Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0c1367f8-2da8-3d6f-bfbf-74da2bf7321f.roa
File:                     0c1367f8-2da8-3d6f-bfbf-74da2bf7321f.roa (raw, json)
Hash identifier:          1h751OFPgySffyY5THrEjz74sSYji6beqHUZjzXeRdQ=
Subject key identifier:   BB:D3:A1:D0:BC:BE:A9:0C:EA:DF:FC:97:B2:EF:1A:37:F4:CD:51:84
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285846FCF054A411659F4FBB473F80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0c1367f8-2da8-3d6f-bfbf-74da2bf7321f.roa
Signing time:             Sun 25 Aug 2024 01:00:32 +0000
ROA not before:           Sun 25 Aug 2024 01:00:32 +0000
ROA not after:            Sat 23 Nov 2024 02:00:32 +0000
asID:                     397222
IP address blocks:        156.154.174.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Oct 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:fc:f0:54:a4:11:65:9f:4f:bb:47:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 25 01:00:32 2024 GMT
            Not After : Nov 23 02:00:32 2024 GMT
        Subject: CN=bbc46d53-8627-4b8a-b1a1-38ab3b8df238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:3d:32:99:4c:9b:6e:9f:be:2b:f3:b7:93:b2:
                    a0:8b:e5:ac:55:e1:8a:32:b7:8b:17:fe:01:f8:eb:
                    41:fd:49:bb:15:13:8e:a9:e6:ec:fd:60:26:9e:5a:
                    c5:5d:58:a9:fe:b4:3f:7a:ad:6a:4b:65:94:40:8c:
                    6f:c6:f9:04:5f:2f:91:5f:59:b7:c2:d3:3e:e2:7a:
                    62:a9:f1:b5:e4:16:1a:94:2a:b1:31:ed:e5:96:b5:
                    33:7b:f4:ee:ed:aa:35:37:c8:f5:10:a7:4f:ce:e4:
                    2a:ba:07:e0:ee:0d:6f:77:7b:76:f7:10:c2:43:78:
                    18:ab:9f:69:47:81:89:5c:3e:e6:90:23:99:65:96:
                    19:ec:ce:c1:7f:b3:a9:d1:03:e1:60:83:d6:03:0c:
                    fb:e8:62:fa:d0:2b:57:71:75:92:b7:60:9a:54:cf:
                    cc:9f:79:4a:d3:12:86:96:39:69:ab:0a:d0:55:e8:
                    92:14:cb:2e:21:4e:f9:58:d1:7c:3e:5c:48:62:87:
                    cb:5a:ed:1e:9d:4b:67:99:f7:dd:ef:41:db:a2:8c:
                    d4:0b:d5:77:31:7d:ff:fc:cc:e4:11:95:a2:04:b7:
                    38:42:97:7f:9a:08:e0:b2:b7:e0:d7:76:43:e0:2f:
                    8f:c3:8c:f9:57:4f:1f:b0:fc:b8:54:bd:51:35:a9:
                    7b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:D3:A1:D0:BC:BE:A9:0C:EA:DF:FC:97:B2:EF:1A:37:F4:CD:51:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0c1367f8-2da8-3d6f-bfbf-74da2bf7321f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:99:a5:b5:b9:bf:5a:9e:fa:01:a2:a2:b6:72:b2:0f:b3:4d:
         2d:e6:b4:bd:c1:cb:01:35:77:2c:56:b5:c6:eb:98:d5:17:c6:
         98:29:dd:42:a0:a2:98:47:2f:15:92:43:0a:64:e1:7b:71:6e:
         11:95:82:68:3e:74:da:cc:ce:bd:d4:1f:1a:05:da:fe:8b:26:
         94:77:f8:3f:6b:86:b1:ac:66:e3:f0:63:0b:49:be:7b:1e:ec:
         76:10:4c:34:46:f5:a0:43:fc:e0:c9:b9:33:b9:64:1a:c4:1c:
         54:6c:c6:9a:c8:ad:5b:94:5d:a7:ac:1a:7c:f9:8e:20:46:e8:
         b5:f4:e0:e5:76:85:96:12:bb:48:40:54:95:97:07:62:df:0b:
         34:69:22:97:f2:12:0c:3b:5a:7e:5f:90:2c:af:07:31:5b:f2:
         4a:52:87:71:25:bd:e9:ef:0e:31:b9:bc:ee:63:b2:e5:6b:15:
         5d:f3:e4:1d:90:94:ff:72:8d:79:7c:91:3f:88:5c:1f:a3:03:
         1b:1a:cd:a6:9d:36:5f:23:07:4a:ca:23:cf:10:bd:2b:ee:dd:
         ce:4c:a8:5b:b2:2d:42:d5:a6:1b:f7:0a:23:a7:bf:e3:0d:e4:
         03:cc:3f:bc:be:b2:1c:3b:1f:6c:27:e1:6d:4e:7f:dc:4a:cf:
         71:80:10:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 18:47:24 2024 by rpki-client on console-fra.rpki-client.org