Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3444e902-1448-382c-8b54-a3d880eb825d.roa
File:                     3444e902-1448-382c-8b54-a3d880eb825d.roa (raw, json)
Hash identifier:          EdbPeKHnuykL114o6WchDjKBkHgZmKv8RAZwz5gjNT8=
Subject key identifier:   80:04:CC:58:F5:3F:10:6C:BA:E2:8B:BB:FD:75:FA:A3:C6:4A:A0:9F
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847CA3F5E607B75E07EC4A59C00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3444e902-1448-382c-8b54-a3d880eb825d.roa
Signing time:             Wed 06 Nov 2024 14:00:41 +0000
ROA not before:           Wed 06 Nov 2024 14:00:41 +0000
ROA not after:            Tue 04 Feb 2025 14:00:41 +0000
asID:                     397233
IP address blocks:        156.154.65.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:3f:5e:60:7b:75:e0:7e:c4:a5:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Nov  6 14:00:41 2024 GMT
            Not After : Feb  4 14:00:41 2025 GMT
        Subject: CN=fd5bfec7-464b-482a-8e40-b81a88016b21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f4:32:0e:39:a4:cb:5d:13:5a:3c:fa:f6:95:
                    48:91:af:46:55:11:2b:fa:1e:27:47:8b:72:87:a6:
                    cd:ae:f3:73:53:9b:b5:c9:aa:4a:7c:b1:9a:31:55:
                    5f:a2:1b:16:85:c9:61:ea:e6:6b:21:b5:de:ce:29:
                    15:d5:a5:28:e0:d5:77:41:ce:a1:46:3e:33:39:05:
                    0f:8a:b1:9e:98:76:14:7b:2a:5a:23:eb:2c:b9:34:
                    e5:22:80:2e:43:38:c6:1c:11:67:87:83:9c:31:b1:
                    60:a2:48:1b:8a:00:29:5a:fe:85:0c:d2:e2:8a:6e:
                    9e:26:ea:2d:b7:d4:a4:dc:f8:8f:c5:95:db:8b:16:
                    0f:c4:0f:75:4c:cf:39:d1:94:ab:1e:27:42:e8:bc:
                    c1:09:ec:95:2f:91:a4:d0:27:f1:b6:18:e7:f4:06:
                    0d:1f:7e:49:2c:c2:f7:ba:a0:29:40:b6:42:72:e1:
                    34:09:ba:d4:36:87:f5:f3:df:a6:e1:88:dd:de:c5:
                    10:61:16:52:4c:3d:8a:a7:0e:d1:63:8f:fb:d7:e6:
                    14:50:80:81:28:91:71:f1:ae:80:92:b3:95:c5:ae:
                    68:b2:dd:c5:55:77:48:29:ec:c0:17:e3:a4:51:7a:
                    b7:0c:9a:cf:55:44:56:56:66:d2:b4:e7:75:95:b6:
                    9e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:04:CC:58:F5:3F:10:6C:BA:E2:8B:BB:FD:75:FA:A3:C6:4A:A0:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3444e902-1448-382c-8b54-a3d880eb825d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:c2:6f:6c:bb:c3:e8:44:07:8b:80:52:68:2f:3e:0f:ad:fb:
         87:67:42:cf:b9:38:79:69:5f:de:9d:4f:3c:6f:22:58:9b:b7:
         64:f7:9b:27:b4:36:2f:d5:87:d0:0e:b6:79:47:3b:66:b5:de:
         ee:2c:80:27:6d:1a:7f:a3:e1:2d:e6:e6:ce:85:a1:72:18:e4:
         57:db:42:94:e4:d5:cb:18:e3:7e:ae:8b:b9:97:e4:8f:cc:17:
         16:40:77:ec:ed:fd:f8:a3:d2:7d:24:cb:be:c3:5f:f8:47:df:
         33:65:2f:72:26:2a:80:44:61:00:e0:c7:05:39:47:fa:6f:ec:
         39:2f:a9:fe:8c:cf:64:99:fa:f5:10:f0:4e:ce:ea:da:de:59:
         22:50:af:ee:97:3a:43:51:93:24:26:e1:61:da:a0:36:89:09:
         99:4a:fd:ef:bd:fd:96:33:14:26:3f:5b:46:f2:2f:19:5b:73:
         4f:dd:37:3f:d6:c5:85:27:84:ab:79:8a:84:63:98:1e:9f:35:
         01:e5:98:52:a7:83:d7:9b:1c:78:03:51:9a:ef:9d:bb:5d:be:
         57:03:5e:01:88:35:c7:3d:59:5a:fa:49:d7:48:5f:fd:09:62:
         cf:dc:b3:3b:f9:3e:95:af:ad:4a:5d:8e:b7:d2:85:4f:e8:28:
         c0:87:05:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:30:54 2024 by rpki-client on console-ams.rpki-client.org