Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4a998448-b330-381e-8e27-3dde0f292982.roa
File:                     4a998448-b330-381e-8e27-3dde0f292982.roa (raw, json)
Hash identifier:          y7O7mW1a35HYIqVvwumsf9N3gBqN3QmgOfY/aum9tFs=
Subject key identifier:   06:A0:4C:D7:4F:B3:7C:6F:D5:45:10:8A:D0:EF:84:16:90:E3:7A:CA
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847CA3F60C59616184A40E45D80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4a998448-b330-381e-8e27-3dde0f292982.roa
Signing time:             Wed 06 Nov 2024 14:00:41 +0000
ROA not before:           Wed 06 Nov 2024 14:00:41 +0000
ROA not after:            Tue 04 Feb 2025 14:00:41 +0000
asID:                     397243
IP address blocks:        156.154.67.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:3f:60:c5:96:16:18:4a:40:e4:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Nov  6 14:00:41 2024 GMT
            Not After : Feb  4 14:00:41 2025 GMT
        Subject: CN=58f0b2f1-b533-40bc-b92c-0a8da182d10e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f6:c3:9a:1a:1b:fa:8d:c8:b0:fd:2e:d2:08:
                    9d:cc:f3:2e:7f:56:fc:62:f5:88:a2:03:63:ae:d4:
                    6f:41:8a:c0:ec:59:bf:07:b1:e0:ee:9d:6d:f8:84:
                    07:59:29:f0:80:b3:e2:6f:ff:a2:d4:5f:3a:d7:7b:
                    0e:8d:a4:ec:a2:b2:68:4f:c0:0e:e6:07:25:2b:63:
                    7a:c2:4b:71:b1:32:72:3e:e6:23:54:3e:d8:9f:58:
                    83:8e:f1:c2:fb:fc:78:ea:a9:f5:a6:38:0f:bc:40:
                    db:2c:d1:c5:46:bd:42:7d:d7:88:47:79:59:cd:4a:
                    42:78:a0:9f:93:44:b5:8f:77:32:dc:42:2a:ed:ad:
                    e7:9a:cc:76:9f:53:f6:5d:5b:b8:4d:1c:d7:05:a1:
                    34:1a:fb:35:7a:08:81:22:8c:12:4f:d6:da:32:4e:
                    f1:91:45:10:62:46:85:db:ea:01:16:ed:64:05:0f:
                    ff:f5:e8:91:a4:cd:46:b2:85:6a:d4:e8:d1:b6:16:
                    2f:9c:9e:7c:bd:25:e1:f3:28:ef:20:88:02:8c:63:
                    d7:c7:ce:10:d4:e2:6c:ed:e7:fb:3e:d9:22:5e:9a:
                    e6:33:91:10:c3:af:65:45:4d:fe:95:00:9a:fd:32:
                    d5:9f:f9:7a:87:6a:7f:60:90:10:0a:59:d0:91:dc:
                    f8:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:A0:4C:D7:4F:B3:7C:6F:D5:45:10:8A:D0:EF:84:16:90:E3:7A:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4a998448-b330-381e-8e27-3dde0f292982.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:b6:25:e3:2e:05:17:7c:34:8a:a0:90:e2:eb:47:20:22:8a:
         f3:63:ef:63:32:7a:34:22:95:f1:a6:f0:8d:49:36:76:ce:33:
         3c:cc:f6:31:50:25:67:0f:da:a4:5f:49:bd:55:6e:10:6f:15:
         96:0a:7f:b8:46:8f:3d:c6:13:b9:f5:4c:bd:06:95:58:64:b0:
         0b:83:5c:04:af:75:d0:da:02:5c:42:8f:3c:e7:bb:fa:a1:1c:
         66:a0:35:25:7f:0c:22:cb:00:cb:ef:95:e2:49:55:6a:0a:1f:
         ad:7e:69:cf:82:fe:6b:ad:13:3b:57:29:c8:cf:fa:08:90:d0:
         ce:3a:f8:66:5d:df:3b:41:a9:ad:72:4b:44:ff:87:88:c6:02:
         68:37:5f:0f:9d:f1:27:1c:77:02:11:51:be:01:2f:c1:a4:1e:
         db:64:84:e6:fb:77:ff:6b:a3:14:8b:51:0e:19:07:64:4d:c5:
         0c:32:d2:25:09:a4:64:02:06:d1:37:c7:70:de:56:62:10:2d:
         e7:42:63:ec:d3:a9:0b:81:b4:1b:c3:53:31:f2:02:4e:89:6d:
         f1:d9:ec:c6:ba:bd:f0:1f:bd:ff:96:a4:b6:89:43:7c:c7:92:
         01:98:c9:4c:98:ab:81:01:21:dc:29:7c:1d:bf:a0:df:b6:0e:
         40:97:67:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:06:39 2024 by rpki-client on console-ams.rpki-client.org