Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0fa5dbff-c345-309f-b26f-029093c6464f.roa
File:                     0fa5dbff-c345-309f-b26f-029093c6464f.roa (raw, json)
Hash identifier:          WpT4+ut5ISYukUm8YWukwvQ6hE7yNJK8sTc/blK8b4g=
Subject key identifier:   44:BD:70:F9:D4:9E:4F:06:FE:A9:A2:43:A2:C6:F8:56:55:9C:1D:C5
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285844FE2AC9D2E448AE8B04355600
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0fa5dbff-c345-309f-b26f-029093c6464f.roa
Signing time:             Sat 24 Feb 2024 02:00:26 +0000
ROA not before:           Sat 24 Feb 2024 02:00:26 +0000
ROA not after:            Fri 24 May 2024 01:00:26 +0000
asID:                     397243
IP address blocks:        156.154.105.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fe:2a:c9:d2:e4:48:ae:8b:04:35:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Feb 24 02:00:26 2024 GMT
            Not After : May 24 01:00:26 2024 GMT
        Subject: CN=fd947597-ca9c-4eb4-adb9-7b5d0b5c4771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:77:03:77:e3:0b:c3:e3:05:9c:ae:57:58:69:
                    96:dd:d0:7d:41:15:53:78:3d:d8:62:bf:2a:ea:68:
                    f9:25:24:5d:c1:20:d5:73:9e:36:7f:5b:c9:c0:06:
                    af:3f:5c:de:d0:09:a6:a1:56:5e:bb:21:5f:22:02:
                    71:39:23:19:c5:74:aa:36:22:fb:60:e3:db:e2:d5:
                    f1:9b:46:3a:10:83:6d:e7:96:d1:32:c5:f8:0f:8c:
                    cd:2b:8e:c9:4d:87:22:b0:ac:c0:56:c4:b6:f0:46:
                    60:65:02:ab:ec:63:9c:c8:68:e3:8a:90:30:04:9b:
                    5b:f8:6e:9f:0a:00:a4:4b:dc:9e:b9:82:8e:31:49:
                    4a:2c:40:aa:8b:7a:72:0d:e6:f8:51:b1:cc:f3:4d:
                    d3:38:30:0c:d2:77:e7:79:df:49:9f:21:af:f2:ec:
                    6c:fa:a7:3f:fc:ba:dd:1a:d8:d7:7c:e2:e0:28:de:
                    36:12:1a:64:30:b6:72:b4:a4:c0:e0:b5:6d:32:d8:
                    42:fb:90:db:fd:1c:cf:ed:b6:a9:75:3e:ae:76:c1:
                    8a:d7:82:c2:8e:77:47:f9:0c:42:04:87:c4:c3:4a:
                    ee:46:d7:af:92:db:d1:15:a0:af:91:4e:5f:f2:32:
                    2b:b4:5d:70:6e:79:e9:e2:f7:51:ec:f4:22:5e:4e:
                    3f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:BD:70:F9:D4:9E:4F:06:FE:A9:A2:43:A2:C6:F8:56:55:9C:1D:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0fa5dbff-c345-309f-b26f-029093c6464f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:ef:83:21:59:b8:6a:b2:30:ed:d6:7f:fb:15:90:05:fb:b7:
         82:c7:20:6f:2c:75:3f:03:ae:8d:c4:f0:f2:aa:03:18:51:14:
         c7:c6:e9:0b:38:e7:8a:bb:4b:9a:11:43:ea:87:40:7d:3b:99:
         a2:c2:ec:d3:67:77:44:0b:bd:89:9e:56:59:2a:2e:8c:64:5c:
         c3:6f:e8:7e:08:4e:46:e9:2b:f2:b4:09:b0:7a:58:86:24:08:
         c4:9b:e6:e1:ad:67:1b:39:ac:9f:81:0d:03:bb:f7:7b:7b:09:
         71:af:55:10:18:45:e4:d0:9f:df:94:7f:4b:71:8f:56:99:b0:
         9b:57:4a:5f:05:0e:a4:d1:87:6a:2e:87:aa:24:6b:6a:dc:4c:
         f2:78:fd:e5:f1:eb:ad:13:ed:4e:db:ba:e2:14:12:74:fd:88:
         0c:7f:32:30:83:b2:ee:48:b1:98:03:d2:02:93:08:4c:40:61:
         d2:d5:ad:50:3e:bf:55:d7:6e:b7:32:38:ec:b5:7a:d3:5c:49:
         b9:ce:64:37:93:6d:77:ce:32:63:fe:ce:9a:19:05:0a:52:f5:
         18:19:9e:4a:96:56:42:6d:29:a9:1e:e8:14:ae:3b:e8:a9:34:
         3e:8f:7b:98:43:be:44:2b:99:a1:cb:70:c9:8a:54:d5:df:70:
         a2:46:24:d3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWET+KsnS5EiuiwQ1VgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI0MDIyNDAyMDAyNloXDTI0MDUyNDAxMDAyNlowLzEtMCsGA1UEAxMk
ZmQ5NDc1OTctY2E5Yy00ZWI0LWFkYjktN2I1ZDBiNWM0NzcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHcDd+MLw+MFnK5XWGmW3dB9QRVTeD3YYr8q
6mj5JSRdwSDVc542f1vJwAavP1ze0AmmoVZeuyFfIgJxOSMZxXSqNiL7YOPb4tXx
m0Y6EINt55bRMsX4D4zNK47JTYcisKzAVsS28EZgZQKr7GOcyGjjipAwBJtb+G6f
CgCkS9yeuYKOMUlKLECqi3pyDeb4UbHM803TODAM0nfned9JnyGv8uxs+qc//Lrd
GtjXfOLgKN42EhpkMLZytKTA4LVtMthC+5Db/RzP7bapdT6udsGK14LCjndH+QxC
BIfEw0ruRtevktvRFaCvkU5f8jIrtF1wbnnp4vdR7PQiXk4/gQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFES9cPnUnk8G/qmiQ6LG+FZVnB3FMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMGZhNWRiZmYtYzM0NS0z
MDlmLWIyNmYtMDI5MDkzYzY0NjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJppMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGzvgyFZuGqyMO3Wf/sVkAX7t4LHIG8sdT8Dro3E8PKqAxhRFMfG6Qs4
54q7S5oRQ+qHQH07maLC7NNnd0QLvYmeVlkqLoxkXMNv6H4ITkbpK/K0CbB6WIYk
CMSb5uGtZxs5rJ+BDQO793t7CXGvVRAYReTQn9+Uf0txj1aZsJtXSl8FDqTRh2ou
h6oka2rcTPJ4/eXx660T7U7buuIUEnT9iAx/MjCDsu5IsZgD0gKTCExAYdLVrVA+
v1XXbrcyOOy1etNcSbnOZDeTbXfOMmP+zpoZBQpS9RgZnkqWVkJtKake6BSuO+ip
ND6Pe5hDvkQrmaHLcMmKVNXfcKJGJNM=
-----END CERTIFICATE-----
Generated at Wed May 1 20:52:17 2024 by rpki-client on console-ams.rpki-client.org