Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/30c9d7cb-ed7d-3284-9b8b-4112d80dbbbb.roa
File:                     30c9d7cb-ed7d-3284-9b8b-4112d80dbbbb.roa (raw, json)
Hash identifier:          H/zlXy9RWdyKGrkdVV45o0XiYPnR5vCz2RK81hqiFtU=
Subject key identifier:   B1:4A:A9:9D:8E:ED:39:5E:34:ED:5A:AA:AB:23:1F:1E:10:27:A6:B3
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847B10171749093DA30CAA11070
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/30c9d7cb-ed7d-3284-9b8b-4112d80dbbbb.roa
Signing time:             Mon 28 Oct 2024 13:00:40 +0000
ROA not before:           Mon 28 Oct 2024 13:00:40 +0000
ROA not after:            Sun 26 Jan 2025 14:00:40 +0000
asID:                     397221
IP address blocks:        156.154.100.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b1:01:71:74:90:93:da:30:ca:a1:10:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Oct 28 13:00:40 2024 GMT
            Not After : Jan 26 14:00:40 2025 GMT
        Subject: CN=677a2f7b-ce78-467b-bcbe-bc1c76a36cc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1a:83:34:17:c8:4f:79:97:33:f3:ef:1a:b5:
                    37:96:a2:a8:fb:29:d0:c9:e6:e6:4c:37:61:97:d6:
                    a5:57:78:5a:d6:38:71:40:77:4a:7f:17:a0:b1:9f:
                    40:e3:ff:b0:4b:cf:99:a7:f9:9d:96:95:12:d6:e0:
                    73:47:7c:4f:df:dd:fe:33:c5:21:d5:1a:01:4f:e4:
                    d8:cd:10:0f:d6:a6:69:c2:54:e3:6b:ef:bc:68:05:
                    e6:69:b8:72:f5:e8:e4:f9:1e:48:6e:18:46:05:ef:
                    19:c8:6e:20:19:9c:34:c6:de:b1:6a:68:dc:25:22:
                    6f:90:bf:56:0d:ed:84:1c:e5:f2:2e:af:11:86:62:
                    e2:45:99:8c:6d:fc:4f:eb:1c:b4:a5:47:75:d1:ad:
                    12:26:bf:b5:e1:87:c7:63:2b:e0:79:d0:71:a8:1f:
                    ef:a5:c7:34:07:b4:08:96:f2:b5:f5:64:85:b4:17:
                    11:45:aa:ab:6a:27:ff:68:7d:e7:f5:69:ea:e3:81:
                    8b:cb:1a:70:e4:ea:f7:17:39:9b:a4:9b:a5:97:dc:
                    64:a5:9a:f5:98:8c:99:00:73:0b:60:e2:ca:1a:aa:
                    51:21:08:27:84:02:40:9a:6a:31:e5:02:79:ae:5d:
                    b5:1f:6b:65:78:8c:b8:3b:fc:95:70:26:89:cd:57:
                    43:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:4A:A9:9D:8E:ED:39:5E:34:ED:5A:AA:AB:23:1F:1E:10:27:A6:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/30c9d7cb-ed7d-3284-9b8b-4112d80dbbbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:d6:85:fd:73:ba:4d:1d:96:7e:21:b6:69:3a:18:67:ee:2a:
         f6:1d:7b:07:f6:f2:bb:41:ea:b6:ad:27:32:38:bb:e8:ff:46:
         77:f4:a8:70:af:39:92:35:be:7d:50:31:b1:61:78:26:3d:77:
         34:23:54:80:9c:ba:04:57:e1:7b:e0:cd:0a:7e:8a:08:48:fb:
         28:79:b8:d5:78:c8:99:d2:70:57:37:83:25:7c:0c:1a:17:2d:
         06:e3:bd:a5:04:b7:67:9b:3b:a9:00:6a:cb:48:27:cd:5f:5f:
         65:40:2e:7a:82:20:0c:31:60:85:63:e9:b2:94:f3:fc:f5:92:
         ca:ba:3e:30:61:4e:35:23:7e:d0:bc:6d:07:ff:9b:38:64:0b:
         d7:be:9d:e2:42:cd:e3:97:dc:91:70:a5:40:52:c5:37:21:1d:
         5d:fb:67:56:0f:23:99:39:33:ca:2b:5d:dc:d7:75:b7:f3:80:
         0c:12:b1:68:50:66:af:c4:5b:e5:ae:dc:6e:e1:96:b3:ec:20:
         b9:1f:57:88:81:a7:71:78:f9:d9:4f:59:d7:85:2a:76:4f:c9:
         8a:31:84:21:df:7c:be:b6:31:d6:67:82:6b:7e:da:9a:52:e7:
         97:3a:84:86:fb:4c:f1:ab:ed:86:1d:67:6b:69:97:50:41:67:
         3c:61:8f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:06:37 2024 by rpki-client on console-ams.rpki-client.org