Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7329459b-4faf-39c2-8c3b-3a608a53b5e9.roa
File:                     7329459b-4faf-39c2-8c3b-3a608a53b5e9.roa (raw, json)
Hash identifier:          p2D2IFbA6vIwfax/vzxrzTvau9al8m0i2xUoRaG7ShY=
Subject key identifier:   8B:BB:6A:18:15:BA:6E:11:F2:75:AD:32:87:EE:34:ED:67:36:37:EE
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847527CACEB28F94395BEA7A550
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7329459b-4faf-39c2-8c3b-3a608a53b5e9.roa
Signing time:             Tue 24 Sep 2024 16:27:26 +0000
ROA not before:           Tue 24 Sep 2024 16:27:26 +0000
ROA not after:            Mon 23 Dec 2024 17:27:26 +0000
asID:                     397229
IP address blocks:        156.154.111.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:52:7c:ac:eb:28:f9:43:95:be:a7:a5:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 24 16:27:26 2024 GMT
            Not After : Dec 23 17:27:26 2024 GMT
        Subject: CN=5f1d77e8-e59e-495e-b07b-d3679b73c987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:58:2e:b3:28:35:ec:16:9a:a7:fa:ca:5d:c7:
                    a2:29:e2:e6:9d:eb:89:47:b7:56:58:e3:1e:03:b5:
                    1b:02:da:4e:d4:61:02:f3:17:21:22:3b:74:e0:95:
                    52:ec:4d:cf:b0:eb:06:97:ec:94:d5:8d:10:39:41:
                    84:26:16:e5:03:f0:57:1a:df:dd:ba:92:6b:8a:b1:
                    38:70:4e:c1:7d:41:6b:95:89:01:9e:ba:66:fa:bc:
                    78:96:dc:de:5b:a4:46:62:18:d6:59:2b:f6:17:d0:
                    ff:88:19:39:48:56:08:00:87:17:43:39:85:fb:98:
                    52:8f:ef:0f:8b:2c:0f:2e:71:b7:ed:e1:b0:1a:15:
                    13:6f:65:4a:f7:cc:23:3a:80:18:11:1e:3e:1e:01:
                    b0:ab:bc:c3:e7:ff:e2:e7:ca:80:7f:60:35:20:97:
                    85:57:28:61:90:75:40:5d:ae:ce:7b:bc:72:ce:b6:
                    bb:5f:ce:f8:f4:8c:0a:7f:4a:49:7d:f2:22:37:da:
                    42:e2:e8:9f:87:d3:6e:7b:2e:34:09:4f:d3:a1:73:
                    8d:95:71:bb:6a:5a:fa:a2:b0:5f:ec:49:8c:12:3a:
                    8a:11:60:94:03:2b:8b:b2:6d:c0:5b:5a:26:23:d2:
                    9f:2a:85:0d:94:cc:cb:d8:7b:52:29:fc:42:f8:90:
                    f8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:BB:6A:18:15:BA:6E:11:F2:75:AD:32:87:EE:34:ED:67:36:37:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7329459b-4faf-39c2-8c3b-3a608a53b5e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:51:26:b0:96:22:f0:29:2e:3c:db:0c:3f:08:08:6f:88:21:
         84:50:60:eb:f4:cb:05:50:72:6d:dc:f3:33:fc:69:e9:c6:79:
         ac:a7:7f:b4:26:63:10:44:fe:61:84:55:55:d4:3f:c5:99:c8:
         8e:db:b1:49:fc:8e:b2:77:1f:18:8e:06:dc:76:1b:ff:3f:47:
         b1:36:72:42:bb:a8:25:26:98:cb:f4:dd:ec:ec:c2:ff:de:a9:
         0c:ff:58:ba:ac:05:b9:b2:bd:b6:63:cc:a2:e8:c7:b6:d9:c6:
         71:e2:bd:72:38:5e:e9:97:fc:24:4c:00:09:0d:ed:eb:2d:3b:
         11:67:7d:46:2a:60:88:b7:40:5a:41:0b:3d:bd:bd:01:a8:3e:
         56:0c:25:3c:dd:ed:a7:0f:9b:93:59:b7:36:49:6d:7c:22:e9:
         7f:5f:0b:c4:2f:14:3f:b1:4a:1c:be:db:1f:9d:96:20:09:99:
         80:c4:b7:8c:6b:e4:f2:26:f4:33:f7:91:a3:e6:69:40:c5:95:
         9e:78:05:68:50:c3:b7:9d:f0:f1:81:d2:76:d6:3f:a9:aa:89:
         d0:25:e1:48:c7:f9:e4:eb:94:93:7d:28:73:02:bf:1e:a1:c6:
         d0:2c:26:b5:08:ea:fa:ea:f7:22:1f:cd:c7:88:a5:03:46:eb:
         d5:bb:55:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:05:36 2024 by rpki-client on console-fra.rpki-client.org