Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/549084ab-81eb-3f9c-a956-ae07d5781133.roa
File:                     549084ab-81eb-3f9c-a956-ae07d5781133.roa (raw, json)
Hash identifier:          O2tVfHTzrEpu5tO9JBD6OpGA2ewayQgglrk74y4ROPo=
Subject key identifier:   C6:F9:01:93:9A:D1:81:FF:C4:1C:BA:9E:98:A1:FB:2D:EB:A8:03:0C
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285846E9655C54325386A593967E00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/549084ab-81eb-3f9c-a956-ae07d5781133.roa
Signing time:             Sun 18 Aug 2024 01:00:29 +0000
ROA not before:           Sun 18 Aug 2024 01:00:29 +0000
ROA not after:            Sat 16 Nov 2024 02:00:29 +0000
asID:                     19905
IP address blocks:        156.154.153.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Sep 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:e9:65:5c:54:32:53:86:a5:93:96:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 18 01:00:29 2024 GMT
            Not After : Nov 16 02:00:29 2024 GMT
        Subject: CN=da6f9dbc-ca8e-4574-9bf5-12f69d53a680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c5:0a:e1:fc:ef:bf:e6:4d:81:cb:bc:c3:c9:
                    bb:ed:d1:5d:e3:ae:ba:a1:d9:d9:ec:12:93:61:56:
                    b3:85:89:0d:48:0d:4a:d4:e7:70:08:fa:60:87:b0:
                    6f:6e:04:d8:c8:b8:14:e4:27:de:cb:56:f4:f1:6b:
                    68:8f:10:db:f2:74:eb:55:ef:6a:10:28:4f:9f:76:
                    90:66:89:fc:b6:f6:14:21:33:1b:26:4c:98:9b:4c:
                    e5:a8:db:40:3d:68:92:ec:96:eb:8c:ec:54:f5:cb:
                    51:cc:1c:41:b5:25:02:af:b8:38:c2:e9:fa:d8:0d:
                    32:be:38:b0:33:6a:eb:ca:5e:af:22:3c:ad:16:6f:
                    dc:95:1f:bc:40:6d:a5:32:4e:9d:c5:19:22:30:a1:
                    85:d1:7e:37:75:4c:bc:ad:e5:46:7e:51:ae:e5:1b:
                    67:fe:17:f0:84:7d:b0:70:49:e7:93:dc:de:5b:4c:
                    57:52:b9:c0:05:3f:f9:8a:b7:ba:32:0b:f9:e0:b4:
                    ff:94:39:c6:8d:b7:c6:c8:5e:5a:7f:1b:c3:c0:d4:
                    c1:09:e4:42:e1:b8:d3:81:23:b3:7e:db:58:46:ff:
                    e8:c6:0c:6b:b7:e3:56:1b:44:ff:0a:37:f7:91:81:
                    ad:b7:39:77:1a:1c:2c:9e:b9:8f:58:dd:3a:d9:e9:
                    7f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:F9:01:93:9A:D1:81:FF:C4:1C:BA:9E:98:A1:FB:2D:EB:A8:03:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/549084ab-81eb-3f9c-a956-ae07d5781133.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:54:0c:6e:58:0b:97:f1:3d:c6:07:ca:99:c7:a7:63:3d:7e:
         41:f3:11:e3:17:bd:94:50:d8:b7:c7:d1:5b:27:fc:d9:2b:e9:
         2c:f8:cc:83:4a:02:0e:72:d1:50:a6:d0:04:4e:88:c6:89:b9:
         7b:6f:23:6f:99:3a:27:0f:63:7a:6f:e5:0f:77:ec:9f:81:c7:
         37:6b:67:f7:a8:5f:d2:c4:11:53:2c:30:fb:bf:ca:10:a1:68:
         bd:51:c7:58:7a:53:ed:93:95:dc:8c:d8:ab:7a:b2:d8:c5:df:
         93:19:5b:a3:02:a9:21:fa:7d:a7:00:d1:b3:30:03:cc:19:56:
         eb:5d:17:68:3b:35:58:1d:43:72:c7:f1:b0:fd:d6:4c:c7:28:
         95:dc:d2:ee:ec:d7:4b:42:30:3f:3a:90:19:6e:97:41:fa:61:
         87:a2:05:e3:56:58:a7:e4:eb:92:97:05:5c:15:6c:e2:6f:b2:
         75:fa:e0:09:6e:80:0c:3c:78:8b:19:ae:d3:58:4c:24:3a:3c:
         7c:7e:c1:be:72:dc:ab:74:75:2f:cd:8a:ef:9f:e1:c5:ea:fe:
         a9:ec:e1:06:31:3a:b5:da:90:14:5a:7e:68:57:bc:a9:06:fc:
         47:9c:c4:d3:2d:4c:8c:b4:a9:b9:5d:6e:78:65:e6:cc:a9:d2:
         32:18:4a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 19:18:52 2024 by rpki-client on console-fra.rpki-client.org