Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/681b6956-d5e7-3a0a-9ccf-b5d1c53e6f64.roa
File:                     681b6956-d5e7-3a0a-9ccf-b5d1c53e6f64.roa (raw, json)
Hash identifier:          wACw7wkCbM7chzpqmnyUOQCebqWokhg+8UxYlemweZI=
Subject key identifier:   04:7E:F5:BB:5F:8F:13:A0:D1:C9:F6:81:6C:E3:E9:BE:6F:A5:11:8C
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858457A4880CBDB3501167C7269C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/681b6956-d5e7-3a0a-9ccf-b5d1c53e6f64.roa
Signing time:             Mon 08 Apr 2024 13:00:34 +0000
ROA not before:           Mon 08 Apr 2024 13:00:34 +0000
ROA not after:            Sun 07 Jul 2024 13:00:34 +0000
asID:                     397236
IP address blocks:        156.154.58.0/24 maxlen: 24
                          156.154.191.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7a:48:80:cb:db:35:01:16:7c:72:69:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr  8 13:00:34 2024 GMT
            Not After : Jul  7 13:00:34 2024 GMT
        Subject: CN=ff41f634-3ab0-477e-bc86-61ca31f7c21b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ca:fc:51:ba:d4:a2:9b:97:7f:ff:0d:c6:45:
                    fc:ee:d8:dc:f5:b8:ca:a0:24:c0:08:7a:a4:db:57:
                    38:58:74:6e:fc:93:b5:ca:1f:38:05:6a:af:00:ad:
                    a8:45:c3:da:71:45:59:80:d2:40:37:48:33:7d:0a:
                    96:b7:99:09:16:b6:2a:f4:41:1b:37:08:a9:1e:21:
                    61:24:8f:22:29:a7:8d:f1:d9:2c:46:13:3f:ea:35:
                    6b:8d:78:89:7c:32:af:6c:21:db:f0:74:79:70:e7:
                    bd:f8:8c:ea:10:2b:9f:22:5e:60:7b:f1:1a:45:38:
                    41:2a:e4:bf:b0:7a:ff:9a:a0:da:b1:32:99:1c:91:
                    a3:d2:c9:8a:71:1e:b9:96:60:cf:02:42:f4:03:fc:
                    e9:ca:90:67:0d:0d:87:37:80:d5:18:64:f3:4c:77:
                    f4:56:11:3e:23:35:d2:b1:9e:aa:9b:82:a7:62:0c:
                    5d:45:8f:3f:ee:14:2f:0c:e3:08:0e:1d:31:fc:14:
                    75:a0:23:a2:97:e6:9e:f5:f9:50:88:88:89:3a:d9:
                    7e:13:66:8d:fa:7d:52:d4:13:59:a9:7a:0b:ee:68:
                    85:b7:29:47:11:b9:ba:13:fe:75:3f:54:10:0d:ac:
                    ed:ca:28:99:07:b7:10:14:32:e9:01:0f:ce:5f:ae:
                    45:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:7E:F5:BB:5F:8F:13:A0:D1:C9:F6:81:6C:E3:E9:BE:6F:A5:11:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/681b6956-d5e7-3a0a-9ccf-b5d1c53e6f64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.58.0/24
                  156.154.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:61:10:d6:47:de:e1:d6:fa:d4:b9:ff:59:56:38:a9:1d:09:
         0f:24:3d:1c:34:6c:11:7d:b1:1e:fa:97:6a:7b:3d:75:6d:d6:
         81:58:e7:d2:7a:f1:9e:70:f9:a1:36:10:28:58:2a:af:bf:3c:
         5c:6e:6e:ab:13:04:76:6e:36:8a:67:bb:8f:d7:6b:de:54:d4:
         4f:33:94:f6:2a:40:4a:51:29:59:d0:21:c4:c4:17:8a:98:af:
         75:c9:95:5b:9c:99:0a:e9:54:1d:4f:a9:5d:62:4a:5e:6b:ea:
         51:da:49:ee:5c:b1:e1:cb:2b:b0:23:52:fe:e4:7f:9f:ac:c3:
         50:17:69:48:59:bc:a1:f8:77:1b:6a:b6:42:fc:03:bf:6b:6a:
         28:06:10:8d:22:bc:1e:0d:fa:c1:66:25:9f:1d:94:76:f6:b7:
         24:c7:28:6e:7a:9f:6f:7e:9d:f5:2c:b6:c3:ea:5d:1a:ed:3c:
         fb:cf:e7:39:59:b0:cc:35:80:02:87:83:cf:7a:87:32:f0:0c:
         cc:c2:01:a7:9b:4e:99:64:f1:33:36:74:ca:e8:9e:fc:4a:58:
         59:0d:11:12:6f:b9:d6:17:d3:47:ef:06:17:cd:4a:a9:6a:80:
         c2:68:71:c7:3a:a4:7d:d4:fc:e8:42:19:23:63:c2:d9:37:5d:
         44:4b:68:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:54:05 2024 by rpki-client on console-fra.rpki-client.org