Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/14083faf-43ef-3591-bbf9-14786f3ce2a9.roa
File:                     14083faf-43ef-3591-bbf9-14786f3ce2a9.roa (raw, json)
Hash identifier:          2Nrwj2J1Jl9qkCE8+qUHNXdwppHzpC/CHZlk8aZYOR8=
Subject key identifier:   53:B8:2F:1D:8B:AD:24:3F:74:B3:AF:D0:60:90:C8:7D:12:67:64:C7
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285844FE2AC35CEEC32EC5EA9E3B00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/14083faf-43ef-3591-bbf9-14786f3ce2a9.roa
Signing time:             Sat 24 Feb 2024 02:00:26 +0000
ROA not before:           Sat 24 Feb 2024 02:00:26 +0000
ROA not after:            Fri 24 May 2024 01:00:26 +0000
asID:                     397226
IP address blocks:        156.154.101.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fe:2a:c3:5c:ee:c3:2e:c5:ea:9e:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Feb 24 02:00:26 2024 GMT
            Not After : May 24 01:00:26 2024 GMT
        Subject: CN=2d15fc4a-b744-4bc8-97c4-6358292edb22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5a:4a:89:b3:c5:2a:24:df:08:3d:ac:30:4c:
                    58:5d:19:81:68:06:28:90:c9:c7:28:51:44:9c:2e:
                    a3:7c:e2:54:5c:85:de:6f:36:0c:ad:15:20:06:df:
                    55:4d:b2:16:01:7e:98:2f:97:6f:5a:c8:d3:5b:41:
                    3a:17:da:51:4c:53:8a:3e:72:45:c6:ee:42:48:fc:
                    47:94:1c:f1:ec:91:60:df:53:64:1e:50:2e:09:db:
                    1e:3d:33:86:24:26:ec:b5:81:c8:5a:c6:65:2f:03:
                    86:93:62:6f:7b:3c:98:84:51:ba:52:64:95:2f:04:
                    60:0c:e1:3e:05:d9:bd:40:41:6e:03:c5:cc:2d:1f:
                    00:bb:76:bf:4c:42:0a:79:d2:64:24:5d:21:e7:e0:
                    e5:6c:7e:44:31:0b:c0:9e:ce:a8:3e:30:1e:c6:c5:
                    f1:f0:f9:7d:a6:15:0b:4e:e5:cb:d8:8f:6a:56:9c:
                    09:91:59:d0:86:cf:02:72:c0:ad:ff:95:cf:e2:4c:
                    b3:cd:a7:b3:6c:0f:b5:52:cd:1d:86:ad:e2:ca:04:
                    0c:92:22:80:9e:ca:3a:11:f7:e2:6c:f8:b9:5f:6d:
                    a2:ee:c8:81:ee:8a:6e:a8:9b:14:0a:ef:a3:e1:5d:
                    32:1b:6a:2a:8c:eb:00:47:6c:1b:81:c5:7d:c1:52:
                    51:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:B8:2F:1D:8B:AD:24:3F:74:B3:AF:D0:60:90:C8:7D:12:67:64:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/14083faf-43ef-3591-bbf9-14786f3ce2a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:e5:2e:5f:bd:bb:f5:1c:42:e4:63:4d:86:4a:a4:96:05:17:
         ed:3f:e5:2f:93:ac:b8:33:b7:e8:7f:a1:98:20:d3:65:ce:96:
         42:25:6b:9f:f4:f7:bd:83:2e:a9:e0:ae:59:c7:0c:b2:c6:e0:
         7f:67:02:63:a5:ce:4c:ff:52:36:cb:f1:f0:76:bc:be:25:3a:
         4a:5a:e5:41:2e:4f:ad:27:20:74:f1:e4:b1:56:f3:ac:bb:e1:
         75:7e:22:e8:8b:15:1c:7e:b1:4f:fc:dd:70:71:e9:ce:f0:27:
         a3:04:6f:46:10:92:c2:e6:9c:7a:ef:e9:d8:28:f4:16:c3:14:
         92:dd:2f:1b:d8:2c:46:3b:98:9a:fc:a2:2d:f7:15:97:1b:ea:
         98:4d:f0:cf:6a:0c:17:b9:ad:79:62:3c:14:e8:8c:a3:6e:32:
         24:10:18:0e:bc:69:a6:fb:24:4f:dd:a0:8b:02:88:9c:37:49:
         e0:66:c8:32:1c:00:4c:80:0c:9c:85:bf:02:d2:57:ea:a0:9f:
         cf:15:27:61:2f:d6:8d:ac:dd:9a:e7:7c:56:53:1c:ff:0e:98:
         51:0f:2b:29:97:81:f5:7e:2c:b3:c3:a0:6e:6b:6b:f6:17:07:
         68:1d:0a:e8:cd:1c:15:39:e7:0c:4f:80:5b:57:87:11:4e:76:
         f5:d6:47:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 21:11:11 2024 by rpki-client on console-fra.rpki-client.org