Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6fc6052f-c2ba-3a19-83ad-ef95156b7403.roa
File:                     6fc6052f-c2ba-3a19-83ad-ef95156b7403.roa (raw, json)
Hash identifier:          Mfd9rhFkM98avzeGfbIWIMyCe34qlVdpTV/LCEGYirs=
Subject key identifier:   75:C0:B6:7F:27:33:3A:61:AA:22:BC:FB:F4:65:D3:D8:6F:7D:05:5D
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285846FCF02C04E5E5ACE106A14FE0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6fc6052f-c2ba-3a19-83ad-ef95156b7403.roa
Signing time:             Sun 25 Aug 2024 01:00:32 +0000
ROA not before:           Sun 25 Aug 2024 01:00:32 +0000
ROA not after:            Sat 23 Nov 2024 02:00:32 +0000
asID:                     397229
IP address blocks:        156.154.154.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Oct 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:fc:f0:2c:04:e5:e5:ac:e1:06:a1:4f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 25 01:00:32 2024 GMT
            Not After : Nov 23 02:00:32 2024 GMT
        Subject: CN=a1c0c032-e873-460b-b740-d25660d64622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:cb:d9:5f:ac:0b:ff:e6:4b:32:5b:a3:56:dc:
                    11:20:5a:41:69:9c:38:c8:73:3a:33:ed:ad:86:25:
                    98:b5:55:a5:04:52:79:e8:9a:04:27:26:2c:f2:83:
                    c4:f7:a5:25:98:93:d2:04:e3:89:11:8c:0d:28:4e:
                    f5:af:5e:79:df:07:9c:f9:14:df:84:c5:13:88:45:
                    18:75:4d:47:61:45:0b:db:98:a5:89:90:05:df:d6:
                    56:14:eb:0c:86:ff:43:21:16:52:93:97:0a:33:b3:
                    e0:49:d9:7e:3d:25:04:ab:ff:ff:d2:ae:d2:9a:45:
                    1c:8b:b0:ad:85:ff:5c:62:4a:3f:10:1e:bd:58:d7:
                    e9:78:7a:1e:05:c2:d6:b6:fa:b0:cf:a0:85:09:d2:
                    85:ed:ca:0c:ae:1f:88:14:c3:a3:28:87:1f:7b:f8:
                    52:44:6a:e2:11:1c:1b:e4:c5:ea:f9:a3:aa:a2:64:
                    c4:e3:0e:57:d7:16:42:da:58:a6:3f:99:b5:30:e2:
                    6e:ab:68:eb:63:0c:8f:db:c2:ca:75:06:5c:17:e6:
                    5d:57:da:df:89:4b:3c:0c:78:65:bb:23:ab:2b:77:
                    dd:ad:83:86:ec:bc:ff:0c:7e:0d:d9:69:43:2d:9f:
                    30:de:9e:f9:b1:ba:26:0f:89:cf:f6:0e:60:36:a1:
                    35:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:C0:B6:7F:27:33:3A:61:AA:22:BC:FB:F4:65:D3:D8:6F:7D:05:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6fc6052f-c2ba-3a19-83ad-ef95156b7403.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:87:cc:fb:61:de:66:cc:74:d8:f7:78:e1:09:60:05:b2:4d:
         5e:64:60:0e:29:be:52:c4:2d:c6:a4:56:bd:91:8d:f4:fd:4d:
         15:2a:7e:40:aa:ce:a9:09:d9:5a:fe:50:e7:b7:b6:f2:ff:34:
         32:ae:4d:92:c2:bb:f8:50:f6:86:6c:1f:03:30:3f:2e:43:38:
         c1:ec:d7:0c:0c:4e:a5:30:c2:08:c7:c7:22:35:85:f8:c9:ef:
         ce:f4:2d:c9:dc:96:9a:ee:2b:22:2a:e9:fd:a6:56:96:4c:bc:
         b5:7a:c0:18:50:0c:4c:6f:55:db:51:0b:45:fc:65:7e:a9:bc:
         0a:f6:39:31:df:f1:ad:e7:e2:6b:46:45:f9:25:a1:fe:57:1a:
         99:8b:c0:54:fa:74:43:f5:26:02:fd:a8:74:bf:7f:a6:61:e5:
         a2:21:fc:d6:bb:2c:f1:13:0f:a1:d9:30:b5:b1:ae:c6:8a:7e:
         ae:4b:6b:78:c1:c7:1f:63:85:fb:5a:b2:ef:83:98:5d:5d:bc:
         64:ee:27:1e:f7:a2:04:45:ee:39:3e:09:72:be:0e:ca:88:a3:
         ce:18:f5:48:ac:06:ce:e7:36:32:fe:81:f6:f2:0c:67:14:78:
         f5:33:e8:4d:a5:0c:a0:60:a0:ab:38:ef:48:3a:61:c3:4f:be:
         e5:eb:80:f6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEb88CwE5eWs4QahT+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI0MDgyNTAxMDAzMloXDTI0MTEyMzAyMDAzMlowLzEtMCsGA1UEAxMk
YTFjMGMwMzItZTg3My00NjBiLWI3NDAtZDI1NjYwZDY0NjIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcvZX6wL/+ZLMlujVtwRIFpBaZw4yHM6M+2t
hiWYtVWlBFJ56JoEJyYs8oPE96UlmJPSBOOJEYwNKE71r1553wec+RTfhMUTiEUY
dU1HYUUL25iliZAF39ZWFOsMhv9DIRZSk5cKM7PgSdl+PSUEq///0q7SmkUci7Ct
hf9cYko/EB69WNfpeHoeBcLWtvqwz6CFCdKF7coMrh+IFMOjKIcfe/hSRGriERwb
5MXq+aOqomTE4w5X1xZC2limP5m1MOJuq2jrYwyP28LKdQZcF+ZdV9rfiUs8DHhl
uyOrK3fdrYOG7Lz/DH4N2WlDLZ8w3p75sbomD4nP9g5gNqE1dQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHXAtn8nMzphqiK8+/Rl09hvfQVdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNmZjNjA1MmYtYzJiYS0z
YTE5LTgzYWQtZWY5NTE1NmI3NDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAWHzPth3mbMdNj3eOEJYAWyTV5kYA4pvlLELcakVr2RjfT9TRUqfkCq
zqkJ2Vr+UOe3tvL/NDKuTZLCu/hQ9oZsHwMwPy5DOMHs1wwMTqUwwgjHxyI1hfjJ
7870LcnclpruKyIq6f2mVpZMvLV6wBhQDExvVdtRC0X8ZX6pvAr2OTHf8a3n4mtG
Rfklof5XGpmLwFT6dEP1JgL9qHS/f6Zh5aIh/Na7LPETD6HZMLWxrsaKfq5La3jB
xx9jhftasu+DmF1dvGTuJx73ogRF7jk+CXK+DsqIo84Y9UisBs7nNjL+gfbyDGcU
ePUz6E2lDKBgoKs470g6YcNPvuXrgPY=
-----END CERTIFICATE-----
Generated at Fri Oct 25 18:47:30 2024 by rpki-client on console-fra.rpki-client.org