Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3be8da86-16ec-340c-88ac-0481eaeee7ee.roa
File:                     3be8da86-16ec-340c-88ac-0481eaeee7ee.roa (raw, json)
Hash identifier:          WQfR2ehSxfQRkPh2y7SiPC2H3NEUtRZ5pBhz41cKWmE=
Subject key identifier:   C0:98:70:06:3F:2D:AC:38:A7:A9:60:3F:0F:66:7E:63:65:5E:9F:F3
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847CA3F4D80722DD3EC69174D80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3be8da86-16ec-340c-88ac-0481eaeee7ee.roa
Signing time:             Wed 06 Nov 2024 14:00:41 +0000
ROA not before:           Wed 06 Nov 2024 14:00:41 +0000
ROA not after:            Tue 04 Feb 2025 14:00:41 +0000
asID:                     397226
IP address blocks:        156.154.142.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:3f:4d:80:72:2d:d3:ec:69:17:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Nov  6 14:00:41 2024 GMT
            Not After : Feb  4 14:00:41 2025 GMT
        Subject: CN=85e1fe34-f805-4f69-baaf-479c3672d10f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:63:db:09:0b:7d:d3:a3:08:f7:be:96:fd:cb:
                    26:15:67:1f:ba:8e:80:21:92:c0:92:cf:ba:ca:ab:
                    29:57:20:f6:f5:b8:3c:27:7a:b2:0e:12:5e:e1:65:
                    7f:c7:6c:00:08:be:d3:8f:2a:57:40:0a:e4:47:fb:
                    7f:d7:07:e6:35:75:1d:fe:af:9b:b6:11:b4:77:f0:
                    8b:25:7c:4e:23:36:c9:c2:1e:f7:61:52:a6:78:6b:
                    1d:59:75:a5:83:4a:91:dc:f5:d7:08:9c:df:d6:60:
                    d6:85:70:9c:41:d3:bd:b5:4e:e2:12:14:92:64:57:
                    2f:49:9a:c3:7f:fb:1d:bd:fc:fc:22:a9:07:81:55:
                    cb:1a:ae:d1:64:cc:68:08:89:30:b9:c0:60:95:65:
                    41:15:0e:e3:9d:84:71:5c:a8:f7:d8:18:5b:fc:95:
                    da:5d:7f:67:da:91:e2:a3:b8:aa:ef:91:9c:c5:39:
                    d6:89:35:48:4e:05:e7:b0:84:f5:da:1d:33:7c:d6:
                    fe:ba:7a:a4:24:7c:f1:75:93:5a:8f:41:04:6b:32:
                    a0:64:25:f6:ef:1b:2d:be:c3:38:fd:1c:96:86:0a:
                    33:99:2e:b0:82:17:9e:2f:f8:cb:72:45:16:38:52:
                    7c:cb:3d:71:bb:60:97:13:67:f1:82:cf:85:b4:1a:
                    7d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:98:70:06:3F:2D:AC:38:A7:A9:60:3F:0F:66:7E:63:65:5E:9F:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3be8da86-16ec-340c-88ac-0481eaeee7ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:a3:5e:3f:50:85:21:9d:89:65:07:c1:10:f8:60:cd:ee:79:
         be:9c:a7:20:49:ab:6e:76:82:53:ad:4f:a6:db:f1:ad:ed:d6:
         8e:fa:1c:87:7d:5d:a2:4d:72:20:6e:09:1c:63:ae:05:7e:20:
         09:6d:e4:aa:d5:25:35:11:1f:5f:ec:ac:3a:eb:1e:91:6d:f8:
         2d:6f:3e:fb:c1:e6:60:bc:13:8e:f1:e8:e5:ac:63:30:d1:0e:
         32:8a:a5:16:73:17:d9:8b:04:1c:be:01:d2:24:28:3b:b5:22:
         9f:dd:c2:ec:64:a5:10:71:1f:94:6a:a7:c3:00:b1:8a:5c:af:
         fb:a0:63:6d:5b:5c:ce:d7:fb:8b:0b:b6:02:65:be:12:12:1b:
         d4:2e:d2:5c:3a:37:32:26:ca:55:e3:07:dc:34:8f:00:a9:26:
         55:62:2b:36:cd:0b:d6:18:d6:ec:79:e9:29:d7:24:be:3b:ea:
         6a:47:2f:93:31:4d:9f:9d:9f:75:1d:c7:03:0f:17:52:de:cf:
         da:11:76:87:06:61:ba:99:4b:6e:be:b0:5b:09:5d:71:cb:af:
         ae:e8:2a:ef:7a:c0:9e:cc:97:f8:35:aa:b7:30:1d:7d:f1:9a:
         ab:2d:c8:63:54:33:76:b0:06:e0:5c:fc:ab:a7:19:88:e9:a1:
         5e:07:e1:f1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfKP02Aci3T7GkXTYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI0MTEwNjE0MDA0MVoXDTI1MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk
ODVlMWZlMzQtZjgwNS00ZjY5LWJhYWYtNDc5YzM2NzJkMTBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmPbCQt906MI976W/csmFWcfuo6AIZLAks+6
yqspVyD29bg8J3qyDhJe4WV/x2wACL7TjypXQArkR/t/1wfmNXUd/q+bthG0d/CL
JXxOIzbJwh73YVKmeGsdWXWlg0qR3PXXCJzf1mDWhXCcQdO9tU7iEhSSZFcvSZrD
f/sdvfz8IqkHgVXLGq7RZMxoCIkwucBglWVBFQ7jnYRxXKj32Bhb/JXaXX9n2pHi
o7iq75GcxTnWiTVITgXnsIT12h0zfNb+unqkJHzxdZNaj0EEazKgZCX27xstvsM4
/RyWhgozmS6wgheeL/jLckUWOFJ8yz1xu2CXE2fxgs+FtBp9cQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMCYcAY/Law4p6lgPw9mfmNlXp/zMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvM2JlOGRhODYtMTZlYy0z
NDBjLTg4YWMtMDQ4MWVhZWVlN2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACujXj9QhSGdiWUHwRD4YM3ueb6cpyBJq252glOtT6bb8a3t1o76HId9
XaJNciBuCRxjrgV+IAlt5KrVJTURH1/srDrrHpFt+C1vPvvB5mC8E47x6OWsYzDR
DjKKpRZzF9mLBBy+AdIkKDu1Ip/dwuxkpRBxH5Rqp8MAsYpcr/ugY21bXM7X+4sL
tgJlvhISG9Qu0lw6NzImylXjB9w0jwCpJlViKzbNC9YY1ux56SnXJL476mpHL5Mx
TZ+dn3UdxwMPF1Lez9oRdocGYbqZS26+sFsJXXHLr67oKu96wJ7Ml/g1qrcwHX3x
mqstyGNUM3awBuBc/KunGYjpoV4H4fE=
-----END CERTIFICATE-----
Generated at Mon Nov 25 16:05:34 2024 by rpki-client on console-fra.rpki-client.org