Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/38782e4d-59eb-3a21-b933-c231d90a8bcd.roa
File:                     38782e4d-59eb-3a21-b933-c231d90a8bcd.roa (raw, json)
Hash identifier:          QaNzVgu95jTswUrSvA3roresDMANE62mCAgnGjmuBBY=
Subject key identifier:   4D:9F:2E:65:0B:5C:73:8B:B3:62:BC:B0:65:1D:F0:94:6E:24:00:71
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847527C8FEF710E29B4D09A9800
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/38782e4d-59eb-3a21-b933-c231d90a8bcd.roa
Signing time:             Tue 24 Sep 2024 16:27:13 +0000
ROA not before:           Tue 24 Sep 2024 16:27:13 +0000
ROA not after:            Mon 23 Dec 2024 17:27:13 +0000
asID:                     397236
IP address blocks:        156.154.127.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:52:7c:8f:ef:71:0e:29:b4:d0:9a:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 24 16:27:13 2024 GMT
            Not After : Dec 23 17:27:13 2024 GMT
        Subject: CN=3f81c7b5-74e1-4c9a-ac38-ce4f761ef09a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:89:44:b9:c1:0e:31:fc:59:b7:14:f8:82:09:
                    7d:54:9d:85:79:60:d4:94:5d:45:d6:0c:b5:8b:1f:
                    68:63:f3:9f:2b:7f:8d:28:99:7b:a8:6c:d3:a8:22:
                    30:66:ba:a6:f4:20:bb:2e:d5:49:dc:b3:02:73:0c:
                    2a:32:59:a7:26:ac:c1:7e:ad:ae:63:8f:f0:bd:95:
                    50:3a:06:02:6f:4e:35:4a:45:f1:3f:e8:69:91:da:
                    5c:e4:9e:99:bc:2e:78:30:04:95:1f:81:40:ee:2e:
                    75:f8:c6:a1:4e:60:2b:76:27:97:67:08:56:6a:e0:
                    94:01:cd:5f:58:e6:bf:27:df:2e:73:21:90:f5:56:
                    3a:e2:33:5d:96:e9:04:2f:64:63:0c:7b:b4:ae:1e:
                    32:8a:eb:8e:e6:c1:65:21:28:55:95:7c:ca:92:f8:
                    d5:53:65:e7:ad:c8:4e:dd:5d:c3:e1:9e:ff:74:ff:
                    6e:22:86:79:32:c5:58:af:48:ef:96:6d:af:88:38:
                    28:8e:34:3a:d4:96:a2:9d:5b:da:ce:84:41:ff:b7:
                    35:9a:81:2d:84:72:38:58:3a:17:34:8c:ec:74:a2:
                    a6:a6:5e:58:4e:2b:18:b8:df:ac:71:95:ef:bb:26:
                    a1:2f:50:fd:10:00:48:b2:73:48:28:2f:b9:d0:5b:
                    7e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:9F:2E:65:0B:5C:73:8B:B3:62:BC:B0:65:1D:F0:94:6E:24:00:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/38782e4d-59eb-3a21-b933-c231d90a8bcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:c8:01:13:61:19:ea:6f:2a:4c:19:4e:0b:33:82:f1:c9:f4:
         7c:51:23:63:c7:29:6e:b4:c7:c9:df:f1:1a:5b:3e:e8:f5:9b:
         38:b2:eb:96:19:60:0b:18:a2:c7:53:52:ab:61:2c:0a:26:0f:
         75:d8:83:9b:c3:c0:b1:60:dc:ac:c1:f8:dc:29:b5:df:1e:eb:
         d5:b9:2f:89:1e:1e:09:43:58:a3:72:55:3c:77:36:79:2b:b7:
         61:13:0e:f8:23:81:4d:35:d5:5b:5e:73:44:af:6c:8b:a3:c9:
         31:a4:88:e8:95:3d:b3:a6:22:d2:12:00:d4:5c:9b:e0:6a:59:
         79:16:fa:a8:9d:22:eb:a1:5a:33:d1:22:4f:25:50:73:2e:a3:
         a6:41:32:d8:d5:16:f0:10:7f:61:d6:93:4c:07:c7:29:91:63:
         61:1a:e4:f2:30:f2:77:1a:b4:b2:ef:a2:e5:67:2b:37:14:92:
         b5:0c:87:a0:cb:38:73:d0:21:7d:66:33:e5:fa:05:7e:b1:ba:
         66:18:5e:4d:40:a8:5c:8a:00:f3:99:31:b6:5d:df:d8:7b:22:
         46:5d:0c:ef:c9:67:3c:b2:d6:2e:f1:46:de:8d:db:32:35:3e:
         e9:02:16:85:b7:60:43:13:15:0f:f1:47:b8:29:ef:0f:1b:72:
         dd:91:76:2f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdSfI/vcQ4ptNCamAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI0MDkyNDE2MjcxM1oXDTI0MTIyMzE3MjcxM1owLzEtMCsGA1UEAxMk
M2Y4MWM3YjUtNzRlMS00YzlhLWFjMzgtY2U0Zjc2MWVmMDlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4lEucEOMfxZtxT4ggl9VJ2FeWDUlF1F1gy1
ix9oY/OfK3+NKJl7qGzTqCIwZrqm9CC7LtVJ3LMCcwwqMlmnJqzBfq2uY4/wvZVQ
OgYCb041SkXxP+hpkdpc5J6ZvC54MASVH4FA7i51+MahTmArdieXZwhWauCUAc1f
WOa/J98ucyGQ9VY64jNdlukEL2RjDHu0rh4yiuuO5sFlIShVlXzKkvjVU2XnrchO
3V3D4Z7/dP9uIoZ5MsVYr0jvlm2viDgojjQ61JainVvazoRB/7c1moEthHI4WDoX
NIzsdKKmpl5YTisYuN+scZXvuyahL1D9EABIsnNIKC+50Ft+XQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE2fLmULXHOLs2K8sGUd8JRuJABxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMzg3ODJlNGQtNTllYi0z
YTIxLWI5MzMtYzIzMWQ5MGE4YmNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAvIARNhGepvKkwZTgszgvHJ9HxRI2PHKW60x8nf8RpbPuj1mziy65YZ
YAsYosdTUqthLAomD3XYg5vDwLFg3KzB+Nwptd8e69W5L4keHglDWKNyVTx3Nnkr
t2ETDvgjgU011Vtec0SvbIujyTGkiOiVPbOmItISANRcm+BqWXkW+qidIuuhWjPR
Ik8lUHMuo6ZBMtjVFvAQf2HWk0wHxymRY2Ea5PIw8ncatLLvouVnKzcUkrUMh6DL
OHPQIX1mM+X6BX6xumYYXk1AqFyKAPOZMbZd39h7IkZdDO/JZzyy1i7xRt6N2zI1
PukCFoW3YEMTFQ/xR7gp7w8bct2Rdi8=
-----END CERTIFICATE-----
Generated at Mon Nov 25 16:05:34 2024 by rpki-client on console-fra.rpki-client.org