Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/26cd9c26-7586-3b74-9840-a4d2c655610c.roa
File:                     26cd9c26-7586-3b74-9840-a4d2c655610c.roa (raw, json)
Hash identifier:          p2c0ablM54E3DJ+g4qbdadLB7evtgrvtPvGOzm6wC58=
Subject key identifier:   DD:A9:FA:C2:A4:22:24:85:D0:1F:39:F5:AB:7D:9A:8D:15:EB:97:09
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847DDCA18BB89CA63568EE18C40
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/26cd9c26-7586-3b74-9840-a4d2c655610c.roa
Signing time:             Wed 13 Nov 2024 14:00:39 +0000
ROA not before:           Wed 13 Nov 2024 14:00:39 +0000
ROA not after:            Tue 11 Feb 2025 14:00:39 +0000
asID:                     397242
IP address blocks:        156.154.154.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dd:ca:18:bb:89:ca:63:56:8e:e1:8c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Nov 13 14:00:39 2024 GMT
            Not After : Feb 11 14:00:39 2025 GMT
        Subject: CN=3c891d89-5cb0-4143-b5a7-1eacb5ea520d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f5:60:b8:25:5b:43:db:e5:7d:5d:1f:38:b9:
                    03:5e:d9:19:38:64:5c:91:91:03:2e:13:bd:a7:6d:
                    22:3c:82:32:9c:06:fb:2c:6d:95:fa:92:42:a3:24:
                    0c:c6:16:b9:cd:44:6a:3d:be:86:2e:07:83:11:3c:
                    24:73:77:66:40:15:e7:af:03:81:90:3c:b2:bd:c6:
                    0f:c6:12:39:bb:b0:70:49:9f:4a:28:96:ba:83:5a:
                    21:b7:e0:a8:e4:9c:94:df:b3:7b:58:63:7b:6c:d5:
                    f1:55:77:b6:fe:e3:cd:ed:f3:95:19:0a:87:02:11:
                    69:92:bc:47:dc:15:db:b8:52:60:d2:21:5f:07:4f:
                    1b:83:db:86:56:02:95:5c:49:5e:89:fa:37:a4:80:
                    63:bc:a6:8a:4c:d4:b4:6b:e8:5a:64:e0:ab:d4:7b:
                    0d:63:ca:2e:52:2d:a7:ce:9c:be:a3:40:96:97:c1:
                    e2:ea:3b:fa:08:76:4b:2e:36:88:e1:4b:d0:08:22:
                    07:6d:a1:64:87:99:c5:14:36:81:40:73:7b:25:07:
                    24:7f:23:bb:98:a2:e7:19:e6:05:fe:a7:a6:03:07:
                    a4:35:e7:4e:37:c7:70:87:eb:0e:78:c9:13:98:1c:
                    60:26:ec:54:7d:43:27:9f:6a:14:59:4d:b8:c1:30:
                    f7:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:A9:FA:C2:A4:22:24:85:D0:1F:39:F5:AB:7D:9A:8D:15:EB:97:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/26cd9c26-7586-3b74-9840-a4d2c655610c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:0c:a7:60:90:24:c7:cc:86:c0:62:99:1c:d6:32:6b:77:a4:
         fc:dc:77:ae:ad:1b:34:50:5b:28:9c:29:f2:43:5e:06:cb:6b:
         46:79:41:a8:61:8b:9a:1f:ee:02:00:b7:70:dd:d7:18:ea:f2:
         4b:e9:c0:9f:ea:2b:a7:0b:cf:67:4f:b8:b1:91:6d:e9:d4:d9:
         e1:11:ce:d1:af:66:73:6e:41:73:87:e2:06:41:c4:99:cc:14:
         38:75:a6:06:35:40:7c:8a:1f:44:37:74:58:ef:3b:f7:c4:c6:
         b7:00:c5:d9:bd:39:4e:b4:8e:c8:aa:05:fb:10:91:97:98:ab:
         c7:7e:ba:4b:7a:76:2e:14:24:1a:46:1f:de:2a:70:f3:6b:7e:
         d7:68:73:7e:9b:6b:3c:9a:a4:ac:44:5d:6e:d4:26:a3:be:0e:
         4d:b1:93:2f:20:6e:0e:c8:14:f9:99:a3:b1:7b:07:f0:69:81:
         e1:1e:0f:d9:fa:d2:eb:f4:7e:07:be:25:b6:08:5f:66:ab:16:
         84:79:ea:b3:b3:0b:a0:f0:54:9a:ce:14:dc:b2:f0:3a:f8:93:
         5b:a9:b2:db:2c:40:38:3c:5a:1e:e8:85:11:69:43:55:7a:20:
         39:4e:2b:76:86:03:88:21:70:be:11:b8:55:8e:e6:b6:d1:71:
         01:a1:38:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:06:36 2024 by rpki-client on console-ams.rpki-client.org