Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2752b4e9-d66e-3cb7-b7c1-79f84079d69c.roa
File:                     2752b4e9-d66e-3cb7-b7c1-79f84079d69c.roa (raw, json)
Hash identifier:          bVFvABTLOkF7CtG1GO5J0hzh4Qzos2m0Nb0jWTHHlQQ=
Subject key identifier:   C3:C2:03:2C:56:B6:BD:38:A0:BD:80:A8:63:4A:63:E4:F6:1E:AA:2C
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847DDCA2DD846B755C4F68CB280
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2752b4e9-d66e-3cb7-b7c1-79f84079d69c.roa
Signing time:             Wed 13 Nov 2024 14:00:39 +0000
ROA not before:           Wed 13 Nov 2024 14:00:39 +0000
ROA not after:            Tue 11 Feb 2025 14:00:39 +0000
asID:                     397228
IP address blocks:        156.154.131.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dd:ca:2d:d8:46:b7:55:c4:f6:8c:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Nov 13 14:00:39 2024 GMT
            Not After : Feb 11 14:00:39 2025 GMT
        Subject: CN=3dca7bad-9886-47c0-bbc5-ae4b9ffdfebf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a3:25:85:78:2d:bc:2f:a6:a2:a8:db:13:3d:
                    00:54:6a:2f:18:d9:a9:ed:fa:51:8e:ee:bc:6e:b0:
                    39:a7:f8:d2:f5:a3:3f:6d:24:60:d4:1d:c4:84:a2:
                    9f:dc:60:5c:a6:ea:c1:73:71:f6:0c:f6:88:73:ec:
                    da:4d:3b:0e:5c:5a:61:b7:c6:6f:01:b9:e9:34:de:
                    da:9b:c4:fa:d1:e5:b7:90:5c:a5:05:3d:d9:40:43:
                    3f:c6:74:30:a7:38:29:7f:48:76:cb:1a:92:d9:51:
                    90:cf:a3:fa:84:f4:44:71:16:85:e4:dd:83:89:b1:
                    f3:c0:fc:47:e7:eb:93:47:c1:9f:16:6f:16:a4:6c:
                    b2:30:0a:37:e6:1a:c6:6d:99:b1:2f:05:bf:7c:b5:
                    cb:dd:15:df:2e:0c:f3:7e:2b:93:4d:c3:5c:da:52:
                    7f:6a:51:23:7a:77:03:d7:c2:38:9f:69:23:c8:a8:
                    cd:e8:2a:8f:99:bb:55:40:ad:2a:cd:1f:f9:28:7a:
                    de:31:38:32:b9:bf:40:c6:47:fd:9a:46:41:ac:43:
                    e0:ac:c2:db:f7:a4:15:d1:86:e4:35:7f:6d:05:6e:
                    30:64:64:f1:6a:f9:07:3d:9b:ee:3e:4f:0c:cd:94:
                    42:9b:b1:c6:7d:97:32:65:9e:fe:96:71:5b:1f:fb:
                    3a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:C2:03:2C:56:B6:BD:38:A0:BD:80:A8:63:4A:63:E4:F6:1E:AA:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2752b4e9-d66e-3cb7-b7c1-79f84079d69c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:3e:8f:d3:94:a0:44:6b:4f:46:59:c6:52:44:3a:59:59:ac:
         87:8c:4e:f3:73:de:69:be:85:65:e6:b5:99:bb:3f:84:92:b3:
         55:9a:85:e2:7d:85:1f:89:42:52:f3:18:f3:44:23:cf:56:74:
         00:c2:7b:bc:28:07:d9:15:b2:f5:d5:bd:7b:18:f1:63:49:95:
         7d:a3:d0:cf:cb:e3:2b:b3:13:76:ab:d5:3a:a6:32:d7:99:01:
         77:da:d6:f2:79:74:bf:1c:f6:4d:72:0d:cb:6f:97:d6:a9:35:
         72:45:26:17:69:61:68:fb:1e:60:a5:13:9c:23:7a:ab:b7:39:
         6d:d9:ce:e8:fb:dc:5a:44:a0:5b:19:a9:bc:a7:b3:87:2e:c8:
         2c:d2:b2:59:62:a0:1e:cd:10:67:4c:13:e8:13:1f:e0:c9:94:
         28:54:33:82:d1:b9:ee:32:99:bd:f4:8f:be:96:6a:a2:12:ca:
         13:68:2d:a3:73:e2:96:8e:77:1f:9e:62:d5:24:ae:1a:25:5f:
         06:ca:26:cb:e4:8e:3b:ef:b3:cd:92:8f:00:0c:41:dd:cf:aa:
         fe:b3:f2:d5:29:de:7f:07:aa:e2:74:ec:ee:82:9a:2a:04:8d:
         cc:59:26:99:cb:e4:7c:12:b7:52:0a:55:b9:a4:38:b2:2b:0f:
         c1:3f:bd:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:01:59 2024 by rpki-client on console-fra.rpki-client.org