Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/13b3e140-ae23-32dc-a3bc-a0e6d92617ac.roa
File:                     13b3e140-ae23-32dc-a3bc-a0e6d92617ac.roa (raw, json)
Hash identifier:          V+Wi+Zn0yxvcdIYqB3CVol+1hjwhVLhsORtQm3+ne9E=
Subject key identifier:   53:3B:EB:17:7C:FC:4C:17:12:F1:6C:45:56:A5:9B:38:94:A8:CD:A1
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858479D76E199812087338D1ECE80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/13b3e140-ae23-32dc-a3bc-a0e6d92617ac.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     397235
IP address blocks:        156.154.101.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:e1:99:81:20:87:33:8d:1e:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=82493a75-82a3-4e0f-9a3c-1098e9f01469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:00:3c:e8:78:71:72:bd:cb:c0:93:6a:f0:f8:
                    23:ce:9c:85:e4:65:45:43:04:6e:c0:eb:96:3c:6e:
                    af:f8:c1:17:26:5e:2d:cd:b8:dc:18:ca:68:58:29:
                    37:f0:7f:75:23:6d:3f:fd:ab:5d:7c:e5:05:0c:2e:
                    78:13:42:e8:a7:fb:a1:10:1f:42:f2:c9:0f:54:67:
                    26:84:1c:b4:03:cc:cc:38:29:e1:ef:13:30:af:54:
                    8b:e4:7e:83:e7:52:c2:54:f3:aa:4e:25:83:42:a2:
                    20:16:c1:59:22:75:6f:dd:6f:c9:91:2e:25:b0:19:
                    91:f2:1f:29:5a:5f:c6:f8:b2:cf:d6:01:d3:74:aa:
                    06:09:c3:a3:0d:1f:0c:52:09:64:83:05:5c:8d:0c:
                    5e:69:04:a1:19:fc:19:f4:a3:54:be:6c:5f:03:96:
                    05:1b:38:85:91:a3:5d:3c:43:9c:b7:aa:e6:9b:a5:
                    9c:7b:62:0c:6f:4a:59:52:d3:bf:0c:0e:11:d6:c6:
                    c6:20:9b:61:8b:fb:84:25:c8:4b:f0:99:c6:ac:bf:
                    5f:00:b9:c3:71:8d:00:fc:8d:ff:8e:c0:d3:ba:e6:
                    29:7e:69:ca:35:38:c8:a4:8b:fc:24:b9:03:ad:29:
                    89:21:10:39:5c:b6:67:e2:54:3c:2d:d4:0e:34:20:
                    a8:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:3B:EB:17:7C:FC:4C:17:12:F1:6C:45:56:A5:9B:38:94:A8:CD:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/13b3e140-ae23-32dc-a3bc-a0e6d92617ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:f5:1c:0a:11:a4:67:28:af:7e:e4:c7:f2:f5:1d:36:13:7e:
         c8:09:db:a9:d8:29:3e:fe:18:f8:ac:91:7d:37:bf:3d:a5:30:
         42:c0:c9:f4:7c:8f:3d:d2:35:75:0c:85:ca:f6:fa:86:16:f2:
         b1:a4:18:e2:32:af:dd:10:7d:3a:ff:60:d2:dd:2f:80:e3:a1:
         af:21:9a:e9:64:34:99:47:1b:79:16:93:d7:74:d4:a3:0c:0e:
         c0:13:34:9b:fc:87:e6:2d:af:08:42:b7:97:f3:53:41:4a:f1:
         16:d3:9d:59:9d:ff:c0:8b:67:83:d5:68:ab:34:14:0c:ef:4b:
         12:3f:f6:65:3e:85:b6:b7:50:e4:93:db:0f:73:cc:da:df:8e:
         fd:18:fe:09:c9:b6:42:2a:a1:f7:ba:68:83:b0:0f:c1:31:20:
         c1:d9:d1:5f:b8:b8:d2:7b:b6:6d:ab:6a:3d:5f:b5:47:9e:81:
         7b:24:9e:52:d9:ff:2a:f1:5d:24:6e:5b:82:17:89:d7:3b:c1:
         3d:d8:77:f8:29:59:42:e6:19:e8:66:68:61:61:4e:23:e5:d2:
         fe:23:c9:93:a0:f0:bb:83:7f:e7:d6:51:8d:2a:70:c4:c1:78:
         85:ca:8e:71:55:da:f3:25:32:d6:39:26:59:22:b2:c8:34:e5:
         23:31:ac:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:01:57 2024 by rpki-client on console-fra.rpki-client.org