Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6c1fabf4-1869-34e9-aa1c-3df083e8991c.roa
File:                     6c1fabf4-1869-34e9-aa1c-3df083e8991c.roa (raw, json)
Hash identifier:          o4fPslBL57D5P+fyUOQDWPadrfav74+D5kRlg3dHddw=
Subject key identifier:   38:0B:E5:C4:DF:24:04:00:B1:6F:7B:82:67:3C:77:D0:72:BA:C9:C5
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847527C990F5838D97B5391DCC0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6c1fabf4-1869-34e9-aa1c-3df083e8991c.roa
Signing time:             Tue 24 Sep 2024 16:27:17 +0000
ROA not before:           Tue 24 Sep 2024 16:27:17 +0000
ROA not after:            Mon 23 Dec 2024 17:27:17 +0000
asID:                     397237
IP address blocks:        156.154.128.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:52:7c:99:0f:58:38:d9:7b:53:91:dc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 24 16:27:17 2024 GMT
            Not After : Dec 23 17:27:17 2024 GMT
        Subject: CN=be945e81-f6a5-4499-89a8-2e19d9c64b7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ba:91:c8:40:1c:cf:d6:0c:52:ca:a0:7b:67:
                    66:c6:62:ce:f9:54:37:c7:2e:a2:7c:cc:1a:24:3d:
                    2c:59:08:7a:d9:9c:8f:a2:78:40:41:ef:f6:92:1d:
                    e7:95:c3:f9:d0:c9:8a:2f:e5:b7:56:00:f6:d0:af:
                    c9:40:2c:9a:50:3d:76:b8:e1:d9:44:6d:71:bc:be:
                    89:e8:b1:d7:bd:1f:f2:c3:73:5f:2a:87:0b:cf:85:
                    8c:81:42:48:72:e4:fe:06:62:f0:97:8c:37:ff:9f:
                    ad:ac:4a:39:59:98:8c:c5:ba:12:1b:2d:8a:19:40:
                    16:77:fe:24:cb:2c:88:eb:e5:fc:9d:47:d9:eb:35:
                    92:17:02:f9:ca:98:bd:37:b5:e7:62:da:9c:bf:04:
                    3f:bc:93:75:55:48:9e:42:c3:ec:b9:10:24:5b:31:
                    b3:b5:93:d8:77:9a:81:94:29:d0:40:67:49:a0:b3:
                    6b:46:77:c5:dc:17:0e:72:a5:2b:0b:d0:a6:de:9d:
                    0c:de:81:f4:1b:ae:69:1b:5a:34:13:d7:86:69:39:
                    9c:5e:3e:5c:bd:01:3a:62:cd:bd:85:8c:7c:8a:b4:
                    9f:55:76:16:43:37:d8:a6:1d:a8:ec:1b:f4:74:4e:
                    b9:f1:3e:b7:2a:f3:a4:50:fc:fb:b9:fb:c1:a9:f3:
                    33:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:0B:E5:C4:DF:24:04:00:B1:6F:7B:82:67:3C:77:D0:72:BA:C9:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6c1fabf4-1869-34e9-aa1c-3df083e8991c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:15:b5:f5:5a:8c:25:d9:8c:73:2d:32:3f:9a:30:87:11:cc:
         1c:5c:ba:84:15:de:56:8d:14:c8:51:6e:59:bd:c0:fa:f6:a8:
         24:fa:71:b4:54:d8:d2:63:08:d0:ed:ee:a8:74:2f:2e:b6:b3:
         83:65:1c:c2:85:18:2f:11:5f:10:11:f3:cc:84:30:97:e9:24:
         ac:74:4e:d1:82:0a:ba:7e:af:83:94:2a:ef:ee:8a:27:42:c9:
         ce:e3:04:6f:d2:2f:4f:90:7b:dc:57:34:67:4a:e4:cf:6c:2b:
         f4:78:71:40:54:2f:dc:bd:fd:c8:8d:1e:85:5e:db:8c:68:6e:
         ae:05:29:01:4e:75:d5:90:3d:c7:ca:db:8d:5e:f6:7a:bf:be:
         dd:1d:6d:7f:ef:e8:ca:0b:70:c8:0d:81:d4:b4:18:ac:bb:ee:
         dd:f4:88:97:ca:75:ec:51:a6:82:cc:0d:42:4a:d0:4d:24:60:
         d1:36:76:47:d8:3e:4a:84:fc:68:9c:be:9d:6b:9e:82:9c:65:
         86:90:94:04:01:8f:6c:ca:3d:d2:e6:3d:2a:14:c1:bf:41:ba:
         ea:f6:23:f6:b2:40:24:21:93:46:d2:19:e4:02:33:0a:25:7d:
         62:75:95:15:c7:b6:cc:1d:f6:a8:e2:89:a7:cf:06:32:51:59:
         be:de:ce:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:30:57 2024 by rpki-client on console-ams.rpki-client.org