Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3c1e0faa-f2cd-3ac2-8d60-c9047539c3d6.roa
File:                     3c1e0faa-f2cd-3ac2-8d60-c9047539c3d6.roa (raw, json)
Hash identifier:          qDs+aX9oeG1vf58ComBKVRd9VtyjS1acVBw0+Xss9SM=
Subject key identifier:   C8:74:CE:F5:78:9E:0C:6B:43:9C:3D:C4:96:D0:EA:D3:E6:80:22:33
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285844ED6A98D742B4E2E70D4BDA40
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3c1e0faa-f2cd-3ac2-8d60-c9047539c3d6.roa
Signing time:             Sun 18 Feb 2024 02:00:25 +0000
ROA not before:           Sun 18 Feb 2024 02:00:25 +0000
ROA not after:            Sat 18 May 2024 01:00:25 +0000
asID:                     397240
IP address blocks:        156.154.54.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ed:6a:98:d7:42:b4:e2:e7:0d:4b:da:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Feb 18 02:00:25 2024 GMT
            Not After : May 18 01:00:25 2024 GMT
        Subject: CN=e940fed5-c374-4743-8f4a-3f616a7a1d9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b9:47:3e:d5:b6:f5:c4:17:4f:4d:71:c2:f5:
                    bc:67:75:aa:bb:45:29:c1:3b:55:27:f1:df:dc:c1:
                    7a:ec:6e:59:6f:2f:df:c3:ab:89:64:e3:37:11:27:
                    88:cc:5c:94:5f:24:69:e8:26:a2:94:76:95:cb:63:
                    fb:90:5b:f3:a6:c6:70:e4:c7:e7:6d:a7:d9:80:40:
                    09:b6:da:c7:65:b2:42:0f:e9:32:d9:c6:06:0e:29:
                    f4:b1:19:47:fb:92:48:44:3c:db:e6:7c:69:95:f2:
                    78:c5:65:4a:6c:ec:df:be:0a:d1:92:34:06:a8:93:
                    84:21:90:1a:99:d3:27:90:14:25:21:81:cf:31:dc:
                    94:58:e9:34:d3:68:92:d0:7d:46:09:89:27:c6:40:
                    a8:f5:80:b1:07:02:f8:21:41:4d:54:cf:00:a1:f6:
                    ad:dc:ce:df:a6:18:26:98:19:6c:47:98:2e:4f:cc:
                    00:d5:04:b7:63:90:6e:81:aa:d0:42:7b:e2:23:91:
                    6d:84:23:e3:15:47:3a:2a:85:2d:11:79:dd:e6:4b:
                    62:0e:f2:71:3d:ac:6f:1e:dd:e5:a8:ee:30:88:bb:
                    58:5a:df:f4:6e:8a:1a:a1:eb:ec:27:fe:9f:ff:ef:
                    76:04:96:2a:bc:2d:ad:43:2f:9f:21:d3:de:e1:32:
                    d9:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:74:CE:F5:78:9E:0C:6B:43:9C:3D:C4:96:D0:EA:D3:E6:80:22:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3c1e0faa-f2cd-3ac2-8d60-c9047539c3d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:e1:d6:b6:6a:de:ef:14:60:a4:48:db:b3:3e:20:b2:73:fa:
         2b:ec:d2:a2:f2:b3:54:c3:1e:a8:d1:00:68:7d:63:03:c4:ce:
         ed:26:76:2a:cc:97:22:23:7e:8a:d2:91:d8:d4:77:8a:e2:47:
         ce:47:0d:b8:b3:59:86:9f:08:71:8c:34:8f:31:f3:29:6d:aa:
         bf:f9:02:cb:f1:d3:88:fb:31:02:6f:08:fc:60:55:8a:b3:cb:
         11:90:7b:89:6a:26:63:12:99:39:ff:c3:6e:fe:49:16:24:62:
         12:33:2d:60:be:73:38:ff:84:dc:aa:b9:d9:61:de:b3:74:b2:
         57:de:2a:0b:c7:15:1c:46:a3:fd:02:4e:af:e3:59:a5:74:c5:
         d0:8b:92:74:e7:88:85:6a:47:21:07:46:4c:ff:4d:b4:7a:f4:
         00:99:9c:06:ce:26:2b:b0:fc:c1:8a:bd:c4:e2:b0:0d:ac:b7:
         05:82:b6:df:bc:10:81:17:1e:fc:e2:41:f2:e8:9f:bd:e8:fe:
         d5:4b:a7:af:00:f9:a4:25:d0:af:e0:64:15:d1:b0:20:86:8d:
         81:38:45:82:de:f6:ae:78:05:b5:84:eb:82:93:e7:7b:b6:c1:
         45:ad:26:d8:84:de:af:65:d3:11:47:92:a4:ba:be:e4:fc:b2:
         79:a0:13:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETtapjXQrTi5w1L2kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI0MDIxODAyMDAyNVoXDTI0MDUxODAxMDAyNVowLzEtMCsGA1UEAxMk
ZTk0MGZlZDUtYzM3NC00NzQzLThmNGEtM2Y2MTZhN2ExZDliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7lHPtW29cQXT01xwvW8Z3Wqu0UpwTtVJ/Hf
3MF67G5Zby/fw6uJZOM3ESeIzFyUXyRp6CailHaVy2P7kFvzpsZw5MfnbafZgEAJ
ttrHZbJCD+ky2cYGDin0sRlH+5JIRDzb5nxplfJ4xWVKbOzfvgrRkjQGqJOEIZAa
mdMnkBQlIYHPMdyUWOk002iS0H1GCYknxkCo9YCxBwL4IUFNVM8Aofat3M7fphgm
mBlsR5guT8wA1QS3Y5BugarQQnviI5FthCPjFUc6KoUtEXnd5ktiDvJxPaxvHt3l
qO4wiLtYWt/0booaoevsJ/6f/+92BJYqvC2tQy+fIdPe4TLZJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMh0zvV4ngxrQ5w9xJbQ6tPmgCIzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvM2MxZTBmYWEtZjJjZC0z
YWMyLThkNjAtYzkwNDc1MzljM2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJo2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAELh1rZq3u8UYKRI27M+ILJz+ivs0qLys1TDHqjRAGh9YwPEzu0mdirM
lyIjforSkdjUd4riR85HDbizWYafCHGMNI8x8yltqr/5Asvx04j7MQJvCPxgVYqz
yxGQe4lqJmMSmTn/w27+SRYkYhIzLWC+czj/hNyqudlh3rN0slfeKgvHFRxGo/0C
Tq/jWaV0xdCLknTniIVqRyEHRkz/TbR69ACZnAbOJiuw/MGKvcTisA2stwWCtt+8
EIEXHvziQfLon73o/tVLp68A+aQl0K/gZBXRsCCGjYE4RYLe9q54BbWE64KT53u2
wUWtJtiE3q9l0xFHkqS6vuT8snmgE90=
-----END CERTIFICATE-----
Generated at Fri May 3 01:54:05 2024 by rpki-client on console-fra.rpki-client.org