Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/65e3708b-08d6-3df7-981a-463925ade097.roa
File:                     65e3708b-08d6-3df7-981a-463925ade097.roa (raw, json)
Hash identifier:          lXk5Bz3p4bbgUgCTMgSOErYHJBO41AFoyNHTLdoPPFc=
Subject key identifier:   DB:30:EC:B2:51:A8:90:7B:71:6E:31:97:AC:C6:E0:87:A7:13:B3:36
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285846E9656D7DEA3B593899DC5780
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/65e3708b-08d6-3df7-981a-463925ade097.roa
Signing time:             Sun 18 Aug 2024 01:00:29 +0000
ROA not before:           Sun 18 Aug 2024 01:00:29 +0000
ROA not after:            Sat 16 Nov 2024 02:00:29 +0000
asID:                     397218
IP address blocks:        156.154.65.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Oct 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:e9:65:6d:7d:ea:3b:59:38:99:dc:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 18 01:00:29 2024 GMT
            Not After : Nov 16 02:00:29 2024 GMT
        Subject: CN=531c8b20-05a4-430b-bada-48c1eaca2377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:d1:a1:5a:94:d2:d3:3d:d7:10:5d:0e:34:9d:
                    68:aa:93:f5:85:7a:85:10:a8:0f:26:ee:02:0a:e3:
                    36:dc:fe:e5:ec:51:1e:d2:4f:ee:a5:3f:de:b1:21:
                    98:3f:79:22:e9:ed:56:c3:f7:b9:2b:85:c2:1d:c3:
                    a4:79:36:2b:4d:60:54:48:5c:d7:b0:80:04:63:90:
                    5d:60:fd:d2:15:6e:47:5d:48:2f:27:ec:f4:0e:64:
                    ae:fb:f8:f6:7e:bd:cf:ba:94:0b:be:4d:3e:3b:28:
                    8a:13:bd:db:75:54:94:f8:8c:1c:65:e1:8c:32:f2:
                    10:f0:9a:80:77:46:61:8e:c4:d9:73:61:26:c7:47:
                    cc:7a:e2:9f:5e:0d:ce:e9:16:45:1f:76:e0:89:c0:
                    b6:b2:22:2e:b7:7e:eb:a3:dc:4f:ef:64:87:c5:a6:
                    f9:bd:07:9f:48:cc:e7:23:55:46:e4:82:4c:9a:2f:
                    a5:cf:79:01:39:e8:df:8d:b7:10:e9:bd:bf:bb:ad:
                    91:61:d7:ef:70:ca:21:44:48:a7:38:60:49:d0:61:
                    1b:d1:6a:df:2f:bd:3f:b5:57:0f:0e:28:c0:13:c1:
                    53:46:fd:a4:cb:d8:37:fc:5c:fe:87:6a:39:de:13:
                    d9:f3:17:d6:f7:fc:d8:3a:aa:f6:7a:5f:23:79:62:
                    f5:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:30:EC:B2:51:A8:90:7B:71:6E:31:97:AC:C6:E0:87:A7:13:B3:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/65e3708b-08d6-3df7-981a-463925ade097.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:b2:1c:e0:2e:27:36:93:0b:72:51:60:46:6d:44:a5:e1:d4:
         a8:8b:3e:92:75:20:52:ae:ed:c5:02:5c:e5:7a:36:dc:bf:0e:
         0e:c8:2b:bd:37:ad:2f:8c:c9:b7:ff:70:ba:ff:c7:25:b5:be:
         38:89:ff:97:b2:4b:09:1e:56:19:29:39:54:c4:a4:31:6f:b0:
         e0:85:b8:67:ef:89:52:96:90:83:38:0e:2b:e7:69:b5:9d:fc:
         f7:32:97:57:11:70:8b:fd:98:d0:9e:f8:dd:ed:1e:5d:bc:eb:
         38:94:c9:10:72:3a:4f:3a:60:a4:6b:ce:fc:9a:7b:e0:75:cc:
         14:6b:40:e4:da:24:0e:11:28:fa:c7:db:fb:bc:d0:cb:51:00:
         f0:b2:ee:b3:2c:86:69:e1:94:b3:c5:93:28:ac:8e:80:36:a8:
         75:a7:07:3f:80:13:45:91:a7:96:81:1f:bd:55:b9:cc:12:cb:
         42:bc:df:62:0f:9a:49:26:39:17:bb:98:e3:fd:76:84:d9:07:
         05:86:40:8e:01:ae:a4:8d:8f:60:99:0b:1c:7d:b1:e2:c1:7b:
         90:ea:d4:44:c6:99:eb:bc:65:d2:35:ea:fb:8b:c4:a4:04:9f:
         d6:09:33:10:ba:b5:1b:3b:0d:09:85:70:ca:7d:23:a4:42:b8:
         c3:15:28:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 18:47:30 2024 by rpki-client on console-fra.rpki-client.org