Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/358c2f58-4917-304b-a14e-880db4db374b.roa
File:                     358c2f58-4917-304b-a14e-880db4db374b.roa (raw, json)
Hash identifier:          sxMgsulKVOb3kW5rFJy8/ysWVqqQE+FU7TURQV0Ulq4=
Subject key identifier:   7A:07:8A:A1:87:05:89:C1:4F:C9:CF:BD:5E:C9:9F:ED:B4:81:66:B2
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584511B589F9BA56E1FB8F087A00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/358c2f58-4917-304b-a14e-880db4db374b.roa
Signing time:             Sat 02 Mar 2024 02:00:26 +0000
ROA not before:           Sat 02 Mar 2024 02:00:26 +0000
ROA not after:            Fri 31 May 2024 01:00:26 +0000
asID:                     397240
IP address blocks:        156.154.104.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:11:b5:89:f9:ba:56:e1:fb:8f:08:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  2 02:00:26 2024 GMT
            Not After : May 31 01:00:26 2024 GMT
        Subject: CN=ec2d0419-31fd-43d5-bc93-f01c345179b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:48:a5:c2:0e:29:94:6e:3d:6c:7f:17:f6:b4:
                    06:af:57:d9:46:40:7f:74:af:20:2c:b5:45:1c:5a:
                    ee:e6:82:97:83:9c:93:24:bb:24:02:26:18:ff:26:
                    09:bd:34:3f:10:8b:72:d6:3e:fe:53:96:47:cb:35:
                    ad:cf:75:5c:93:5d:40:8c:9b:43:59:fc:1e:1a:da:
                    55:95:99:4e:8d:69:4b:66:ca:66:c9:7f:21:7a:3a:
                    5b:87:16:de:9e:d6:1c:7f:95:e7:df:d7:85:bf:a4:
                    ba:a7:68:fc:51:d3:3d:65:58:93:f0:31:65:28:4a:
                    a3:f0:8f:81:a5:d3:8e:06:cd:b8:00:b5:19:a3:c5:
                    8c:8d:1d:9d:2f:ae:6c:ed:61:24:2f:ea:b6:b6:2c:
                    2b:6a:49:37:99:35:58:43:b0:fd:71:ce:ab:c6:a9:
                    5c:85:73:4d:44:2b:f4:fe:47:d9:7f:7a:e5:b4:e8:
                    18:8a:af:9f:ef:4c:5b:e1:f7:90:40:35:1d:8c:55:
                    c2:62:5b:ba:45:d6:6e:db:ed:ef:1f:3b:72:5c:ca:
                    1b:d3:b0:3e:e8:37:db:03:a8:3f:83:61:d7:c6:7e:
                    1d:77:d5:d6:24:d6:45:60:5b:00:bc:a3:ed:39:fe:
                    c2:cd:dd:53:1e:20:53:65:65:60:1c:93:43:23:d7:
                    78:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:07:8A:A1:87:05:89:C1:4F:C9:CF:BD:5E:C9:9F:ED:B4:81:66:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/358c2f58-4917-304b-a14e-880db4db374b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:00:1c:fc:23:0d:a6:8e:8d:01:78:4e:e8:41:c6:2c:d3:b3:
         9d:7f:21:7e:e4:8b:df:a8:64:df:bf:8f:a9:b4:ab:ba:ff:af:
         75:a9:9b:47:fb:6a:a3:5c:fb:b3:19:1c:de:40:78:f8:e4:1a:
         92:e1:02:e7:36:de:f3:86:1a:64:38:ab:af:6a:60:f2:b3:dd:
         98:f5:fe:3d:7a:51:fd:72:6a:f1:ae:9d:ee:3e:4a:30:4b:5f:
         a6:cb:07:7b:96:a2:f4:9f:f8:6e:17:ea:cf:ff:51:c7:ab:35:
         af:f6:a9:99:dd:21:e2:a2:fe:34:f8:a8:cb:1a:2e:68:e5:05:
         3c:da:15:7a:a8:bf:bc:e3:ca:65:d1:5f:d3:57:9c:b1:3e:91:
         86:f4:15:be:e1:7b:18:85:c1:bd:b6:64:da:1e:1f:66:f0:f5:
         35:53:58:d0:95:e4:3c:4c:50:db:a9:7a:a7:41:08:e2:ac:6a:
         81:a2:eb:61:f9:42:d7:24:ed:06:25:a5:a4:99:df:b3:d6:83:
         da:99:6f:0c:6d:e5:35:4f:c8:29:12:7c:2d:25:e9:a7:a8:7f:
         52:94:31:6c:4d:a3:81:c8:15:1e:15:8a:41:1f:ec:9b:15:49:
         7b:0b:00:8d:2f:55:e4:22:24:79:7c:ad:31:d7:b3:5e:4c:0f:
         61:09:33:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:32:31 2024 by rpki-client on console-fra.rpki-client.org