Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/372db10a-91a0-3eda-863f-2b8a140c263e.roa
File:                     372db10a-91a0-3eda-863f-2b8a140c263e.roa (raw, json)
Hash identifier:          jcp/POf3zn/LfenQO/xuRNI76aKC1q6e1jUl8IhjUQM=
Subject key identifier:   AA:ED:5E:76:F6:70:7E:94:0F:86:40:D3:AC:50:5B:80:C5:A1:B4:DD
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847527CA8B120DA54DB95EC56C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/372db10a-91a0-3eda-863f-2b8a140c263e.roa
Signing time:             Tue 24 Sep 2024 16:27:24 +0000
ROA not before:           Tue 24 Sep 2024 16:27:24 +0000
ROA not after:            Mon 23 Dec 2024 17:27:24 +0000
asID:                     397223
IP address blocks:        156.154.110.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:52:7c:a8:b1:20:da:54:db:95:ec:56:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 24 16:27:24 2024 GMT
            Not After : Dec 23 17:27:24 2024 GMT
        Subject: CN=8ef8da26-6b0e-4e43-86a9-8248859ddeba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:84:11:72:d4:95:e0:92:49:48:90:69:93:96:
                    bf:97:bb:ee:b1:f7:34:c7:b2:9c:86:23:b1:a7:b4:
                    72:6b:dc:a3:10:de:ec:58:d8:dd:1a:b5:73:2c:19:
                    20:20:a2:29:14:3c:3c:d8:d7:37:a5:a6:69:8b:aa:
                    89:8e:d0:4c:b4:2a:61:09:3f:2d:00:b4:92:3b:2c:
                    63:d4:37:81:b4:bc:da:34:7a:f9:02:32:a4:3d:15:
                    e6:6e:1c:77:9c:0d:e3:0b:62:75:1e:02:f8:47:68:
                    c2:aa:5d:9a:bc:5a:70:ca:10:ea:1f:dc:85:b9:74:
                    cd:a0:61:ac:b7:7e:fc:9f:2e:0a:10:62:5d:48:1f:
                    3d:dc:3d:ae:d0:eb:b0:6c:ae:5a:16:64:03:e7:c2:
                    22:e6:29:b3:55:8f:b1:fd:14:38:27:cf:67:ab:9f:
                    20:75:60:d0:a8:46:73:55:48:bf:5e:1a:6b:6c:c4:
                    b7:4f:5c:04:5c:68:bf:41:f4:99:de:8d:6f:11:24:
                    77:2e:e0:9f:87:a0:3a:0a:df:ea:af:f5:3f:66:43:
                    3b:d1:1a:07:00:9c:21:f9:15:b3:2b:65:51:6e:21:
                    44:ef:fb:33:d2:55:f3:55:47:ff:53:0c:32:9c:a5:
                    99:bb:8d:36:05:13:66:f5:f0:47:67:65:9e:df:1d:
                    c0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:ED:5E:76:F6:70:7E:94:0F:86:40:D3:AC:50:5B:80:C5:A1:B4:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/372db10a-91a0-3eda-863f-2b8a140c263e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:96:08:16:04:a0:2c:68:b2:1a:ec:43:12:7b:1c:cb:b4:a2:
         13:ec:e0:b0:e6:11:51:78:d7:fb:fa:49:cb:44:af:fb:3c:45:
         f8:d5:6a:0c:53:81:fe:ff:6f:00:ca:47:8b:2b:7d:2e:de:c8:
         d7:02:07:61:10:61:f3:cd:ed:65:b5:13:9c:ba:36:ae:b4:1f:
         d4:ee:a3:8b:c3:c6:fd:7d:85:64:b6:7f:fd:ce:5a:80:83:d9:
         72:6e:00:47:42:2a:be:aa:78:25:f2:32:74:82:e9:56:18:10:
         30:b7:32:a4:45:67:43:33:a3:9f:e3:46:b6:a3:e8:f7:da:4a:
         1d:c7:07:f3:ec:98:1c:4e:d9:de:c8:95:a8:87:a1:df:9a:b2:
         b8:12:81:bc:af:fd:53:fa:d2:a9:fe:17:18:ea:4f:97:16:05:
         47:fe:18:8f:d2:8a:61:47:e3:ed:28:cd:79:2b:88:67:07:60:
         77:46:c9:85:2f:08:a9:0d:44:cd:4a:08:fd:79:eb:db:e8:16:
         1e:f8:dd:28:1f:14:38:67:a9:23:67:82:b2:65:11:24:29:43:
         83:c8:aa:b3:5e:e4:b2:9f:9b:4f:97:e3:be:df:79:d9:f4:c6:
         37:c3:25:73:a3:6b:c9:91:12:e2:e7:20:79:61:11:e7:a0:3e:
         e0:9b:05:90
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdSfKixINpU25XsVsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI0MDkyNDE2MjcyNFoXDTI0MTIyMzE3MjcyNFowLzEtMCsGA1UEAxMk
OGVmOGRhMjYtNmIwZS00ZTQzLTg2YTktODI0ODg1OWRkZWJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYQRctSV4JJJSJBpk5a/l7vusfc0x7KchiOx
p7Rya9yjEN7sWNjdGrVzLBkgIKIpFDw82Nc3paZpi6qJjtBMtCphCT8tALSSOyxj
1DeBtLzaNHr5AjKkPRXmbhx3nA3jC2J1HgL4R2jCql2avFpwyhDqH9yFuXTNoGGs
t378ny4KEGJdSB893D2u0OuwbK5aFmQD58Ii5imzVY+x/RQ4J89nq58gdWDQqEZz
VUi/XhprbMS3T1wEXGi/QfSZ3o1vESR3LuCfh6A6Ct/qr/U/ZkM70RoHAJwh+RWz
K2VRbiFE7/sz0lXzVUf/UwwynKWZu402BRNm9fBHZ2We3x3AEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKrtXnb2cH6UD4ZA06xQW4DFobTdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMzcyZGIxMGEtOTFhMC0z
ZWRhLTg2M2YtMmI4YTE0MGMyNjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHGWCBYEoCxoshrsQxJ7HMu0ohPs4LDmEVF41/v6SctEr/s8RfjVagxT
gf7/bwDKR4srfS7eyNcCB2EQYfPN7WW1E5y6Nq60H9Tuo4vDxv19hWS2f/3OWoCD
2XJuAEdCKr6qeCXyMnSC6VYYEDC3MqRFZ0Mzo5/jRraj6PfaSh3HB/PsmBxO2d7I
laiHod+asrgSgbyv/VP60qn+FxjqT5cWBUf+GI/SimFH4+0ozXkriGcHYHdGyYUv
CKkNRM1KCP1569voFh743SgfFDhnqSNngrJlESQpQ4PIqrNe5LKfm0+X477fedn0
xjfDJXOja8mREuLnIHlhEeegPuCbBZA=
-----END CERTIFICATE-----
Generated at Fri Nov 22 07:02:00 2024 by rpki-client on console-fra.rpki-client.org