Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5595ca66-5b7c-3719-a752-4c954402c8df.roa
File:                     5595ca66-5b7c-3719-a752-4c954402c8df.roa (raw, json)
Hash identifier:          hWEUPGx3yK9opIt3CkSSiLhFyn+xd3n+fIFU+klXnME=
Subject key identifier:   9D:B4:05:CE:51:8D:78:F6:8C:B3:AD:99:05:D0:6A:64:CB:0C:02:EC
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858479D76D4AE18B5B27B3653CC48
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5595ca66-5b7c-3719-a752-4c954402c8df.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     397236
IP address blocks:        156.154.71.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:d4:ae:18:b5:b2:7b:36:53:cc:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=e46cf363-2d19-4a67-ae69-2d34eafa22f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:35:fe:fb:90:36:e6:35:ba:11:05:2e:40:5f:
                    bb:a0:dd:94:98:bc:32:b1:a7:83:fe:57:cf:c2:84:
                    4e:23:30:c5:6d:90:73:3d:ec:74:62:05:32:19:ac:
                    9d:fb:a6:4a:0c:8b:1d:aa:d0:ac:ba:aa:6b:4c:0d:
                    a3:d3:cc:9a:52:fb:96:67:e2:3d:9c:07:69:f5:1a:
                    d1:12:54:97:5a:9d:2a:91:41:bf:1e:ac:34:be:cf:
                    45:6d:9b:19:44:27:98:af:03:9b:73:20:e0:87:b3:
                    53:43:a5:aa:b5:83:3b:7f:03:ec:72:8d:b4:07:cd:
                    5a:81:0b:38:be:83:12:d3:00:a3:8f:4b:56:0b:90:
                    a6:42:b0:10:24:13:de:1c:35:a5:29:9e:73:f2:05:
                    4c:55:ce:02:e6:3e:93:4b:c3:36:4f:be:13:cd:f1:
                    2e:c1:fa:cb:2b:5d:cb:a2:db:f1:7d:c0:c0:56:58:
                    69:fa:b7:0a:59:a7:7f:b5:12:34:66:40:e4:cf:be:
                    de:3e:db:7d:60:15:f9:6c:be:e9:ca:3c:ae:4e:7e:
                    01:8a:8d:d5:4a:74:42:a3:cf:62:20:85:1c:e9:05:
                    a4:a0:ec:6d:e5:10:20:98:bf:5b:db:15:ed:ae:bd:
                    59:7b:08:6d:af:47:8c:61:2d:79:a8:29:f0:7a:a7:
                    dd:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:B4:05:CE:51:8D:78:F6:8C:B3:AD:99:05:D0:6A:64:CB:0C:02:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5595ca66-5b7c-3719-a752-4c954402c8df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:33:75:30:cf:9e:83:19:bb:04:90:c9:fe:aa:2a:99:03:f9:
         54:ea:ca:0d:31:2a:49:e4:a2:3f:5c:82:7b:f1:8f:7b:85:95:
         61:2d:09:8e:3a:ae:7d:c0:bc:30:c5:d7:ae:0a:52:68:5e:fd:
         d8:80:35:e9:8a:74:f8:83:a0:cf:e5:c3:52:87:b3:5a:fb:a2:
         3b:13:83:b5:a1:2e:b4:29:ad:a6:f3:62:aa:25:3e:8e:e2:e3:
         da:ea:2a:f7:51:18:fa:7a:c4:27:d8:26:d6:7a:f3:16:28:9b:
         7d:3c:b2:1b:35:e5:1f:30:99:c2:8b:78:90:3e:63:cf:ac:ca:
         f4:06:95:08:e4:47:da:b7:26:09:b0:29:b3:3e:ca:e3:0f:c7:
         be:b0:9d:21:f8:b1:0b:d2:a1:a0:c9:7b:a2:29:bb:74:4b:8e:
         9c:b3:99:26:d2:1c:15:d9:49:4d:02:13:65:9a:0e:be:1b:b2:
         91:f1:1d:c5:63:e9:f2:b8:21:d8:ea:42:ad:6b:df:67:9e:a2:
         1a:1c:2d:a1:e0:70:e5:08:28:25:95:28:6f:17:d8:40:4f:03:
         17:26:5e:a5:35:89:56:5f:13:47:a9:88:fc:0d:ed:47:3e:66:
         24:85:48:d0:a5:b8:55:52:ab:c6:e2:10:e5:58:33:00:66:3b:
         1e:20:6b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:30:56 2024 by rpki-client on console-ams.rpki-client.org