Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/47435754-192b-30c3-a8bf-3a3ba590bf82.roa
File:                     47435754-192b-30c3-a8bf-3a3ba590bf82.roa (raw, json)
Hash identifier:          RN378inx4EiXBmXzaIMv/yxBOqzxTlpvLFe8YA4F1XI=
Subject key identifier:   32:EE:72:94:88:43:A8:AD:A6:EB:91:A9:85:DF:81:B6:E6:56:C3:AB
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847527C88D53F5D8278DDD4F780
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/47435754-192b-30c3-a8bf-3a3ba590bf82.roa
Signing time:             Tue 24 Sep 2024 16:27:09 +0000
ROA not before:           Tue 24 Sep 2024 16:27:09 +0000
ROA not after:            Mon 23 Dec 2024 17:27:09 +0000
asID:                     397227
IP address blocks:        156.154.124.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:52:7c:88:d5:3f:5d:82:78:dd:d4:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 24 16:27:09 2024 GMT
            Not After : Dec 23 17:27:09 2024 GMT
        Subject: CN=9abde734-bb5c-4042-8c47-04c6ba52c325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:37:e9:43:65:01:78:97:9b:04:1d:19:2f:df:
                    ae:f4:77:eb:7b:c7:50:b8:16:73:bf:13:dc:be:25:
                    64:3d:0c:b4:07:66:2b:28:7f:72:9c:d1:bd:27:4c:
                    2b:05:c8:4d:92:08:09:d7:d0:d0:05:96:9b:c2:de:
                    b1:a0:00:62:f5:79:49:e6:4e:de:cd:59:38:96:b7:
                    db:9e:21:f5:ca:f2:d9:6b:f7:0d:26:f7:f1:2e:08:
                    11:f8:02:e4:00:8c:8b:bc:e1:b7:73:e7:e5:1a:d3:
                    3f:be:38:5a:54:23:6e:ac:2d:d3:e5:62:f0:90:1e:
                    92:4d:a4:93:58:05:f8:03:73:d8:c3:07:f0:fa:62:
                    f0:3e:e7:98:58:9a:50:c4:c8:dd:16:15:f8:d1:fc:
                    0c:49:69:f8:18:03:11:7d:87:d6:56:6c:7a:4c:f7:
                    7f:70:ff:2c:c2:51:a8:19:49:9d:5c:c6:8b:e9:e9:
                    b6:18:13:b9:ea:ae:73:5d:ad:16:3e:79:7d:dc:2c:
                    c6:b1:6e:17:d4:a1:b9:84:0c:c8:5c:a8:e4:73:00:
                    82:46:b6:dd:cd:28:54:4b:1e:ba:67:e5:91:95:7e:
                    ce:e3:35:e4:1b:f5:77:9b:49:da:f1:ff:51:44:2b:
                    33:ca:d9:58:af:b0:04:73:eb:62:12:65:33:4c:a4:
                    a4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:EE:72:94:88:43:A8:AD:A6:EB:91:A9:85:DF:81:B6:E6:56:C3:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/47435754-192b-30c3-a8bf-3a3ba590bf82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:18:19:d8:87:92:21:3d:63:eb:18:d1:8a:76:70:9e:f3:cf:
         1d:b6:4d:7c:3a:46:cb:eb:f6:cd:e5:4f:c7:76:dc:8f:12:8b:
         59:c2:e8:75:a6:c7:dc:18:34:d8:b0:00:8d:66:74:4a:fa:0a:
         a6:0d:0a:62:b6:7b:47:5a:ef:79:a5:d4:b4:4f:69:fb:a7:63:
         55:cf:0f:74:d1:07:71:90:c4:4b:07:ef:10:39:e9:47:d8:ae:
         5a:59:5c:d7:7a:24:a1:09:bd:5e:5f:c2:bc:79:90:86:79:a8:
         7a:a5:87:4b:cd:e6:37:43:6b:40:50:5d:e3:29:14:85:24:ad:
         ba:31:d9:15:9f:e1:9d:ba:7b:96:af:16:94:70:b2:98:e7:68:
         70:5a:d0:bd:0e:35:95:09:72:c8:a0:d3:ff:10:3c:d5:d7:54:
         78:2f:e1:7f:ee:39:df:f6:4e:41:1a:d3:0f:4a:e8:ab:92:f0:
         4b:0f:2b:64:d3:7f:af:ef:32:c7:b0:6c:7b:71:84:c5:9d:90:
         02:b2:43:d0:f7:8c:f3:a6:29:ec:19:64:a5:09:6e:dc:e2:73:
         e6:aa:7b:37:46:f9:e0:39:b3:32:2d:84:45:29:2b:5b:9f:91:
         51:ad:e2:6a:ed:7b:9e:0f:63:91:b5:82:39:8b:b0:d5:77:f8:
         ed:f4:b2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:06:39 2024 by rpki-client on console-ams.rpki-client.org