Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/45952d5f-e52a-3f61-b79c-b9c8dbf6cca5.roa
File:                     45952d5f-e52a-3f61-b79c-b9c8dbf6cca5.roa (raw, json)
Hash identifier:          /cdk5YcePX6VUCf6S+NDwGt3GeWGd/AjzNrasQ5Tfbo=
Subject key identifier:   6B:C6:85:34:D6:CF:89:49:81:08:39:AF:6B:EC:41:8E:61:DF:A8:CE
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858479D76E531F885D13315E45D00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/45952d5f-e52a-3f61-b79c-b9c8dbf6cca5.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     397229
IP address blocks:        156.154.105.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:e5:31:f8:85:d1:33:15:e4:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=61ea2366-b451-4389-82ae-f312286f15f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b4:ea:9e:7d:13:a7:6c:96:54:f3:f4:db:5c:
                    9d:d2:b5:d4:ef:d8:26:dc:cb:47:3b:0a:66:bb:c3:
                    02:9f:bf:c3:81:81:ac:2e:bc:62:d8:b3:93:77:03:
                    23:82:e1:fa:63:53:cd:a6:36:46:8b:21:b9:fd:51:
                    d3:89:54:78:ea:0f:c2:ec:d7:05:9b:26:51:18:a4:
                    9e:0e:2f:b6:ef:90:a5:e9:35:c5:27:8c:e5:01:06:
                    16:a1:dc:bd:92:1e:9a:b1:2d:00:6f:38:49:9b:72:
                    e8:db:ff:45:4a:f2:2b:e4:f0:99:60:1f:54:54:74:
                    90:a9:72:f1:6a:67:e0:12:29:9e:98:07:43:fd:37:
                    41:c6:55:40:07:de:2a:d8:5e:f3:2c:a5:d6:09:a2:
                    da:96:f1:88:8e:58:85:0e:92:bf:3b:7d:ad:d5:96:
                    d4:c9:fa:3e:03:5a:03:d0:69:75:20:85:bb:71:e3:
                    d5:cd:9f:a4:c8:6e:53:61:c8:16:6d:a2:e9:0a:4a:
                    97:f7:b2:69:75:07:74:de:1e:1a:13:80:68:6c:a3:
                    75:7c:db:07:c2:88:ab:ad:24:49:a9:2e:70:56:cd:
                    0a:b6:7a:33:b4:37:a6:3c:36:95:e0:22:fd:a0:ec:
                    63:13:39:b8:49:0c:37:0c:ac:42:86:9a:80:16:b6:
                    45:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:C6:85:34:D6:CF:89:49:81:08:39:AF:6B:EC:41:8E:61:DF:A8:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/45952d5f-e52a-3f61-b79c-b9c8dbf6cca5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:fc:15:f3:6a:a0:e9:ee:6b:43:48:e0:bb:2f:0b:d3:5d:57:
         01:20:b3:b2:98:4d:3f:93:1b:54:04:6b:b8:95:e7:6a:01:86:
         17:7c:da:23:f3:b0:df:a7:94:a7:ef:5f:fc:f0:4a:5f:fc:31:
         45:9a:87:01:40:90:fa:21:40:6f:0b:d4:1f:71:19:5b:2b:dd:
         9d:fb:1c:52:1c:92:2f:01:5e:a9:b6:8c:98:d1:8a:ff:b4:d1:
         e8:53:a5:98:08:6f:3e:e0:50:f0:67:b6:f0:06:4e:78:0a:e9:
         f9:84:a3:77:86:90:63:aa:fd:37:da:bd:a2:15:58:a1:50:40:
         2c:a7:47:15:ca:33:b1:eb:71:bf:af:2e:ed:9f:92:e0:72:35:
         08:88:37:37:fe:ff:ef:2f:69:62:72:2c:f2:f0:73:03:99:b4:
         51:b8:4e:44:f3:59:73:6c:92:55:96:a1:89:67:d6:5d:b0:68:
         0d:bb:ab:0d:40:0e:ba:40:05:dc:89:79:f2:4c:84:4c:ca:a5:
         e0:aa:0d:e0:7a:84:84:76:30:b5:12:5c:bb:f9:23:e0:d3:89:
         07:ce:51:87:6c:9d:65:c2:f2:85:e9:93:3e:49:34:30:2a:3b:
         88:18:8f:22:af:64:7d:bb:ae:00:f9:a7:e2:da:0f:d3:38:2b:
         17:f1:4f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:30:55 2024 by rpki-client on console-ams.rpki-client.org