Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7bccd321-e726-35f7-9a2a-540bfb9b33a5.roa
File:                     7bccd321-e726-35f7-9a2a-540bfb9b33a5.roa (raw, json)
Hash identifier:          jDWLM3izK4J2sqe2sbg5+wPM0zD9o0cMgmvhFku49po=
Subject key identifier:   80:74:D9:D1:12:BE:89:BD:A6:CF:81:21:FE:A6:9A:7B:91:BF:A5:EC
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285846E9655A5D20BDAE7ED1E47800
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7bccd321-e726-35f7-9a2a-540bfb9b33a5.roa
Signing time:             Sun 18 Aug 2024 01:00:29 +0000
ROA not before:           Sun 18 Aug 2024 01:00:29 +0000
ROA not after:            Sat 16 Nov 2024 02:00:29 +0000
asID:                     397218
IP address blocks:        156.154.142.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Oct 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:e9:65:5a:5d:20:bd:ae:7e:d1:e4:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 18 01:00:29 2024 GMT
            Not After : Nov 16 02:00:29 2024 GMT
        Subject: CN=b2859e2a-8ff9-4df2-ae69-d2074bf8f6ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:86:fa:d4:af:1c:f1:ab:ea:1d:70:56:f4:ca:
                    e9:fc:9c:3d:4e:47:56:e2:96:02:a9:50:66:22:e2:
                    3f:1a:d7:14:39:eb:24:c7:3b:de:b8:ae:af:b3:fc:
                    eb:7f:ab:7b:1c:55:e2:6f:40:f2:9e:09:72:c1:b1:
                    17:3b:22:ae:4c:81:a3:72:f1:4e:15:67:5c:30:f8:
                    85:a0:4f:9c:3e:f6:c4:f8:c6:48:4e:9a:2c:46:8d:
                    4a:48:5e:14:ec:e7:f7:6f:fa:00:4d:61:71:c3:ca:
                    13:03:6d:b5:7a:77:5c:7c:6d:9d:75:7c:d1:32:c9:
                    58:d8:55:51:7b:3a:b8:fb:70:b5:af:e7:b9:e9:d8:
                    ae:37:16:83:2a:ee:04:df:c8:cd:8b:9c:d3:10:0e:
                    4c:93:b8:45:1c:e8:32:b9:f1:58:84:67:f7:54:22:
                    91:30:4b:92:6b:31:8c:f5:cd:ab:68:47:54:25:8a:
                    79:e5:ac:78:27:bc:4d:13:a4:b4:bc:8b:11:70:ae:
                    a2:71:cb:67:20:78:3c:cb:ec:2c:a4:71:26:4d:f0:
                    a1:cb:fd:02:32:6b:4d:fc:fc:19:5c:0f:c3:e3:02:
                    5a:ec:6c:96:0f:5a:cc:5b:9f:56:18:cc:f1:ef:a1:
                    fe:55:51:4c:b2:2e:89:cf:e4:42:3e:32:76:11:7b:
                    f3:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:74:D9:D1:12:BE:89:BD:A6:CF:81:21:FE:A6:9A:7B:91:BF:A5:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7bccd321-e726-35f7-9a2a-540bfb9b33a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:bd:fc:1e:56:8d:c7:bf:3e:aa:4c:31:08:cd:3b:da:06:0f:
         be:26:2f:f5:d6:9a:11:31:11:7e:71:d2:68:70:77:86:5a:7c:
         5a:50:62:0e:76:06:fa:a7:0a:19:d8:ee:c4:7b:b7:8a:4b:d6:
         11:18:5b:41:c1:08:0b:b7:cc:9b:1c:54:28:bf:e4:5b:35:b1:
         c2:41:62:cd:fb:a2:64:ed:44:53:8c:b3:59:56:30:be:e2:32:
         20:6f:ae:73:42:73:4e:ea:15:cb:6e:69:d4:3f:91:bc:5e:ec:
         01:23:eb:db:b0:26:5a:de:5e:5b:cc:d0:c7:0c:59:19:48:37:
         bb:67:33:39:d2:2b:73:4c:72:48:63:15:0f:f1:54:9e:78:50:
         36:54:29:f8:34:d4:0e:b6:73:e9:19:bb:03:b2:b6:42:2d:03:
         18:9a:05:b1:24:2c:7e:c7:92:96:98:98:1e:4d:48:82:81:a7:
         14:be:54:42:07:c8:c2:e9:0a:b7:97:a5:ca:94:50:18:93:0f:
         90:0f:4b:79:fe:ae:1d:d9:be:73:4e:b7:4a:9c:56:02:98:3d:
         ac:2a:40:13:c1:d4:20:88:97:e1:f1:17:5a:f8:a7:ae:63:9b:
         36:09:a3:3a:05:69:c1:21:02:b1:98:23:f9:3c:20:9c:38:72:
         0d:37:f7:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 20:01:12 2024 by rpki-client on console-ams.rpki-client.org