Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5e91bdab-e6af-3edf-84ad-95ea1007e6a5.roa
File:                     5e91bdab-e6af-3edf-84ad-95ea1007e6a5.roa (raw, json)
Hash identifier:          MvLJdJDWQgIRpD2kPokO+a2jGY+C2DlQBPsZw80MWqw=
Subject key identifier:   2F:FE:2B:3C:CF:AB:F2:B1:77:67:A6:0E:A9:0B:F2:31:9E:89:0C:11
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285846E96581170F92918E0885E500
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5e91bdab-e6af-3edf-84ad-95ea1007e6a5.roa
Signing time:             Sun 18 Aug 2024 01:00:29 +0000
ROA not before:           Sun 18 Aug 2024 01:00:29 +0000
ROA not after:            Sat 16 Nov 2024 02:00:29 +0000
asID:                     397214
IP address blocks:        156.154.169.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Oct 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:e9:65:81:17:0f:92:91:8e:08:85:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 18 01:00:29 2024 GMT
            Not After : Nov 16 02:00:29 2024 GMT
        Subject: CN=ee3ab841-f0d7-4b76-9fb5-28a9b6b33089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:bb:cd:5c:27:22:a0:4e:69:69:52:ab:ce:9d:
                    8f:43:ed:20:a0:c9:dc:de:10:11:12:ce:d0:42:fc:
                    ee:2a:f6:58:5d:1a:12:31:2d:82:a5:7a:5b:45:4b:
                    1a:63:0a:c6:76:e0:fb:e3:69:c5:26:4b:fa:31:1c:
                    0c:6e:3d:24:ac:1f:ef:53:2c:54:fd:64:97:e5:63:
                    70:3e:76:a8:da:29:fa:73:81:9b:9e:3c:7c:ee:29:
                    bd:cc:89:f8:ec:fb:77:21:48:7e:fd:1e:67:ef:76:
                    cc:d3:ad:fa:c0:05:1b:d5:62:6b:72:96:9e:a4:65:
                    1e:35:54:68:9c:aa:d4:c7:17:e8:0b:92:2c:54:6f:
                    c9:d1:e4:f7:a2:fe:b6:f9:db:3d:db:6a:00:55:0d:
                    fa:e5:97:b9:c5:36:cb:a3:28:a4:13:58:82:41:7a:
                    c4:ab:2e:49:09:b5:e4:e0:34:09:64:e0:63:85:02:
                    7e:ce:1b:07:07:bb:d8:32:79:45:03:24:fc:0b:f3:
                    61:60:98:ba:f1:c2:02:ed:4a:d6:dc:44:03:f4:a4:
                    81:3e:24:06:1f:c6:95:ea:b3:84:9e:2a:76:3a:d3:
                    0d:ac:9a:ca:7c:83:e8:b6:b8:8d:38:4e:b6:51:e1:
                    7d:2b:55:8f:cc:7a:2c:42:b7:99:f6:26:09:55:9e:
                    94:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:FE:2B:3C:CF:AB:F2:B1:77:67:A6:0E:A9:0B:F2:31:9E:89:0C:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5e91bdab-e6af-3edf-84ad-95ea1007e6a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:ad:25:18:ab:00:d3:1e:4e:6a:39:7e:85:dd:3c:22:c1:f8:
         2a:3e:5e:13:d4:56:6f:1c:56:5d:fb:84:6d:e0:c8:ac:7b:e5:
         17:13:59:db:7b:41:e5:5b:c2:31:ac:76:4a:d7:47:ce:07:d3:
         e5:a3:df:2b:7b:35:aa:74:0f:1c:85:b8:ca:8f:c6:7d:1e:32:
         a1:b9:0b:a7:c3:40:f0:5b:92:c0:a1:cc:f9:a2:75:c0:aa:24:
         d6:ad:1b:d6:d6:01:59:6b:62:00:45:7d:63:64:80:4d:4a:f8:
         8d:9f:f2:88:4d:d7:1b:d3:e5:ef:49:e8:2a:72:c3:38:cc:09:
         2d:b6:ba:b2:19:79:ed:aa:f2:e3:9e:9d:47:06:3d:53:b6:85:
         0b:49:b4:f4:4e:9a:3f:cd:2e:8e:1a:66:04:1c:24:ee:7a:f2:
         84:96:10:f2:db:e5:f7:97:33:0a:04:13:e8:b8:2e:49:f5:4e:
         fb:f4:60:84:55:44:3d:7f:97:88:24:d8:28:fb:b0:97:1c:29:
         d7:ac:1f:d1:6d:f0:12:31:ee:d8:59:65:d7:26:74:4d:65:57:
         cd:ca:c4:76:9c:f1:d0:a2:fb:41:dc:b6:fa:c1:3d:ce:6e:99:
         93:d2:c1:b1:b7:cf:12:7e:de:e4:56:e0:0d:de:22:18:96:fa:
         cd:70:dd:6a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEbpZYEXD5KRjgiF5QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI0MDgxODAxMDAyOVoXDTI0MTExNjAyMDAyOVowLzEtMCsGA1UEAxMk
ZWUzYWI4NDEtZjBkNy00Yjc2LTlmYjUtMjhhOWI2YjMzMDg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbvNXCcioE5paVKrzp2PQ+0goMnc3hAREs7Q
QvzuKvZYXRoSMS2CpXpbRUsaYwrGduD742nFJkv6MRwMbj0krB/vUyxU/WSX5WNw
Pnao2in6c4Gbnjx87im9zIn47Pt3IUh+/R5n73bM0636wAUb1WJrcpaepGUeNVRo
nKrUxxfoC5IsVG/J0eT3ov62+ds922oAVQ365Ze5xTbLoyikE1iCQXrEqy5JCbXk
4DQJZOBjhQJ+zhsHB7vYMnlFAyT8C/NhYJi68cIC7UrW3EQD9KSBPiQGH8aV6rOE
nip2OtMNrJrKfIPotriNOE62UeF9K1WPzHosQreZ9iYJVZ6UrQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC/+KzzPq/Kxd2emDqkL8jGeiQwRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNWU5MWJkYWItZTZhZi0z
ZWRmLTg0YWQtOTVlYTEwMDdlNmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAKtJRirANMeTmo5foXdPCLB+Co+XhPUVm8cVl37hG3gyKx75RcTWdt7
QeVbwjGsdkrXR84H0+Wj3yt7Nap0DxyFuMqPxn0eMqG5C6fDQPBbksChzPmidcCq
JNatG9bWAVlrYgBFfWNkgE1K+I2f8ohN1xvT5e9J6CpywzjMCS22urIZee2q8uOe
nUcGPVO2hQtJtPROmj/NLo4aZgQcJO568oSWEPLb5feXMwoEE+i4Lkn1Tvv0YIRV
RD1/l4gk2Cj7sJccKdesH9Ft8BIx7thZZdcmdE1lV83KxHac8dCi+0HctvrBPc5u
mZPSwbG3zxJ+3uRW4A3eIhiW+s1w3Wo=
-----END CERTIFICATE-----
Generated at Fri Oct 25 20:01:10 2024 by rpki-client on console-ams.rpki-client.org