Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/13b3e140-ae23-32dc-a3bc-a0e6d92617ac.roa
File:                     13b3e140-ae23-32dc-a3bc-a0e6d92617ac.roa (raw, json)
Hash identifier:          HkDVz/seVFTCg02FHCL3csoRMRlNxVn1OeKb4UmgKAw=
Subject key identifier:   72:6C:A3:35:5E:FA:10:1D:D1:00:4D:A8:34:FA:39:97:6F:54:AF:06
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285844FE2AC4246D53B53D99A39420
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/13b3e140-ae23-32dc-a3bc-a0e6d92617ac.roa
Signing time:             Sat 24 Feb 2024 02:00:26 +0000
ROA not before:           Sat 24 Feb 2024 02:00:26 +0000
ROA not after:            Fri 24 May 2024 01:00:26 +0000
asID:                     397235
IP address blocks:        156.154.101.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fe:2a:c4:24:6d:53:b5:3d:99:a3:94:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Feb 24 02:00:26 2024 GMT
            Not After : May 24 01:00:26 2024 GMT
        Subject: CN=069febe4-0bd7-40c1-b4bc-45e8730200fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:53:a3:aa:5a:6f:7d:27:7b:79:3a:9d:96:17:
                    75:1d:2d:68:b3:20:e1:4f:34:04:d0:0d:f4:45:36:
                    be:55:ae:05:10:e9:cf:81:b6:28:16:70:3d:99:03:
                    b7:68:30:a8:45:68:f2:1f:ac:a0:c7:80:2f:18:77:
                    1c:65:22:f8:6b:79:fc:d5:f7:7a:a4:5b:1e:c8:77:
                    93:da:72:b9:db:7f:bd:b6:b3:df:23:8f:0e:f6:19:
                    f7:68:90:62:63:38:ff:16:fb:d8:53:39:69:e5:71:
                    78:ac:da:26:38:78:29:b5:9e:61:4a:18:af:3f:72:
                    23:07:57:56:20:4a:28:26:60:e1:13:75:ba:7f:71:
                    90:89:b4:f8:98:ae:ff:ad:92:6c:e1:a4:e0:7d:96:
                    79:9b:14:e3:18:fd:51:a2:a3:b6:42:9a:38:8b:13:
                    0b:2c:f4:82:ca:4e:22:e5:05:29:fb:b6:9a:da:bc:
                    e5:f3:c7:17:80:b3:c4:d8:6b:c0:c4:0f:bc:f0:a5:
                    a2:b0:a0:9f:fd:92:33:16:f7:7b:a6:ba:82:8a:6e:
                    9e:73:91:06:a5:cf:13:0e:10:b3:a0:9f:51:4c:29:
                    b3:6b:ac:60:b4:63:23:1b:0c:8f:25:77:ee:e2:f3:
                    62:bc:a6:e0:c1:6a:2e:cc:c4:42:17:f0:70:cf:1b:
                    58:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:6C:A3:35:5E:FA:10:1D:D1:00:4D:A8:34:FA:39:97:6F:54:AF:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/13b3e140-ae23-32dc-a3bc-a0e6d92617ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:fa:82:39:31:ec:1b:5e:69:56:30:2f:d0:40:85:0b:33:73:
         b8:29:11:bc:b0:34:cd:9b:e0:6c:e2:d8:da:d5:48:ad:e8:7b:
         10:5b:e4:87:09:b2:4c:fd:64:26:d4:52:aa:c3:4d:a9:84:43:
         3c:e0:20:2e:11:93:bc:13:88:3f:32:9b:35:dc:f3:4e:4b:3f:
         fc:6a:9c:2c:b8:7b:9c:7b:79:ac:8d:bf:3b:d2:a6:ed:1f:70:
         12:fc:2b:98:4b:63:0f:7d:ed:44:1f:0d:fc:58:bf:d4:15:3c:
         7b:a8:da:b6:b3:2d:00:1a:b3:87:be:c5:f5:2c:d2:d9:ad:a0:
         d5:0b:65:87:2e:f1:3a:60:94:d0:cc:a8:96:58:a9:6f:92:e9:
         f7:b2:8e:e2:e5:77:a9:7a:f6:60:db:27:8c:60:41:d2:4b:fc:
         94:8a:6a:9f:34:7f:40:75:fb:37:74:f2:a0:bd:33:33:78:a8:
         47:c8:14:26:d9:cb:91:1a:35:61:49:e7:e6:97:b5:80:53:e6:
         be:c0:3e:28:60:79:06:ee:7f:e7:bc:36:fb:3c:35:eb:48:53:
         ac:83:6a:0c:26:04:5a:d8:b8:a1:a7:8f:cf:7b:34:df:03:7e:
         2e:2c:a6:f3:1b:58:e1:5a:84:2c:19:88:d7:d7:20:e5:a3:d5:
         db:fa:de:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWET+KsQkbVO1PZmjlCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI0MDIyNDAyMDAyNloXDTI0MDUyNDAxMDAyNlowLzEtMCsGA1UEAxMk
MDY5ZmViZTQtMGJkNy00MGMxLWI0YmMtNDVlODczMDIwMGZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFOjqlpvfSd7eTqdlhd1HS1osyDhTzQE0A30
RTa+Va4FEOnPgbYoFnA9mQO3aDCoRWjyH6ygx4AvGHccZSL4a3n81fd6pFseyHeT
2nK523+9trPfI48O9hn3aJBiYzj/FvvYUzlp5XF4rNomOHgptZ5hShivP3IjB1dW
IEooJmDhE3W6f3GQibT4mK7/rZJs4aTgfZZ5mxTjGP1RoqO2Qpo4ixMLLPSCyk4i
5QUp+7aa2rzl88cXgLPE2GvAxA+88KWisKCf/ZIzFvd7prqCim6ec5EGpc8TDhCz
oJ9RTCmza6xgtGMjGwyPJXfu4vNivKbgwWouzMRCF/BwzxtYnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHJsozVe+hAd0QBNqDT6OZdvVK8GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMTNiM2UxNDAtYWUyMy0z
MmRjLWEzYmMtYTBlNmQ5MjYxN2FjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJplMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADr6gjkx7BteaVYwL9BAhQszc7gpEbywNM2b4Gzi2NrVSK3oexBb5IcJ
skz9ZCbUUqrDTamEQzzgIC4Rk7wTiD8ymzXc805LP/xqnCy4e5x7eayNvzvSpu0f
cBL8K5hLYw997UQfDfxYv9QVPHuo2razLQAas4e+xfUs0tmtoNULZYcu8TpglNDM
qJZYqW+S6feyjuLld6l69mDbJ4xgQdJL/JSKap80f0B1+zd08qC9MzN4qEfIFCbZ
y5EaNWFJ5+aXtYBT5r7APihgeQbuf+e8Nvs8NetIU6yDagwmBFrYuKGnj897NN8D
fi4spvMbWOFahCwZiNfXIOWj1dv63go=
-----END CERTIFICATE-----
Generated at Wed May 1 20:52:17 2024 by rpki-client on console-ams.rpki-client.org