Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/295b255d-f316-3c00-8ce6-433c9ed6a599.roa
File:                     295b255d-f316-3c00-8ce6-433c9ed6a599.roa (raw, json)
Hash identifier:          kT4u98W0CV7lQlJgoVqMUc6+hbNwZXkphKTIOC1Pp3g=
Subject key identifier:   C5:AF:B5:43:E8:85:F9:E2:9D:7F:2E:84:8B:B9:C2:8A:03:13:FA:47
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847DDCA2D492C8341A7A6C3FD00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/295b255d-f316-3c00-8ce6-433c9ed6a599.roa
Signing time:             Wed 13 Nov 2024 14:00:39 +0000
ROA not before:           Wed 13 Nov 2024 14:00:39 +0000
ROA not after:            Tue 11 Feb 2025 14:00:39 +0000
asID:                     397218
IP address blocks:        156.154.131.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dd:ca:2d:49:2c:83:41:a7:a6:c3:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Nov 13 14:00:39 2024 GMT
            Not After : Feb 11 14:00:39 2025 GMT
        Subject: CN=47814f73-dad0-4a85-bd83-44e49056f2be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:08:e8:42:3b:62:08:55:1f:db:d5:e6:43:53:
                    34:86:af:77:6c:bf:90:60:54:14:48:e1:e1:65:c3:
                    86:f5:2f:51:15:4b:30:54:d4:ef:1e:d9:89:06:ae:
                    82:38:3c:d2:e6:45:39:1c:9d:55:c5:d0:6d:78:55:
                    f7:0c:d5:e2:00:2b:3e:73:96:fa:ed:e9:7b:9b:08:
                    ed:d7:51:16:4e:00:12:f9:a9:a4:1c:ce:09:93:b3:
                    b5:78:3d:35:77:6a:ca:85:39:5f:fb:3c:1a:dd:47:
                    3b:e0:e5:52:6f:66:ba:a1:ef:37:9e:4b:aa:74:75:
                    af:6a:65:a4:c3:df:03:96:d7:27:d6:51:0b:21:bd:
                    37:fd:93:bb:7e:e3:a6:4b:02:9e:78:7e:00:74:4c:
                    46:04:bc:35:b3:7c:e9:6f:cd:fa:7f:bd:df:ae:4b:
                    e4:79:eb:f6:ed:1e:88:46:a8:f2:91:d6:56:7f:2e:
                    90:a5:ca:66:80:55:a7:a2:0b:10:2a:29:d1:a2:b0:
                    c2:e5:27:1a:92:87:eb:fb:41:ce:65:d4:6f:c1:8a:
                    6a:ab:ae:90:84:34:94:75:41:92:cd:4b:18:df:d9:
                    bb:1b:29:bf:83:90:48:25:8b:8f:67:48:53:cb:3e:
                    fb:29:fd:3a:bc:8c:be:28:1d:69:75:1e:86:a7:87:
                    78:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:AF:B5:43:E8:85:F9:E2:9D:7F:2E:84:8B:B9:C2:8A:03:13:FA:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/295b255d-f316-3c00-8ce6-433c9ed6a599.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:f1:1d:79:85:51:cb:8f:2f:2e:55:fc:4b:1f:e7:d9:86:41:
         44:e7:e5:7c:2b:2d:db:b1:b0:39:92:bb:4a:49:4c:6b:8c:1f:
         97:e8:9d:47:48:88:cc:e2:7c:51:12:cb:0b:33:0f:f8:20:d0:
         1c:fa:f4:53:96:c2:05:26:44:3e:83:5f:74:a2:12:6d:46:92:
         5c:e6:df:cc:41:5d:95:d3:78:56:dd:6b:78:84:c6:14:6e:35:
         ad:fb:e4:85:f0:ba:b6:3f:75:26:21:64:01:70:4a:15:ff:c9:
         9e:36:55:fd:40:93:83:6f:12:c1:d4:ef:a7:e3:5c:81:3a:57:
         fc:a7:79:a9:dc:64:6d:08:df:81:6c:d8:72:b3:2b:4d:8d:ba:
         79:e9:dc:ac:89:a2:0f:6f:f7:d3:66:ce:d9:0f:26:16:c4:57:
         61:5d:ec:a5:ff:57:e5:c2:96:a2:9a:6e:57:26:c6:56:7a:d9:
         c3:9d:f1:17:1c:12:f7:0b:fb:48:14:91:0f:58:9b:e0:63:54:
         a5:30:15:16:67:c5:7a:c5:d0:f6:68:f5:92:0f:cb:75:47:35:
         50:d6:a9:37:f6:47:cc:75:fb:62:c1:45:d8:b5:c5:1a:f5:03:
         71:18:89:13:52:bb:f1:f0:da:65:32:3a:6b:39:55:87:18:cf:
         0a:3d:b5:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:01:59 2024 by rpki-client on console-fra.rpki-client.org