Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/11980c7c-2227-31cc-827e-a4ab73d20a05.roa
File:                     11980c7c-2227-31cc-827e-a4ab73d20a05.roa (raw, json)
Hash identifier:          hKt6pojOUcwo/8eLS7TrgbNELN9wpVUNeYkA/RkEdIU=
Subject key identifier:   4C:C7:EB:CF:63:BE:39:94:4B:AF:82:7B:2C:0F:6E:18:A8:93:09:F9
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285846FCF043A8EE9B531C85C44140
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/11980c7c-2227-31cc-827e-a4ab73d20a05.roa
Signing time:             Sun 25 Aug 2024 01:00:32 +0000
ROA not before:           Sun 25 Aug 2024 01:00:32 +0000
ROA not after:            Sat 23 Nov 2024 02:00:32 +0000
asID:                     397229
IP address blocks:        156.154.131.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Oct 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:fc:f0:43:a8:ee:9b:53:1c:85:c4:41:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 25 01:00:32 2024 GMT
            Not After : Nov 23 02:00:32 2024 GMT
        Subject: CN=672b8618-3e54-4eaa-965e-603206ef6451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:93:e7:a2:07:22:58:bd:f8:dd:9c:20:66:dc:
                    1c:3f:31:dd:e2:9b:26:fa:7e:35:cb:99:26:a5:8e:
                    1f:bb:19:ee:0c:b3:06:db:71:ef:d9:00:2c:e6:69:
                    b4:b8:5c:96:35:35:29:81:bf:05:98:5e:80:f5:48:
                    3f:45:b1:a7:23:9d:ad:77:2a:cb:5c:5d:1a:dc:ab:
                    fb:2f:17:50:52:c5:fe:ce:dc:f1:9f:74:b2:cc:01:
                    ab:ea:2a:14:72:f5:be:29:7b:8e:d3:73:53:d0:70:
                    d4:dc:88:a8:36:8f:93:f7:2f:87:8e:8f:30:a1:3f:
                    3f:d5:af:c2:33:79:32:64:48:c3:f4:77:4c:84:7a:
                    ba:22:8b:ba:f9:9f:6c:ef:4a:25:91:af:6f:20:a4:
                    76:7f:43:9c:46:47:4b:34:1b:1e:ea:95:3b:85:72:
                    5b:cc:76:50:ba:93:6d:9a:a3:2b:09:67:e2:54:63:
                    e6:c7:2c:6e:20:6e:8a:79:67:86:74:54:f6:1b:d3:
                    91:dd:eb:54:b4:05:af:91:09:8a:d9:c0:ff:e8:03:
                    4a:40:80:58:8b:dd:2d:e7:0b:0b:7b:2a:01:2e:56:
                    86:36:cc:3f:9a:51:a5:b1:b1:63:8f:e4:47:6e:c2:
                    d9:cf:cd:07:ef:1b:b5:ff:26:cb:a7:c3:68:fb:13:
                    63:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:C7:EB:CF:63:BE:39:94:4B:AF:82:7B:2C:0F:6E:18:A8:93:09:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/11980c7c-2227-31cc-827e-a4ab73d20a05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:5f:fb:e6:a9:61:27:84:f9:f8:83:79:dd:ba:0c:cc:bf:7b:
         2c:bd:4f:7a:b7:de:c6:35:8e:1a:33:7d:7c:86:10:0d:3d:04:
         5a:9b:54:e8:95:20:e1:08:2a:7b:f3:4a:1f:f8:e8:4b:24:ce:
         ce:37:a2:46:8d:84:5e:e9:88:77:f6:ac:33:a2:fb:03:76:fd:
         c3:25:36:11:af:89:d7:0d:e3:ca:92:4e:d0:3d:37:a6:01:8c:
         a3:09:92:27:de:24:32:42:02:07:cd:cd:5e:40:84:7a:42:a5:
         8f:52:92:ee:92:45:d0:e5:03:46:42:d0:b5:db:12:d5:9e:ef:
         8d:3e:dc:4a:2d:fa:d9:22:50:ca:fa:e6:e0:00:4c:5f:fc:96:
         82:02:9f:1f:88:fb:28:65:5f:a5:cb:25:a5:fb:d8:dc:b6:48:
         42:ea:87:d7:1a:dc:55:34:e2:89:4c:73:6e:41:44:bc:16:7d:
         7a:6b:90:b5:3e:f2:bc:35:ee:75:05:07:41:f5:d8:36:84:98:
         68:4c:ee:7a:58:57:de:cb:df:f1:89:46:ff:aa:1e:98:d2:65:
         1b:b3:82:e7:57:f8:31:b3:68:41:93:9f:92:bc:a4:d5:92:7b:
         01:36:99:4f:e3:44:69:1e:b0:81:d0:b0:32:db:0e:8e:39:6e:
         fc:d0:3f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 18:47:24 2024 by rpki-client on console-fra.rpki-client.org