f:af:80:5d:f9:79:5e:9e:d5:1b:ef:
         61:a0:49:b1:63:92:a7:64:f4:cd:5f:0e:93:b6:59:11:3c:2b:
         09:9f:c1:b1:7d:5f:60:db:c9:f2:99:31:c9:90:de:30:c1:14:
         43:2d:26:07:c3:e2:55:48:52:95:b4:fa:69:9d:a0:87:5e:fc:
         3d:e3:1c:c9:01:03:14:ae:59:21:ed:91:fd:05:14:26:a9:ee:
         3d:92:29:d8:5e:a4:67:b4:51:81:b1:06:f5:22:83:ff:57:eb:
         da:c8:1d:aa:80:1d:ab:68:78:d5:e9:74:aa:c9:8e:33:f5:dc:
         b2:18:80:01:e2:7e:1d:fb:20:fe:0d:a9:b9:23:33:ef:c2:be:
         28:1c:bb:ff:7e:c7:c4:2b:d0:1c:41:41:31:65:83:cf:e0:0f:
         4c:4d:7f:da:c3:52:8a:84:9a:9e:a7:e9:76:92:0b:cd:94:80:
         2f:9d:41:08:c9:9e:01:c3:37:25:60:6f:21:8f:27:d4:57:a1:
         a5:0a:b3:ac:22:a8:be:fb:02:68:57:8f:0e:05:12:f2:da:37:
         8b:78:8d:c9:50:15:23:3f:cc:cd:8c:c8:8c:e6:5d:7d:07:23:
         94:57:3b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:06:34 2024 by rpki-client on console-ams.rpki-client.org