Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1a2aba50-6f95-3e39-82b7-c6786a07ccdb.roa
File:                     1a2aba50-6f95-3e39-82b7-c6786a07ccdb.roa (raw, json)
Hash identifier:          i+zSlNQi5UAB6Zzer28R1Hq2DaK5JeZ677u8Dsb1ErY=
Subject key identifier:   3A:08:9F:71:71:F1:2C:0F:4F:8F:0F:EF:56:2D:7B:CA:7E:E5:75:10
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285846FCF0251246F11A3204294700
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1a2aba50-6f95-3e39-82b7-c6786a07ccdb.roa
Signing time:             Sun 25 Aug 2024 01:00:32 +0000
ROA not before:           Sun 25 Aug 2024 01:00:32 +0000
ROA not after:            Sat 23 Nov 2024 02:00:32 +0000
asID:                     397233
IP address blocks:        156.154.73.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Oct 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:fc:f0:25:12:46:f1:1a:32:04:29:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 25 01:00:32 2024 GMT
            Not After : Nov 23 02:00:32 2024 GMT
        Subject: CN=a5a17a1a-e958-44fc-8bea-8f6a5806f822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:dd:1d:20:ab:fc:bd:e6:5b:8b:9b:07:e8:9b:
                    b2:38:7d:8b:de:00:8f:5c:9f:62:68:b5:fd:1f:67:
                    fa:ed:08:8a:ac:a9:c8:32:75:d9:34:3d:fd:df:ef:
                    e3:df:ee:b8:65:d2:72:66:aa:9a:05:9f:e1:3d:f2:
                    e8:42:66:73:df:b3:30:a7:70:91:e4:74:8f:08:cb:
                    d3:8f:63:95:98:59:1b:7f:34:97:c7:33:02:06:b5:
                    71:42:05:27:34:7c:f1:14:33:90:f4:6c:12:14:16:
                    d5:1e:6b:a5:9c:72:df:a0:fa:d8:07:19:44:b8:9c:
                    61:bb:3d:57:ab:24:7b:fe:21:0b:f8:af:c6:12:81:
                    8d:7e:aa:fe:c4:a6:29:76:a7:b4:0a:2e:5a:4a:ef:
                    43:ec:b1:20:2a:e2:d9:5a:f6:07:c1:21:4d:e6:63:
                    3c:18:e3:8c:cc:c3:da:cd:56:7b:2f:42:93:29:72:
                    dd:e1:9a:28:25:1f:79:14:f8:bb:5b:03:db:05:47:
                    0c:a2:ca:b6:4e:d7:02:00:af:25:c0:24:19:5b:cf:
                    2f:14:99:f8:67:80:2d:7e:e0:af:9a:9d:63:7d:44:
                    8b:da:7f:cd:ae:8d:f3:ab:55:7b:5e:d8:e5:09:47:
                    69:bc:db:95:6c:ed:36:2f:2c:cb:a1:c9:a0:d0:cb:
                    58:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:08:9F:71:71:F1:2C:0F:4F:8F:0F:EF:56:2D:7B:CA:7E:E5:75:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1a2aba50-6f95-3e39-82b7-c6786a07ccdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:a0:e2:cd:05:e1:3f:0d:83:19:b4:d0:15:c8:0c:40:2d:b4:
         41:3d:5b:b4:2c:bd:88:08:77:85:0e:93:e6:7e:61:b0:63:9e:
         cf:17:36:e2:87:f7:18:58:a3:73:c9:81:d1:cd:ea:04:18:1b:
         4d:e2:b2:46:0a:d0:bd:49:70:df:f0:bc:76:f1:c6:71:f9:51:
         bb:21:36:9a:27:bd:22:55:b1:75:39:82:02:e6:75:5f:a4:db:
         57:f0:f6:8e:88:2d:ef:17:24:0a:d0:ec:fb:a1:e1:4e:9b:a0:
         1b:e8:4f:57:eb:ea:a7:60:b0:4d:8e:dd:5a:c1:d6:65:21:4a:
         8a:6c:8e:7b:35:c6:ae:4b:c4:8e:f1:41:58:52:97:05:47:26:
         ba:6c:e1:57:73:b1:eb:94:ff:9b:a4:6c:9a:97:bd:55:2a:91:
         42:6f:cd:3f:35:6b:35:9b:c6:3d:4d:be:ff:f7:d3:64:9a:56:
         5f:be:8f:1d:f4:b5:b2:e0:f2:f6:9e:48:00:cb:a2:5d:05:28:
         9a:fb:72:54:8e:b5:a2:e1:ab:a4:29:44:fc:e5:f0:f3:1a:48:
         94:2f:8f:79:39:45:ac:5e:68:67:a7:15:16:16:d2:47:ed:16:
         8e:d1:9b:47:0d:62:f1:5f:9f:be:13:4f:18:b7:25:9c:09:8f:
         b6:5b:03:6a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEb88CUSRvEaMgQpRwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI0MDgyNTAxMDAzMloXDTI0MTEyMzAyMDAzMlowLzEtMCsGA1UEAxMk
YTVhMTdhMWEtZTk1OC00NGZjLThiZWEtOGY2YTU4MDZmODIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAit0dIKv8veZbi5sH6JuyOH2L3gCPXJ9iaLX9
H2f67QiKrKnIMnXZND393+/j3+64ZdJyZqqaBZ/hPfLoQmZz37Mwp3CR5HSPCMvT
j2OVmFkbfzSXxzMCBrVxQgUnNHzxFDOQ9GwSFBbVHmulnHLfoPrYBxlEuJxhuz1X
qyR7/iEL+K/GEoGNfqr+xKYpdqe0Ci5aSu9D7LEgKuLZWvYHwSFN5mM8GOOMzMPa
zVZ7L0KTKXLd4ZooJR95FPi7WwPbBUcMosq2TtcCAK8lwCQZW88vFJn4Z4AtfuCv
mp1jfUSL2n/Nro3zq1V7XtjlCUdpvNuVbO02LyzLocmg0MtY+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDoIn3Fx8SwPT48P71Yte8p+5XUQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMWEyYWJhNTAtNmY5NS0z
ZTM5LTgyYjctYzY3ODZhMDdjY2RiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA+g4s0F4T8Ngxm00BXIDEAttEE9W7QsvYgId4UOk+Z+YbBjns8XNuKH
9xhYo3PJgdHN6gQYG03iskYK0L1JcN/wvHbxxnH5UbshNponvSJVsXU5ggLmdV+k
21fw9o6ILe8XJArQ7Puh4U6boBvoT1fr6qdgsE2O3VrB1mUhSopsjns1xq5LxI7x
QVhSlwVHJrps4VdzseuU/5ukbJqXvVUqkUJvzT81azWbxj1Nvv/302SaVl++jx30
tbLg8vaeSADLol0FKJr7clSOtaLhq6QpRPzl8PMaSJQvj3k5RaxeaGenFRYW0kft
Fo7Rm0cNYvFfn74TTxi3JZwJj7ZbA2o=
-----END CERTIFICATE-----
Generated at Fri Oct 25 18:47:25 2024 by rpki-client on console-fra.rpki-client.org