Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5f2b1a0a-1036-3cd0-aeee-6ec9e241d915.roa
File:                     5f2b1a0a-1036-3cd0-aeee-6ec9e241d915.roa (raw, json)
Hash identifier:          c9UawRSCFWRjhKz+pb2NIwZyvWeNqZ/rbqcMzd1PRLA=
Subject key identifier:   75:C0:68:88:2B:79:73:7B:3E:B5:E2:20:3D:47:03:6C:B3:89:A5:E8
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847527CA3725FAEE9BF2672E300
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5f2b1a0a-1036-3cd0-aeee-6ec9e241d915.roa
Signing time:             Tue 24 Sep 2024 16:27:22 +0000
ROA not before:           Tue 24 Sep 2024 16:27:22 +0000
ROA not after:            Mon 23 Dec 2024 17:27:22 +0000
asID:                     12008
IP address blocks:        156.154.109.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:52:7c:a3:72:5f:ae:e9:bf:26:72:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 24 16:27:22 2024 GMT
            Not After : Dec 23 17:27:22 2024 GMT
        Subject: CN=b22cc408-55ae-44ca-8c90-1a104e3d8286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ff:de:db:46:d3:b0:31:7e:0a:ef:82:1a:16:
                    48:05:32:37:73:67:11:4b:32:bc:30:14:3d:44:8a:
                    72:11:9e:eb:4d:c8:9b:d7:73:fd:7a:18:c2:b8:59:
                    a5:00:81:81:ff:a7:25:31:5b:c8:32:cf:bc:33:db:
                    89:5c:e9:7e:81:d5:6c:be:24:be:17:b3:9f:a1:a4:
                    94:c8:c5:d4:59:33:d3:9c:dd:f6:fd:ec:63:a6:a6:
                    83:ba:a8:22:d6:bc:8e:62:6d:1c:70:d1:f6:25:60:
                    48:14:58:b1:b8:80:b7:48:79:13:8f:06:57:11:65:
                    23:79:bc:7d:19:37:99:a6:29:3a:8c:e9:a6:17:00:
                    a1:3e:50:bc:4e:f6:83:40:64:94:09:95:90:50:4d:
                    51:b3:95:12:5f:5e:e4:44:57:86:5f:9d:71:cc:5f:
                    6d:22:5f:d5:f4:0e:1a:d9:40:92:e1:de:a8:a3:5f:
                    b8:fc:91:b6:46:31:48:f8:8c:86:97:49:26:2f:a1:
                    73:60:df:c8:52:ed:09:de:70:72:72:f8:ce:2f:13:
                    82:2c:7f:24:56:37:c8:2b:af:85:40:8c:08:15:fd:
                    c8:68:02:93:5b:10:b4:d7:a8:0e:62:96:9a:c7:54:
                    57:a2:b5:9d:00:2f:6e:14:a0:de:c6:04:20:e2:27:
                    fb:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:C0:68:88:2B:79:73:7B:3E:B5:E2:20:3D:47:03:6C:B3:89:A5:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5f2b1a0a-1036-3cd0-aeee-6ec9e241d915.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:9a:fe:5e:b0:5c:57:d6:5d:1e:a6:68:b0:17:03:78:05:72:
         6d:8d:c6:b8:6d:d2:d3:38:77:0a:da:27:55:3b:82:02:ae:b4:
         5e:f7:e9:89:44:10:1c:2b:d3:be:bc:ef:09:bd:fc:79:c0:0d:
         8f:2a:dc:21:f6:47:18:a9:5a:eb:30:02:e0:2e:b2:35:77:7c:
         ba:d2:15:35:4c:5c:86:12:d9:22:bd:ec:4a:6a:42:a3:6f:54:
         ba:cf:7b:06:00:c9:24:63:85:2e:b6:c6:da:cd:ee:4e:eb:42:
         95:b9:65:eb:e5:47:a2:6a:cb:d8:d7:9f:11:68:48:52:86:d5:
         8f:e8:f9:36:bd:0c:87:ce:61:aa:fa:ad:d7:eb:56:85:33:25:
         90:87:9b:d0:e7:96:af:87:e4:4f:95:b3:2c:b3:64:2d:27:14:
         86:61:23:a9:dc:3f:ce:d7:f8:8f:ed:5d:1f:05:4e:b5:42:b3:
         28:11:f0:e4:5f:4a:35:66:4a:6c:d9:6d:62:76:cb:bf:e4:cb:
         c7:c4:57:b9:25:17:ed:89:60:a3:18:cf:34:8a:84:74:ed:e6:
         6c:24:c5:67:a3:04:ea:ea:fc:f6:1d:af:68:48:1f:5e:03:bb:
         4a:35:f7:2e:3d:ca:18:06:f9:b2:48:c2:57:68:a1:69:e9:de:
         db:27:e1:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:06:44 2024 by rpki-client on console-ams.rpki-client.org