Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/163cc04d-9b86-356f-a6af-e329a420468e.roa
File:                     163cc04d-9b86-356f-a6af-e329a420468e.roa (raw, json)
Hash identifier:          cHEhmnXNjCb0laUOoCCaUd3WjelfBt1HZV91eWnPFg4=
Subject key identifier:   0D:1C:F5:F1:31:DA:47:14:5C:21:A9:B4:07:D0:50:59:E7:13:5B:FC
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847DDCA3741EAFB18CC5ACF60C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/163cc04d-9b86-356f-a6af-e329a420468e.roa
Signing time:             Wed 13 Nov 2024 14:00:39 +0000
ROA not before:           Wed 13 Nov 2024 14:00:39 +0000
ROA not after:            Tue 11 Feb 2025 14:00:39 +0000
asID:                     397234
IP address blocks:        156.154.158.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dd:ca:37:41:ea:fb:18:cc:5a:cf:60:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Nov 13 14:00:39 2024 GMT
            Not After : Feb 11 14:00:39 2025 GMT
        Subject: CN=2ed27917-6258-4881-a734-48379eb30144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8f:23:7a:51:6d:22:91:77:6f:76:83:4f:4b:
                    9f:e6:24:6f:c5:d2:98:ba:58:42:a7:cd:60:0b:96:
                    4a:e3:42:59:5d:b8:98:8a:b0:7d:91:7b:41:ee:d7:
                    91:db:6a:8b:e1:68:76:50:b9:f8:be:f9:3d:c1:e8:
                    de:e2:3d:08:83:3a:75:12:45:df:4f:1e:a2:66:4b:
                    c8:29:c7:5a:dc:c2:40:ef:b0:ae:ff:7c:d7:84:db:
                    7f:a1:41:d1:94:66:ec:a7:f6:e0:75:9c:4b:f1:36:
                    3a:05:a1:18:53:67:a0:12:a0:9f:dd:b5:83:f3:2c:
                    b3:57:6d:15:09:c1:c8:37:7d:e1:6d:ad:a1:e9:2f:
                    76:9f:b1:e1:50:ec:0d:59:fc:fd:c4:3d:a0:5a:85:
                    26:60:a4:bd:f5:55:cb:56:0d:c8:bc:64:8d:ec:3f:
                    e3:5f:c6:13:c1:79:1d:33:8f:86:34:70:5a:a8:55:
                    1d:c6:a8:d1:f0:e7:c8:7d:87:e6:43:55:a6:cf:6d:
                    29:a1:5e:13:dc:78:cf:a9:ff:01:c4:fd:46:b5:d3:
                    2f:62:14:43:9f:29:fa:22:d1:85:4a:16:1b:78:d0:
                    02:30:5b:42:dc:ba:e4:19:32:bd:25:e6:ab:b1:2e:
                    64:57:81:21:5a:65:e7:ef:a5:9b:b1:c2:8a:a1:da:
                    1b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:1C:F5:F1:31:DA:47:14:5C:21:A9:B4:07:D0:50:59:E7:13:5B:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/163cc04d-9b86-356f-a6af-e329a420468e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:b1:72:1f:6e:13:88:60:34:13:aa:92:91:93:9d:76:19:47:
         2d:9e:aa:ca:8b:f0:05:f4:ab:63:4c:b9:f2:43:1f:df:cc:ae:
         87:11:d0:6d:7b:08:b1:96:b5:ba:0f:65:ec:f1:6a:6c:e7:d8:
         9c:cb:62:45:2d:97:c6:f8:bc:62:0b:02:e9:a9:df:13:40:25:
         44:f3:d3:d3:1c:d4:8c:cb:b6:d4:c3:c2:9e:84:94:bf:f0:76:
         b4:66:f1:c9:b4:36:30:fd:75:91:3f:12:14:3b:30:61:ea:81:
         09:ca:39:58:f6:fe:e8:15:e5:05:d6:a0:bd:c3:24:4e:b7:bc:
         08:bd:68:23:03:6e:94:01:10:66:d4:0c:3f:28:b3:14:8b:e4:
         1e:bf:82:94:12:c4:d6:34:58:08:a5:6e:51:1b:3c:ae:3c:fb:
         7f:e4:85:29:83:27:dd:e1:cb:fc:ae:ee:c8:d2:72:30:00:59:
         a8:bc:9e:bb:7c:a1:74:4f:0f:94:7f:55:64:9a:26:f5:5b:ca:
         b1:33:06:1d:e2:ab:0d:20:74:34:31:b1:1c:3e:de:e3:ad:23:
         c7:92:d6:0b:5a:4a:93:47:6f:cb:9d:cc:0c:39:d3:ad:d1:ab:
         43:1d:f0:7f:0f:50:9b:f9:23:84:c3:7e:ac:dc:90:4e:01:24:
         7b:59:55:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:06:35 2024 by rpki-client on console-ams.rpki-client.org