Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/23a8b8f0-2ed7-311f-a05d-9cedbac88660.roa
File:                     23a8b8f0-2ed7-311f-a05d-9cedbac88660.roa (raw, json)
Hash identifier:          gV65JLrSLae4VwYXfRXJV0Zn45QVOr78SY9OiLXSZp8=
Subject key identifier:   FD:68:50:6F:E2:54:6F:F6:EA:C8:F4:32:D3:23:16:2B:3E:08:46:9C
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847527C8338A83BD9B8EF6DB600
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/23a8b8f0-2ed7-311f-a05d-9cedbac88660.roa
Signing time:             Tue 24 Sep 2024 16:27:07 +0000
ROA not before:           Tue 24 Sep 2024 16:27:07 +0000
ROA not after:            Mon 23 Dec 2024 17:27:07 +0000
asID:                     397231
IP address blocks:        156.154.112.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:52:7c:83:38:a8:3b:d9:b8:ef:6d:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 24 16:27:07 2024 GMT
            Not After : Dec 23 17:27:07 2024 GMT
        Subject: CN=e350c84b-5955-44d7-aaa7-e8a8074e1b6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:25:bf:c6:e0:a4:e7:9e:ef:2f:3c:27:ab:20:
                    c4:38:fe:f0:2b:d6:ca:17:68:4e:0f:32:38:95:6f:
                    98:2a:d8:2d:4c:0a:49:37:a8:35:64:e5:3b:d9:67:
                    ee:08:e5:06:5b:36:79:8c:8c:7c:bf:4f:47:8a:95:
                    90:0d:dc:db:ee:56:28:c3:9c:e3:d9:ac:2a:9f:15:
                    9a:bf:02:a5:df:e5:f9:8f:f6:d2:b1:79:d3:8b:62:
                    01:bb:62:ae:1e:8b:30:1e:06:9f:a2:7f:a9:70:b0:
                    a6:4b:10:ed:0a:7e:e1:d3:0f:26:2c:d1:c7:b7:7a:
                    00:cd:37:56:c2:91:36:f8:9c:c8:44:75:86:1c:17:
                    90:79:8b:c3:53:8c:51:a1:95:2d:56:69:0c:cc:a6:
                    17:86:5a:12:58:b7:8f:bb:f9:72:09:79:dd:65:9e:
                    ad:2a:a3:b8:e2:92:2c:1c:c1:ee:97:d7:40:d6:dd:
                    97:ba:bd:e0:bd:c7:46:b4:6f:68:63:64:1c:c0:45:
                    31:74:88:1a:19:e3:6c:5e:79:c3:31:00:bc:ad:0d:
                    f5:ca:5b:ed:09:cf:ee:f4:64:33:9e:c0:8a:7f:12:
                    fa:09:5b:c0:6e:5a:0b:f8:1a:13:b3:37:05:5f:fb:
                    66:fc:f1:53:71:dc:a3:a5:72:97:8a:47:d8:23:8d:
                    f7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:68:50:6F:E2:54:6F:F6:EA:C8:F4:32:D3:23:16:2B:3E:08:46:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/23a8b8f0-2ed7-311f-a05d-9cedbac88660.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:5d:d8:31:5a:44:77:77:7c:ed:15:be:ca:e0:2b:6b:a8:37:
         52:bc:ad:ed:af:f4:a0:4b:76:62:a0:27:4f:80:0b:4f:c1:8f:
         72:e5:4f:99:1b:50:fe:4e:a9:ea:ab:5a:e4:1e:78:32:57:b3:
         30:d2:58:23:5c:67:9c:a0:20:ba:db:14:7f:bf:45:ba:0e:73:
         1f:cd:43:f8:04:d3:b6:78:24:9d:3f:f6:ec:e6:ff:6d:59:3a:
         3b:b7:59:87:06:98:39:18:f1:d2:4c:17:ed:b1:c7:60:31:cd:
         81:23:c7:74:1b:79:41:a4:a3:53:05:79:e7:1d:f2:59:92:d2:
         cd:91:8e:c4:1a:bf:c1:e5:d7:d9:e9:6a:5e:8b:e5:c6:4c:10:
         dd:70:62:85:12:8b:5d:e4:87:ae:4e:3a:d9:31:38:99:37:9a:
         3d:ba:f7:6b:b7:bc:4b:fb:37:17:08:33:f6:a0:4c:71:54:88:
         5e:73:d8:ab:59:6a:d7:84:c0:1c:38:b9:38:88:59:0c:10:0e:
         e7:ed:1f:37:e4:5d:c9:1f:a1:2e:9e:9d:77:57:a6:72:55:15:
         bf:12:0e:b9:a9:bb:ea:91:51:e8:f4:5f:a9:b2:66:3b:bc:30:
         a8:3a:b8:85:6d:01:43:ec:0c:fb:dd:04:11:6e:83:7a:bb:7e:
         48:fb:24:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:01:59 2024 by rpki-client on console-fra.rpki-client.org