Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2fc182b9-1f1e-3e08-9118-b8389bf63c70.roa
File:                     2fc182b9-1f1e-3e08-9118-b8389bf63c70.roa (raw, json)
Hash identifier:          CTC5yOjyRaalrC5gdy3Nl8GcXOwxTQj7hTJh8ur0OiY=
Subject key identifier:   4F:DF:01:62:9E:3C:30:22:4F:A4:FE:CD:7F:40:8C:EA:8C:03:BB:21
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285846E9657E97E808F34FF3F56500
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2fc182b9-1f1e-3e08-9118-b8389bf63c70.roa
Signing time:             Sun 18 Aug 2024 01:00:29 +0000
ROA not before:           Sun 18 Aug 2024 01:00:29 +0000
ROA not after:            Sat 16 Nov 2024 02:00:29 +0000
asID:                     397240
IP address blocks:        156.154.159.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Oct 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:e9:65:7e:97:e8:08:f3:4f:f3:f5:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 18 01:00:29 2024 GMT
            Not After : Nov 16 02:00:29 2024 GMT
        Subject: CN=d4b506d7-8e30-417e-93ae-838e0b7b8756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:87:47:bd:89:da:71:ab:ec:97:e3:9d:d8:7b:
                    80:46:0d:53:21:bf:05:1a:41:24:91:a5:4a:08:21:
                    28:b4:b0:31:e1:7a:32:ff:6f:39:f2:c6:a1:98:6e:
                    ae:44:18:8d:8d:46:3e:f8:3e:16:dd:9a:1d:6b:c8:
                    34:c8:3e:d9:6a:a6:9f:6f:e6:c1:a3:5e:c2:61:f9:
                    54:c2:d8:99:fe:76:d4:cf:1e:91:e1:7e:be:31:31:
                    3e:cc:17:0e:23:6d:64:c1:42:92:50:44:5c:b4:34:
                    b9:44:15:44:bc:d3:c8:42:49:a2:15:b2:4e:6d:be:
                    55:09:6e:54:ca:21:ca:47:61:a5:06:cd:e9:9f:56:
                    ce:b6:3e:f4:8b:11:19:31:7e:3a:8a:64:b0:02:b7:
                    bd:03:c3:04:71:4a:00:e8:34:58:7e:9f:33:32:fa:
                    92:41:e5:cd:ee:83:d0:4d:9b:c2:58:82:ff:ab:5c:
                    15:69:38:81:71:75:58:9b:68:db:25:ec:5a:0e:84:
                    e7:c3:59:ae:43:c8:2e:e5:fd:87:20:d6:51:2d:eb:
                    04:59:a6:93:36:0e:e1:f8:f6:54:26:0b:06:cf:9c:
                    ed:ed:b0:07:dd:dd:ae:79:0a:3f:8b:e0:b6:1b:5c:
                    df:43:49:fb:3e:61:2f:ee:ed:3f:ab:59:0a:b6:64:
                    f3:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:DF:01:62:9E:3C:30:22:4F:A4:FE:CD:7F:40:8C:EA:8C:03:BB:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2fc182b9-1f1e-3e08-9118-b8389bf63c70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:b7:14:7d:a4:bb:5c:bf:86:58:d3:81:a3:85:f6:69:f2:e0:
         b0:dc:57:dd:8e:ad:24:e7:7f:ec:6a:be:20:cd:76:c2:99:4d:
         61:99:01:1a:0c:30:bb:ed:2a:96:f7:61:d4:d9:b2:29:4b:e5:
         21:3b:09:15:02:0a:ff:21:49:ec:49:12:98:a7:c0:ca:58:dd:
         2b:11:df:80:66:f7:5a:2d:1e:ee:ca:5e:e9:87:8e:6a:c6:18:
         b7:3c:ca:13:27:b3:ac:ea:18:0f:04:6c:7a:ef:9d:e6:7a:91:
         88:c1:69:e3:02:4d:29:ee:14:e5:4e:9e:d8:47:9d:1d:b4:7b:
         70:03:da:fa:67:16:04:17:1c:19:06:04:46:80:01:b5:96:19:
         01:01:84:f2:6c:14:01:71:63:f5:07:ee:3c:47:99:d3:92:5c:
         11:db:13:b5:0e:d2:56:f0:2e:91:cc:f4:b6:57:3a:57:88:bf:
         0f:a2:00:46:ae:14:2a:18:68:f5:2a:7d:e8:f1:04:a0:12:61:
         62:57:70:9d:fa:8c:5a:bc:86:aa:3e:a4:e4:99:eb:0e:36:3d:
         fa:75:69:62:16:99:10:36:66:bd:f3:ce:5f:95:e2:5a:67:75:
         8d:3a:be:45:b9:27:9f:ca:0d:83:8d:bc:f8:02:00:40:8e:4c:
         42:a5:12:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 18:47:26 2024 by rpki-client on console-fra.rpki-client.org