Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/084205cd-09a0-3d65-8e92-9a88f820aa7f.roa
File:                     084205cd-09a0-3d65-8e92-9a88f820aa7f.roa (raw, json)
Hash identifier:          h+xzhwOS60ypqwZ1xZoFEYAIGLYb6a9zgIatxsvnYsQ=
Subject key identifier:   9F:B4:5A:EB:37:43:60:72:B6:3D:F2:0E:70:0C:41:BA:3F:07:4F:2E
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847527C9D0A853D5DB0F8DF5600
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/084205cd-09a0-3d65-8e92-9a88f820aa7f.roa
Signing time:             Tue 24 Sep 2024 16:27:19 +0000
ROA not before:           Tue 24 Sep 2024 16:27:19 +0000
ROA not after:            Mon 23 Dec 2024 17:27:19 +0000
asID:                     397213
IP address blocks:        156.154.107.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:52:7c:9d:0a:85:3d:5d:b0:f8:df:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 24 16:27:19 2024 GMT
            Not After : Dec 23 17:27:19 2024 GMT
        Subject: CN=9579f01e-2905-411b-9a04-f438f6e77b93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:da:3c:64:df:8d:3f:88:74:0d:87:55:5f:cb:
                    41:ba:6d:4e:aa:8c:63:12:e7:b3:55:d3:f4:31:d1:
                    15:57:83:9f:8d:28:bc:74:de:dc:36:a3:f0:4d:17:
                    7f:6a:8e:e3:0e:58:75:87:e3:1a:ed:4c:f7:e0:40:
                    72:ae:77:5b:14:95:24:7f:be:a1:ea:f1:ce:66:c5:
                    44:d3:d9:d0:a7:5b:98:d0:b5:dc:4a:92:c9:52:12:
                    76:aa:d1:66:d5:77:81:d3:24:8b:24:0e:97:b0:80:
                    f2:a5:c2:e0:9b:23:32:da:10:ca:0d:6e:5f:90:f0:
                    50:37:26:37:56:de:f5:66:22:ec:e4:6c:39:9c:07:
                    be:e2:0a:e7:ff:6c:c9:2d:f0:ed:dd:d0:90:01:67:
                    05:a1:ad:94:9c:38:9d:37:b2:85:23:12:69:9a:e9:
                    c0:12:70:f6:c3:bb:77:51:d0:ff:d6:b3:24:70:b3:
                    d1:ac:ba:38:63:d4:8f:f8:7b:ea:f5:a9:c1:71:05:
                    96:71:0a:4e:7e:f0:61:84:61:0a:76:b5:5f:ba:a3:
                    f5:92:33:57:9c:78:76:e3:38:e2:19:23:88:79:f1:
                    e9:c9:60:24:f7:a9:aa:1b:9c:72:33:b0:33:cb:24:
                    e0:25:e3:38:1e:7e:64:b2:ff:a1:3d:fa:5b:72:27:
                    fb:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B4:5A:EB:37:43:60:72:B6:3D:F2:0E:70:0C:41:BA:3F:07:4F:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/084205cd-09a0-3d65-8e92-9a88f820aa7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:38:1d:af:6d:b2:46:6e:a4:a9:b6:44:30:28:1d:26:5a:d6:
         34:f7:21:2e:ff:6c:ff:09:8a:43:4e:b0:53:e3:09:b6:9b:83:
         37:bf:4d:2f:84:8a:6a:14:c9:80:83:9a:76:9b:2c:72:da:dd:
         52:09:45:bf:71:6c:29:67:2b:c8:25:24:e7:81:7a:1c:69:e4:
         23:af:4f:7c:fc:c9:b5:37:f3:29:c4:c2:14:da:38:80:8e:63:
         98:ec:f7:1a:80:a0:95:df:40:36:dc:31:0a:30:2f:f7:d3:61:
         e9:a1:e3:29:57:b5:e5:c6:e9:a6:a3:5e:01:a0:01:9d:a0:d2:
         39:1c:d2:60:e4:eb:0e:2d:6e:18:5d:98:cc:13:02:e3:58:e1:
         65:eb:44:fc:e3:15:fb:f8:30:e9:f8:11:77:e6:1c:35:51:2f:
         fa:d6:f3:1f:11:ee:be:70:59:f1:c3:27:bd:75:b9:63:92:65:
         37:a6:bd:96:13:b7:90:89:13:0c:08:fb:23:9d:16:00:63:1d:
         37:0c:b7:ee:ab:f0:10:ee:74:a6:22:e7:02:0d:d1:c1:1f:bd:
         4d:cb:d9:3a:41:9c:c7:73:f8:4a:11:a7:a4:a7:c6:37:75:96:
         f4:4d:af:83:13:9b:b4:e9:ac:8f:e4:67:4b:bf:4d:9f:cf:e8:
         06:40:70:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:01:56 2024 by rpki-client on console-fra.rpki-client.org