Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3b5ff281-7f3f-30f9-8cdb-1d6abca318a3.roa
File:                     3b5ff281-7f3f-30f9-8cdb-1d6abca318a3.roa (raw, json)
Hash identifier:          5ONflzRFnreiWeu2d7UbMUy9IcL0q9AarrGuDNSoAPw=
Subject key identifier:   70:7C:E9:CF:B0:B7:C3:D3:2C:55:4C:3B:6A:48:E7:4A:DC:9E:94:E7
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285846E96585DF227A070E9EFBD680
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3b5ff281-7f3f-30f9-8cdb-1d6abca318a3.roa
Signing time:             Sun 18 Aug 2024 01:00:29 +0000
ROA not before:           Sun 18 Aug 2024 01:00:29 +0000
ROA not after:            Sat 16 Nov 2024 02:00:29 +0000
asID:                     397222
IP address blocks:        156.154.173.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Oct 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:e9:65:85:df:22:7a:07:0e:9e:fb:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 18 01:00:29 2024 GMT
            Not After : Nov 16 02:00:29 2024 GMT
        Subject: CN=3e9eecc0-986f-431b-9bb2-966a5401bd07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b7:6d:7b:8b:25:f3:bd:5b:07:e7:ac:c6:bc:
                    e2:45:1b:93:07:d2:e0:b2:f1:91:19:d3:ca:57:0b:
                    36:6e:c2:59:4a:5d:12:b7:d8:b4:aa:e4:ff:6f:db:
                    43:88:aa:a1:a7:d6:d5:3d:93:7d:97:20:d2:15:46:
                    62:1a:6f:46:b5:d5:4e:e7:0d:b2:59:7e:12:06:fa:
                    87:29:98:b1:37:0c:a2:2e:e1:90:2b:00:88:1f:80:
                    24:27:1e:22:0b:47:37:e0:90:e0:f0:b0:6a:94:9a:
                    19:51:a4:04:b8:ad:ad:32:67:0d:97:d2:e9:c6:a3:
                    66:a1:03:cd:47:d0:72:bd:2a:66:d2:a5:70:73:13:
                    66:2f:71:ac:84:73:05:c4:ac:e9:a7:33:87:a6:28:
                    3a:33:08:63:66:98:3b:0d:6c:c0:60:7c:d6:c1:e6:
                    8e:b3:c8:60:b1:f9:9f:0d:91:e4:42:19:3b:a6:ab:
                    1f:b4:c6:8b:52:e0:ad:9f:58:35:f1:35:b2:b1:43:
                    3a:55:00:43:b6:62:e8:c4:f8:99:e2:f3:4c:fb:c7:
                    b8:30:8e:db:fd:59:d3:1c:74:1d:b3:c4:f8:64:2c:
                    0e:c8:13:72:ed:a7:b5:30:56:da:4d:4b:6f:55:48:
                    aa:c3:14:1e:b6:44:ef:2f:24:52:c3:dd:c9:c9:9a:
                    91:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:7C:E9:CF:B0:B7:C3:D3:2C:55:4C:3B:6A:48:E7:4A:DC:9E:94:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3b5ff281-7f3f-30f9-8cdb-1d6abca318a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:a2:cb:75:e8:55:0e:7f:5b:14:d6:22:e4:6a:be:28:52:cf:
         c2:8c:ef:c7:c1:0e:ec:e8:37:fd:d8:24:a6:4c:8d:b5:77:36:
         d7:a0:20:70:ba:b4:9a:99:27:ea:27:0d:a6:fd:45:58:04:8b:
         3b:c9:7e:6a:b0:c0:ad:bd:4e:ae:7d:6b:ef:cd:f4:5f:82:84:
         44:ce:0e:7f:e8:a3:fe:42:a8:b2:50:cb:ee:5b:36:13:d4:d9:
         af:28:88:bd:78:85:42:fd:be:e8:9a:b4:10:7c:a5:85:b4:01:
         73:81:f8:ae:d0:27:74:88:7d:15:bd:9e:1f:68:8a:76:b9:90:
         62:c7:a8:10:a4:4d:b9:d9:76:c6:05:b8:6c:df:ce:f1:f9:e9:
         7b:63:5e:6c:83:79:6a:03:51:42:4a:45:7d:4d:b4:eb:66:9c:
         16:6b:75:cc:43:d7:50:71:85:ac:59:25:20:05:96:13:6c:9a:
         7d:9f:1b:88:12:08:47:6c:02:29:9f:7b:8f:5c:4f:d1:98:62:
         1f:db:49:5d:46:0c:7e:2f:62:ed:75:c6:ae:f1:fc:b9:c2:f8:
         c2:bb:2c:35:71:46:99:0e:b0:31:97:9f:4a:57:91:35:ce:0e:
         fc:d8:f2:39:8b:71:0c:f3:91:f9:de:43:18:dd:ba:b4:30:d1:
         ee:09:b2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 18:47:27 2024 by rpki-client on console-fra.rpki-client.org