Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/45684b22-323f-389f-9325-78c137e48dd2.roa
File:                     45684b22-323f-389f-9325-78c137e48dd2.roa (raw, json)
Hash identifier:          9QQIu21hAcRs1vBVMug0Tpnw2M2OOAD4gmSMnN+h6Kk=
Subject key identifier:   69:1D:E8:0F:D0:B9:C7:54:2F:39:0F:ED:0C:61:F3:EF:01:3F:5A:4C
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285846E9657E657EDA54D799B0CA40
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/45684b22-323f-389f-9325-78c137e48dd2.roa
Signing time:             Sun 18 Aug 2024 01:00:29 +0000
ROA not before:           Sun 18 Aug 2024 01:00:29 +0000
ROA not after:            Sat 16 Nov 2024 02:00:29 +0000
asID:                     397237
IP address blocks:        156.154.159.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Oct 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:e9:65:7e:65:7e:da:54:d7:99:b0:ca:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 18 01:00:29 2024 GMT
            Not After : Nov 16 02:00:29 2024 GMT
        Subject: CN=827e0a5f-eee4-491c-9773-6b3c8b4bb546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:53:d5:05:b5:a2:48:6f:8b:14:7d:3b:8c:1b:
                    18:5a:9e:21:14:55:a9:12:8d:5c:a3:ae:56:01:35:
                    ee:02:71:dd:54:92:07:d5:43:4d:5e:97:dd:db:19:
                    1d:4e:a4:3c:19:ee:7f:9c:08:e2:a4:b7:79:8a:b2:
                    df:71:fa:9f:99:ae:ac:b5:8d:dc:44:be:8b:03:12:
                    b5:a4:6a:70:74:58:c2:a4:2b:5b:ac:33:e2:f1:ee:
                    6e:0e:bd:3c:83:32:6e:9c:25:cd:5f:89:1b:69:b4:
                    cf:e3:ce:4c:fd:06:75:80:1d:03:b8:69:57:43:07:
                    7a:a9:e2:4a:1c:1d:d9:4f:ad:d9:49:bd:2f:d2:87:
                    97:58:82:62:24:6b:16:37:40:ce:e6:05:db:6c:76:
                    0a:56:db:41:55:1f:a6:b1:68:57:cf:69:34:56:66:
                    a4:1b:37:09:10:fd:83:5e:14:ea:74:09:34:41:cd:
                    33:b5:61:24:be:33:b4:cf:30:cd:15:6b:e8:17:1a:
                    70:b4:d7:9f:aa:e3:cc:10:90:66:e2:e8:eb:68:ea:
                    ec:d1:cb:d3:3d:20:f8:eb:76:46:87:bf:1e:0d:41:
                    6d:0c:de:b9:2f:12:cc:56:55:26:f3:d2:0a:b3:7b:
                    af:24:db:3c:0b:f7:86:a5:cc:73:57:03:e5:d3:3d:
                    35:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:1D:E8:0F:D0:B9:C7:54:2F:39:0F:ED:0C:61:F3:EF:01:3F:5A:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/45684b22-323f-389f-9325-78c137e48dd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:39:e4:c7:bb:24:8b:f8:db:a7:a4:e4:67:e9:49:12:52:90:
         ff:e7:16:d1:a1:24:8e:9c:3c:a0:f9:78:74:e3:6b:2d:d7:fa:
         37:31:83:56:19:d6:8b:7a:53:31:77:2e:ef:96:e5:b0:ac:66:
         63:e2:cc:39:e6:35:d1:a6:18:32:42:e8:ce:0e:81:d8:d5:4a:
         82:e5:eb:dd:87:6a:59:63:85:33:1c:d7:d3:4c:fb:e3:30:94:
         c3:42:5c:ac:c3:7a:d1:7a:9c:35:ae:08:4b:e4:23:09:ba:0f:
         66:c8:3f:d0:30:f3:bc:16:48:93:6d:36:39:5e:6f:d0:c1:9f:
         86:31:02:97:29:88:a1:b5:79:3b:a4:6f:8c:e0:8c:46:aa:92:
         80:3a:95:7f:91:52:7c:5b:be:5d:eb:fd:98:13:2f:c9:59:a5:
         23:d3:a1:85:6f:5d:96:0d:fe:a8:6f:d0:0b:a2:a4:00:99:95:
         4c:47:39:ae:d9:48:b5:d2:1b:ba:11:1b:0b:f1:57:60:b4:1a:
         b2:84:bb:f8:8a:5d:7f:66:dd:24:ee:46:e6:88:4a:6c:61:30:
         66:d0:b7:1f:42:45:50:0f:d2:67:ee:e5:84:65:94:24:89:1d:
         7e:66:4f:97:4b:0f:47:f9:3a:d6:13:fe:de:7c:7b:50:be:cf:
         9f:c5:92:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 18:47:28 2024 by rpki-client on console-fra.rpki-client.org