Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0eabea2b-d654-33e9-a12f-26215c9b9bf0.roa
File:                     0eabea2b-d654-33e9-a12f-26215c9b9bf0.roa (raw, json)
Hash identifier:          eawqfVhaxnl2bmeKYcCKKEMFtTM42ygbTSPckrf8iWs=
Subject key identifier:   F3:A2:03:FC:A1:9B:7C:EE:15:DF:70:97:D8:03:9F:BC:5D:77:78:8E
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847CA3F667D3FC02B1F0BC1B480
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0eabea2b-d654-33e9-a12f-26215c9b9bf0.roa
Signing time:             Wed 06 Nov 2024 14:00:41 +0000
ROA not before:           Wed 06 Nov 2024 14:00:41 +0000
ROA not after:            Tue 04 Feb 2025 14:00:41 +0000
asID:                     397240
IP address blocks:        156.154.132.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:3f:66:7d:3f:c0:2b:1f:0b:c1:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Nov  6 14:00:41 2024 GMT
            Not After : Feb  4 14:00:41 2025 GMT
        Subject: CN=5358cd87-b2d9-4692-9449-5ed01c17dd21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7f:e6:0c:db:b1:22:6e:8a:d6:21:cd:1f:a2:
                    c9:0a:8d:9d:e3:a8:e7:6d:3d:3b:d9:b7:25:70:a0:
                    f7:5e:e1:6c:51:44:25:1e:07:09:68:51:de:d2:4a:
                    9e:fa:91:59:e5:0f:1d:3c:4b:b0:ff:e9:80:d3:b4:
                    d2:c3:39:1d:93:a5:14:4c:3d:9e:41:0d:21:5a:09:
                    bf:ab:96:12:ef:3d:34:95:27:f2:4c:6d:6b:4f:5b:
                    b6:ae:4d:68:b3:00:bf:0e:00:52:a5:a5:0b:9f:8b:
                    39:c5:5e:a7:37:ff:27:de:9a:b8:27:7f:09:83:25:
                    d0:ea:b0:69:a1:b8:ad:1e:e8:d8:63:6c:38:fd:1c:
                    f9:79:3e:10:4d:ba:54:73:2c:f6:1e:9b:74:ef:7e:
                    39:f3:2c:36:24:c0:70:1b:80:ea:fe:21:e6:9e:bb:
                    fd:b3:7b:61:ee:b9:50:f3:7e:99:e8:2f:98:67:e7:
                    2b:85:f1:14:70:c1:18:37:b9:ba:93:c8:44:67:fc:
                    f8:f9:2f:4d:27:dc:58:dc:2e:33:c3:f6:10:15:0e:
                    5f:cf:ca:88:0a:7b:99:ae:27:30:26:fa:20:b3:41:
                    59:97:9f:8f:74:24:d2:4e:24:95:30:6b:dc:f2:d0:
                    1f:2e:04:92:de:3d:ec:c0:77:74:20:f1:e3:34:b7:
                    ac:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:A2:03:FC:A1:9B:7C:EE:15:DF:70:97:D8:03:9F:BC:5D:77:78:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0eabea2b-d654-33e9-a12f-26215c9b9bf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:67:f8:51:b3:9e:47:7b:7b:56:a5:c6:78:e4:03:cd:ce:c3:
         fc:89:f4:f8:8b:2b:dd:f3:9e:08:30:a8:9a:7b:54:fa:95:96:
         39:30:e9:cd:b3:49:e7:ba:df:93:b0:91:0b:dd:c9:16:73:40:
         62:34:28:51:45:e5:8a:b4:be:0f:6f:64:0a:71:d7:8b:4a:3d:
         7e:ec:70:56:f7:b3:bb:a7:fe:56:91:70:eb:2f:5e:c5:42:3c:
         5a:d1:06:57:c5:ca:fc:df:54:5f:91:33:87:ae:ae:ec:ec:59:
         59:ce:43:95:b0:01:3f:8c:73:05:a0:0d:47:b5:9a:a2:da:7f:
         07:1d:74:01:da:1a:e6:68:ee:1a:6b:63:3a:60:4f:8d:fd:b2:
         7f:9e:68:56:ee:38:0c:94:1e:4a:39:15:04:71:44:d0:05:30:
         b5:a5:3a:b8:da:07:cc:b1:b9:6d:4a:63:74:e7:ca:d3:b5:d3:
         77:fe:dc:ef:55:93:d3:17:7f:79:59:79:c4:c8:7b:56:d3:13:
         e0:70:3e:10:82:ab:b1:d8:32:a6:5a:c2:d9:23:9b:9b:2c:93:
         53:77:1b:93:b4:45:3d:8f:e9:27:1c:ea:4c:e6:df:c0:cc:c1:
         4b:54:18:7a:bc:6d:2f:03:5c:39:74:db:42:d7:54:9e:df:0d:
         ed:21:9a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:05:32 2024 by rpki-client on console-fra.rpki-client.org