Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/29a12035-75cb-38dd-a549-1826e224eaf3.roa
File:                     29a12035-75cb-38dd-a549-1826e224eaf3.roa (raw, json)
Hash identifier:          X+GGdsL2frHFld24rt5XtAyE92hHEZHDg3PG9nGOmLE=
Subject key identifier:   B3:69:64:78:73:75:98:CB:74:43:95:21:96:6F:69:14:41:11:26:32
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285846E96577A6E54C23DE133002C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/29a12035-75cb-38dd-a549-1826e224eaf3.roa
Signing time:             Sun 18 Aug 2024 01:00:29 +0000
ROA not before:           Sun 18 Aug 2024 01:00:29 +0000
ROA not after:            Sat 16 Nov 2024 02:00:29 +0000
asID:                     397235
IP address blocks:        156.154.132.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Oct 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:e9:65:77:a6:e5:4c:23:de:13:30:02:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 18 01:00:29 2024 GMT
            Not After : Nov 16 02:00:29 2024 GMT
        Subject: CN=9a7ea0dc-0d1e-4b92-b91b-165b843ae120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:32:95:fd:b4:f8:94:4c:b4:31:44:c3:db:6b:
                    55:77:8a:17:91:ca:b3:75:62:8d:c0:6b:85:94:19:
                    ba:22:e0:2e:90:3f:00:fc:d6:ed:3b:24:1c:1b:2a:
                    15:28:2f:41:82:f4:d3:0c:3e:32:d5:e0:8f:62:ea:
                    02:44:8f:db:a6:40:b3:58:da:44:8a:20:16:ed:3d:
                    b1:b4:07:2a:0d:38:3b:b4:25:9a:9d:53:a6:c3:12:
                    8d:59:17:35:b5:f2:40:55:73:32:8c:b2:75:4e:ec:
                    cf:9e:de:87:e9:72:f9:6a:ec:91:94:ee:14:63:ff:
                    9e:21:b7:e5:a5:b5:cd:1d:56:05:f9:9a:10:f3:d6:
                    64:3d:a4:03:1b:30:d0:17:bd:23:d0:6c:60:91:6f:
                    38:ea:70:df:7b:ce:f0:a7:db:41:35:da:c9:71:65:
                    c0:89:df:b0:fb:a3:5e:63:68:1a:85:c8:e0:43:5b:
                    e1:8b:37:2c:25:cc:98:83:70:76:c2:c7:32:a8:b1:
                    1a:c8:18:6c:8a:ad:9b:3b:11:39:0e:89:56:f5:c7:
                    94:0f:df:62:fc:20:70:40:e2:c7:35:ba:2d:71:e2:
                    88:da:a5:86:47:4c:6b:6c:51:8f:9c:4a:6f:0d:71:
                    b8:f7:d4:aa:f4:d5:7a:8e:8c:58:63:97:a8:c3:5f:
                    6b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:69:64:78:73:75:98:CB:74:43:95:21:96:6F:69:14:41:11:26:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/29a12035-75cb-38dd-a549-1826e224eaf3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:d9:12:d4:58:e2:e5:a7:6e:ea:3a:b3:52:97:8e:ef:2e:05:
         74:d9:6d:6a:8b:be:72:10:ba:6d:2c:19:01:61:7e:48:36:82:
         57:4d:6a:5b:b8:8e:b6:f5:94:70:5c:c1:c9:06:e8:11:ab:ad:
         c9:fa:33:45:bf:f0:a9:b0:a7:4a:a2:34:5a:76:1f:a0:a9:16:
         33:f7:e6:7d:ba:cb:60:eb:52:87:19:b0:eb:5f:cb:83:fb:15:
         45:5c:46:4a:b0:45:dc:f4:6f:02:40:86:01:5c:d5:0c:00:c0:
         6a:84:b2:89:16:19:14:f9:9e:53:f1:e3:11:1f:e0:52:9e:08:
         66:f7:0b:6c:80:f1:0e:62:81:e4:d8:33:35:42:59:a5:2a:e8:
         82:84:ef:a0:d8:d8:f5:3d:d2:95:c6:70:b5:97:41:3c:4a:17:
         31:12:77:eb:af:7b:7a:68:9d:ea:03:f4:cc:cb:d5:8c:02:b5:
         ff:dc:eb:9c:85:50:66:16:02:86:ac:7f:67:99:63:26:ce:5b:
         43:8e:f0:d2:98:69:aa:c3:b1:af:8a:89:e1:c1:99:00:af:ef:
         14:6b:83:b8:6e:32:a0:c3:e3:c8:82:54:29:57:b6:f9:ac:29:
         64:39:37:10:29:58:b6:52:cc:d9:5e:72:3f:69:39:4b:29:56:
         7a:25:c7:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 18:47:26 2024 by rpki-client on console-fra.rpki-client.org