Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3bbd8d1e-5eba-30af-98be-1dbee1cd3106.roa
File:                     3bbd8d1e-5eba-30af-98be-1dbee1cd3106.roa (raw, json)
Hash identifier:          9Cg1/QhGxffiyPNguvEQQKCdkc5mKTXTmlNWXpOqxvs=
Subject key identifier:   D3:83:7A:19:B2:05:96:35:02:91:7A:7F:EE:46:97:59:22:3A:D2:B6
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285846FCF05573B06D1D298B39A980
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3bbd8d1e-5eba-30af-98be-1dbee1cd3106.roa
Signing time:             Sun 25 Aug 2024 01:00:32 +0000
ROA not before:           Sun 25 Aug 2024 01:00:32 +0000
ROA not after:            Sat 23 Nov 2024 02:00:32 +0000
asID:                     397234
IP address blocks:        156.154.174.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Oct 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:fc:f0:55:73:b0:6d:1d:29:8b:39:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 25 01:00:32 2024 GMT
            Not After : Nov 23 02:00:32 2024 GMT
        Subject: CN=6627bedc-65dd-43c0-bc92-db4d7dc99a1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6a:fe:a0:57:f8:22:bf:8c:ba:b5:11:4f:1b:
                    98:8e:77:d4:66:f6:38:bd:cd:ac:80:d2:d7:ad:97:
                    7b:33:17:a1:18:11:48:05:07:d5:97:55:db:73:67:
                    08:1d:22:3c:f2:ba:7d:9b:b1:db:4c:69:d7:b8:4a:
                    61:5d:57:72:33:20:3e:52:f1:96:17:e2:72:e7:47:
                    e6:dc:35:13:65:32:bb:01:63:e7:b2:ce:4c:a5:ac:
                    1a:e4:88:3c:5d:15:41:cd:91:47:69:db:df:16:0d:
                    c3:d9:0f:19:23:f0:f1:83:66:24:39:fa:1d:65:d9:
                    1b:52:aa:df:0c:46:40:04:4a:18:24:80:ce:3d:b5:
                    b8:5f:b2:16:b1:1b:ca:12:55:1e:37:91:bc:0a:06:
                    13:a1:75:d4:85:55:05:28:14:f9:65:23:e0:9c:e7:
                    b9:f5:8b:e4:21:7a:31:36:91:9a:4e:e9:de:c1:27:
                    26:a8:30:78:5f:58:58:45:a9:40:fd:aa:35:7b:d2:
                    e9:c6:e8:14:0e:a7:c8:ef:44:c8:d2:8c:c6:d0:3c:
                    6c:9a:5f:27:ab:64:fa:be:cc:e0:e9:8a:97:47:a6:
                    af:14:53:99:9a:e9:95:5d:03:2f:fd:94:73:4d:04:
                    58:74:4f:33:7c:a8:de:90:dd:64:a0:36:74:92:50:
                    ed:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:83:7A:19:B2:05:96:35:02:91:7A:7F:EE:46:97:59:22:3A:D2:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3bbd8d1e-5eba-30af-98be-1dbee1cd3106.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:2e:f4:ae:a4:55:b8:11:b8:f4:3b:b4:a2:d3:52:19:1e:fc:
         81:e2:f4:6e:ad:31:82:8f:5e:c6:1e:93:ad:43:e6:84:8c:e7:
         f8:18:f9:ac:7b:c1:0a:06:06:4d:a4:6b:18:30:27:6a:ba:f5:
         8f:0f:fe:e5:a5:01:b1:aa:66:b1:34:05:8a:ad:2b:8e:35:de:
         f2:5a:10:7e:66:85:80:11:c4:53:b4:e7:08:5b:31:7b:46:fa:
         67:ad:53:b5:db:65:27:74:45:a5:8f:e0:4a:23:34:83:81:5d:
         9c:37:ea:53:a3:6f:1f:0c:67:9c:26:9b:ba:79:ae:9b:2a:ab:
         50:d7:67:fd:16:3e:24:dc:cf:00:09:c4:48:f0:f3:16:b7:90:
         42:b6:47:d7:7c:de:32:66:c5:d3:06:2d:f9:42:0c:01:3f:0f:
         dd:c7:06:15:fb:ac:97:bb:14:58:53:eb:cd:b0:c0:d2:d1:b3:
         76:5f:6d:4d:0d:1a:7b:65:3e:ad:27:72:b1:69:1d:a0:f6:72:
         e7:d9:29:d5:04:6b:d2:5e:ad:eb:b7:a8:87:fa:58:f5:25:dc:
         1d:3d:a9:a3:1f:cf:b0:c1:10:3a:c7:c8:cc:68:d2:cc:db:0e:
         b6:b2:af:43:6f:e8:d4:79:e1:36:2e:8a:ce:07:2b:fb:49:a4:
         08:b6:2a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 20:01:08 2024 by rpki-client on console-ams.rpki-client.org