Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/560e9ff9-75aa-3f13-bd66-f7c7faf4ecdf.roa
File:                     560e9ff9-75aa-3f13-bd66-f7c7faf4ecdf.roa (raw, json)
Hash identifier:          tEBQI3XbhXv4BbgrQrseicoqSNPFM0YsMfiCLZT8QCM=
Subject key identifier:   6E:A4:A2:25:25:E1:6A:5A:C9:F9:17:FB:40:D5:8E:1D:33:65:31:57
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847CA3F6FC17FB8C83B6EFBF300
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/560e9ff9-75aa-3f13-bd66-f7c7faf4ecdf.roa
Signing time:             Wed 06 Nov 2024 14:00:41 +0000
ROA not before:           Wed 06 Nov 2024 14:00:41 +0000
ROA not after:            Tue 04 Feb 2025 14:00:41 +0000
asID:                     397243
IP address blocks:        156.154.169.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:3f:6f:c1:7f:b8:c8:3b:6e:fb:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Nov  6 14:00:41 2024 GMT
            Not After : Feb  4 14:00:41 2025 GMT
        Subject: CN=df6f5d97-2bda-461a-8a06-322c7b771f95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c6:ed:01:b6:cd:76:7a:05:06:0b:d9:98:3b:
                    af:e8:3f:94:22:88:09:e3:16:c6:ce:40:77:04:90:
                    d5:1b:1a:2b:e7:9c:82:cd:c9:2b:e4:86:9a:60:1e:
                    7f:6f:7f:ba:bf:43:0c:e3:8a:ef:fe:d8:ed:b3:d9:
                    b9:9e:c4:9e:4c:b7:e3:78:28:a0:6f:22:3d:84:2d:
                    b4:51:6f:46:a5:f7:92:21:db:3e:10:9c:f7:c1:3e:
                    15:c5:56:b3:81:e0:e2:a2:37:65:9b:6a:46:15:13:
                    1a:63:77:54:7e:6e:0e:44:7c:b7:2d:39:ec:cc:68:
                    9d:07:bd:fc:f8:1d:00:ec:fe:2b:e0:3e:b4:37:fd:
                    07:e6:ef:64:f8:c5:29:b0:13:7a:77:fb:c4:19:99:
                    c4:b9:41:72:c6:61:3b:4d:67:94:0b:c4:7f:b3:03:
                    00:3c:a3:66:5a:f8:dd:76:f4:ef:23:85:41:2e:2e:
                    2f:af:ba:97:d7:8e:cc:8b:b1:5a:78:82:ba:26:d4:
                    8b:06:23:80:0a:5b:76:10:f7:96:86:f6:01:d8:1d:
                    e5:16:00:eb:c0:6a:43:8a:d2:90:db:8d:b0:e8:af:
                    a1:e9:07:bc:55:da:ed:bd:ed:20:b8:1c:0f:e8:30:
                    b2:8b:0b:53:fe:e9:cc:3b:16:f4:e5:da:ff:92:30:
                    86:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:A4:A2:25:25:E1:6A:5A:C9:F9:17:FB:40:D5:8E:1D:33:65:31:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/560e9ff9-75aa-3f13-bd66-f7c7faf4ecdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:ad:d8:cc:8c:71:e8:b1:58:fd:df:b3:01:72:46:64:2b:21:
         d8:5e:36:4e:d6:c4:16:40:0b:c3:83:6d:c2:9c:61:02:f1:fa:
         26:4c:cc:33:b6:42:a8:4e:c0:17:2d:e8:09:2b:47:d7:3f:11:
         96:48:d6:d2:6d:bb:00:42:d2:92:28:e1:b7:d0:9f:28:4c:d0:
         03:f3:21:15:4b:de:ff:e9:af:b1:18:b1:18:3d:6f:2d:a9:7c:
         89:5d:a8:61:06:51:79:e8:81:b6:bc:30:3d:b7:9b:68:61:8c:
         f2:c1:59:6a:64:59:27:55:64:4c:1c:c8:a1:b4:53:af:f5:32:
         eb:3a:21:1d:40:a5:be:2d:58:5d:52:16:7c:27:29:30:39:9a:
         ce:b0:77:df:9f:5e:55:b1:a3:44:93:a4:ca:02:1e:5d:53:cd:
         e5:a8:18:2f:04:57:71:6f:0a:23:ef:af:d8:17:0c:d6:2d:d9:
         f1:09:bb:d3:40:fd:78:eb:b9:dc:d0:b8:97:04:ca:1f:60:27:
         9d:bd:c5:9d:cc:b9:ac:ae:00:70:a1:0c:ae:19:b9:6e:67:30:
         2b:ba:25:ed:7e:1e:4a:66:91:4d:a8:13:c3:f6:3c:1a:07:3b:
         0a:24:19:99:1a:bd:2f:01:09:98:b3:74:5f:6b:40:41:32:e4:
         31:cb:ca:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:06:43 2024 by rpki-client on console-ams.rpki-client.org