Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/11980c7c-2227-31cc-827e-a4ab73d20a05.roa
File:                     11980c7c-2227-31cc-827e-a4ab73d20a05.roa (raw, json)
Hash identifier:          ZMXxjCbvQvZKzV03yWVm+lmDXmMt888IT0nGfmPHp2I=
Subject key identifier:   3A:B6:F7:A8:04:32:C5:2E:22:CA:C6:10:22:78:5A:CB:C2:F7:58:8C
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847DDCA2DE801CECE8A07AB8600
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/11980c7c-2227-31cc-827e-a4ab73d20a05.roa
Signing time:             Wed 13 Nov 2024 14:00:39 +0000
ROA not before:           Wed 13 Nov 2024 14:00:39 +0000
ROA not after:            Tue 11 Feb 2025 14:00:39 +0000
asID:                     397229
IP address blocks:        156.154.131.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dd:ca:2d:e8:01:ce:ce:8a:07:ab:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Nov 13 14:00:39 2024 GMT
            Not After : Feb 11 14:00:39 2025 GMT
        Subject: CN=3708b71f-cfcf-4053-b565-d0db94d5bf3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e6:90:c7:32:23:ca:78:8e:2d:73:86:48:15:
                    47:d9:7c:20:20:0e:2e:8f:41:73:66:62:58:82:e8:
                    26:d5:74:00:17:ff:19:59:e3:67:d7:08:ed:1b:a6:
                    c4:31:2c:c2:50:cc:cd:1c:a0:2f:46:d4:eb:3e:0d:
                    df:47:47:2f:92:67:8d:9b:97:f0:cd:38:86:23:d7:
                    a4:b3:40:c9:7a:a8:09:1b:6d:92:3a:0f:42:58:46:
                    a7:87:a0:63:2e:c9:4a:a8:ea:8f:2b:ef:48:ad:cb:
                    8c:8a:69:d3:59:45:f3:f1:3a:5a:5e:3f:04:55:2e:
                    bd:51:ab:d2:ef:9c:17:13:c2:f4:17:0e:28:d4:ae:
                    fd:31:66:ec:f6:82:92:89:e0:0c:a9:48:6a:61:71:
                    7d:a2:7b:14:c7:6b:95:d6:f3:92:e2:50:24:e4:68:
                    73:2c:59:7b:32:8f:7d:cb:96:9a:e1:1d:ac:30:0d:
                    42:30:a7:20:e2:4b:bb:28:a3:e9:08:0c:59:a7:ff:
                    6a:d8:e4:fe:91:09:6f:bc:4a:82:32:17:00:95:31:
                    73:17:3e:4e:29:76:6b:b7:e4:fa:35:70:1a:9f:78:
                    7f:29:43:27:8b:1f:a5:5a:00:92:2d:b6:f1:25:42:
                    fa:3a:27:7e:b4:a1:6e:16:5e:26:08:ae:df:d6:c3:
                    09:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:B6:F7:A8:04:32:C5:2E:22:CA:C6:10:22:78:5A:CB:C2:F7:58:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/11980c7c-2227-31cc-827e-a4ab73d20a05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:d9:20:96:35:37:14:a4:c5:3c:0c:0d:34:a9:fc:10:e5:1b:
         8d:d8:8a:0e:e8:4c:06:55:18:c0:d9:fc:83:53:e2:84:0b:ff:
         03:04:d8:8a:48:a1:dd:22:e6:b5:ca:e5:be:7b:00:9d:71:85:
         d3:bf:b3:b3:d6:0d:bd:5e:a5:0d:72:e8:70:c6:bb:64:97:99:
         cd:53:7a:99:13:47:df:29:55:0d:89:60:53:df:1d:6e:a5:6b:
         6d:5b:10:d8:39:49:46:80:08:40:94:db:b6:4d:9d:ff:f0:80:
         8f:23:7d:2c:ed:53:b9:64:3e:3e:82:49:d2:f3:d3:08:c4:ae:
         7f:d5:ad:59:22:7c:74:df:6b:e2:6a:c2:a7:82:1d:c8:cf:e6:
         7f:f7:64:90:a3:1b:a8:d3:62:23:be:c6:0a:fd:76:0a:d6:90:
         7b:3d:47:c6:73:bf:76:3d:d4:09:f6:e4:a0:27:03:e0:14:b2:
         8b:d5:f4:e3:2a:cf:ad:94:54:18:2e:92:c9:bb:77:b0:3c:aa:
         6d:c3:23:b3:b6:69:b2:26:b1:b5:13:b3:4c:0e:14:cd:a2:74:
         ad:cf:30:a8:4d:54:c5:84:68:dc:1d:82:dd:1a:b3:8b:5e:98:
         96:e8:7c:55:75:3e:f6:bb:69:7b:4e:d0:45:f0:fb:26:50:17:
         68:f3:ff:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:18:39 2024 by rpki-client on console-fra.rpki-client.org