Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/79ac4132-4ce2-3ed7-8b8a-447551bf005b.roa
File:                     79ac4132-4ce2-3ed7-8b8a-447551bf005b.roa (raw, json)
Hash identifier:          DOO7yaoPVvjn5wKisiDrytp2GY5BJzeA8BQLGHVnk8Y=
Subject key identifier:   E3:65:B6:56:0A:B8:1C:7B:26:56:67:68:80:E4:B8:A1:EA:DE:BD:A9
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847CA3F50472BBAE6223D67FC80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/79ac4132-4ce2-3ed7-8b8a-447551bf005b.roa
Signing time:             Wed 06 Nov 2024 14:00:41 +0000
ROA not before:           Wed 06 Nov 2024 14:00:41 +0000
ROA not after:            Tue 04 Feb 2025 14:00:41 +0000
asID:                     397235
IP address blocks:        156.154.153.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:3f:50:47:2b:ba:e6:22:3d:67:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Nov  6 14:00:41 2024 GMT
            Not After : Feb  4 14:00:41 2025 GMT
        Subject: CN=47acb10f-402c-4b2a-b6f1-c5be89036edb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6e:39:e7:77:57:7d:76:a5:01:06:34:5b:25:
                    1f:fa:54:b2:db:d6:19:af:0e:1f:3f:a9:7b:d4:a2:
                    f9:b2:d4:b0:ee:51:11:ae:93:03:d2:51:08:1c:74:
                    1f:33:c7:c9:51:68:d6:8f:74:ef:2c:ba:af:9f:82:
                    8d:95:b9:c5:f7:c8:9d:e1:b7:83:5f:58:89:c8:e9:
                    64:1e:6e:58:fa:b6:e2:0c:a7:75:75:69:ba:b7:d4:
                    9b:1b:90:71:e5:b6:4d:98:e5:29:c7:65:da:2c:0d:
                    46:a1:30:70:a4:2d:9b:4f:a2:21:c4:22:55:b0:43:
                    b6:50:34:a0:8b:b9:62:63:14:9f:b9:f9:fc:89:5e:
                    6e:49:c3:bb:c5:c2:73:c2:67:5b:5c:0a:d5:d9:aa:
                    6a:fa:f3:5c:20:7e:2f:07:e1:72:37:fa:8a:1e:c1:
                    dd:47:01:02:a9:9e:e4:9c:23:2d:fd:b5:f6:e8:bc:
                    ea:93:cf:ae:6a:9e:41:2d:e9:e8:b4:21:df:c4:f4:
                    c2:a3:5b:10:4c:b9:c6:09:ce:30:06:0c:24:ab:1a:
                    ed:0e:02:9b:45:cd:a0:93:d1:e7:1a:62:49:94:ad:
                    c8:72:b5:dc:bd:a4:e2:2a:0b:47:de:cd:00:f1:7e:
                    4e:ba:a4:eb:e5:ed:75:63:bc:d1:9d:c2:d9:ff:75:
                    38:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:65:B6:56:0A:B8:1C:7B:26:56:67:68:80:E4:B8:A1:EA:DE:BD:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/79ac4132-4ce2-3ed7-8b8a-447551bf005b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:aa:2c:d8:d6:7b:49:92:bd:49:2f:01:76:9c:58:65:a5:b4:
         02:d6:f4:ef:e7:04:38:54:5d:58:3e:c5:46:26:5b:fc:12:e9:
         c1:2f:4b:45:d0:1b:68:60:57:df:f4:6f:9f:65:d2:b0:67:bf:
         81:5d:14:fe:c9:e8:90:2b:21:10:14:42:e8:42:75:54:79:b2:
         9e:5d:6c:e8:78:a0:b1:16:1f:31:0e:77:69:bc:1a:5f:a5:b5:
         5a:90:90:48:a3:2f:be:8a:53:40:1f:73:7a:b1:21:a8:33:87:
         88:e4:de:6f:21:8c:84:2a:ef:9f:a2:a2:cb:62:ec:b7:63:c1:
         a6:a1:e5:c4:60:c1:62:26:da:47:26:a5:d1:e6:09:63:d4:84:
         68:7e:78:4c:51:fc:74:d4:5e:11:a6:e1:da:85:66:f3:88:81:
         b2:2b:15:41:ea:0d:9c:ad:11:1e:aa:ea:a7:41:40:a8:c2:60:
         11:a6:e0:fc:ec:da:78:1c:b7:a4:65:ca:05:37:00:ba:ba:e9:
         8d:bc:71:be:cc:6c:e8:75:9b:24:cd:88:64:90:0e:84:17:82:
         79:ee:a5:51:78:34:35:4b:ac:49:9f:ac:e3:d2:44:92:12:d7:
         a1:cd:15:92:e1:80:e6:ea:5e:df:9d:85:16:5f:c2:f5:4e:6d:
         b8:d7:54:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:31:00 2024 by rpki-client on console-ams.rpki-client.org