Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7c8c7fde-4524-3c14-85af-3a61f46e100e.roa
File:                     7c8c7fde-4524-3c14-85af-3a61f46e100e.roa (raw, json)
Hash identifier:          7bHFdC73Uo1nssQUZq94aoBRKAo9Pf+U/ooX61zSGJw=
Subject key identifier:   E0:27:2D:F2:5A:2C:7A:41:F2:8A:07:07:D9:F4:22:63:1B:6D:69:81
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285844FE2AB07B098BC91976BE3E80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7c8c7fde-4524-3c14-85af-3a61f46e100e.roa
Signing time:             Sat 24 Feb 2024 02:00:26 +0000
ROA not before:           Sat 24 Feb 2024 02:00:26 +0000
ROA not after:            Fri 24 May 2024 01:00:26 +0000
asID:                     397230
IP address blocks:        156.154.71.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fe:2a:b0:7b:09:8b:c9:19:76:be:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Feb 24 02:00:26 2024 GMT
            Not After : May 24 01:00:26 2024 GMT
        Subject: CN=efc5f148-939c-4566-b963-261c7521dec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:00:bd:25:e2:af:8f:d1:31:df:b9:94:fc:e4:
                    2e:1b:68:09:01:bb:bf:4a:6c:07:93:1a:51:36:dc:
                    81:7e:a3:e3:0d:7b:1c:36:79:c7:ed:ee:2f:9d:bd:
                    c8:4e:da:e3:41:c4:63:60:83:c0:6c:4b:04:c9:2a:
                    d6:4d:1e:23:70:24:2b:23:13:89:9d:56:cf:d1:6c:
                    d1:e5:4c:07:65:e1:e1:d3:0a:29:a6:f3:c8:b4:1e:
                    a1:1b:1e:1d:87:9b:d6:22:94:b0:7b:26:d8:7f:1d:
                    33:32:dc:29:bf:5d:bf:a5:36:8c:77:8d:2f:57:b5:
                    03:f1:a4:ac:71:aa:04:c3:d6:40:b6:a9:35:62:4a:
                    00:a7:9a:56:0e:08:d6:43:80:1d:b4:32:98:08:12:
                    37:c0:cf:7a:4c:a4:18:a5:87:d5:06:9e:d9:64:46:
                    c4:01:66:34:0f:29:73:12:60:97:d3:81:63:e3:7c:
                    59:06:21:1a:6c:0b:80:f8:b8:a1:47:7f:10:f1:7a:
                    46:3d:73:66:87:08:16:cc:4e:4c:91:84:df:08:28:
                    31:7c:b2:ad:d7:e5:bc:8d:1f:9f:a4:14:f1:cb:12:
                    82:d0:67:d6:c1:63:f9:7c:09:55:dc:7e:b1:d6:4d:
                    ad:d4:7c:0d:7a:58:85:f6:2d:82:f8:0e:2d:f6:ae:
                    2b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:27:2D:F2:5A:2C:7A:41:F2:8A:07:07:D9:F4:22:63:1B:6D:69:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7c8c7fde-4524-3c14-85af-3a61f46e100e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:29:6a:f2:d2:51:ed:3e:6f:86:1d:06:5d:d3:01:5e:0e:7b:
         2e:db:fa:88:cb:64:73:c7:6a:7d:19:02:5f:a8:ff:8d:71:53:
         9d:41:56:bc:ab:b8:7b:8b:d6:34:fe:c8:53:06:a5:d4:a0:ac:
         d9:f6:92:0a:a3:61:3e:db:51:70:1e:40:56:79:aa:77:0e:c6:
         3f:92:80:32:78:dd:65:7c:e7:54:88:91:b3:0e:14:e0:04:8f:
         1a:ad:49:6a:22:74:af:39:f0:19:23:b6:9b:6a:04:bc:f3:53:
         22:06:46:d9:ed:50:ca:4f:19:69:e8:cd:e0:8c:ea:27:e9:c9:
         f6:df:9a:04:29:34:b3:62:76:4d:e6:dc:c8:26:40:dc:7d:6d:
         6e:ce:fa:29:63:d1:45:7a:9c:db:42:19:4f:71:76:05:32:10:
         af:d9:07:44:2c:95:ca:97:4a:71:39:a6:86:6e:1c:4b:d8:b6:
         0a:54:ff:cf:52:c0:24:aa:a0:de:b3:3f:d7:5f:bd:01:7c:42:
         65:17:d9:57:32:cd:4c:93:5d:71:23:04:2f:d4:b3:27:18:3f:
         47:42:0b:a5:e5:6e:b5:f1:dc:b0:a4:4d:d6:56:15:1d:8a:42:
         f9:ad:31:1f:cc:10:28:02:53:bc:14:0f:af:16:c2:4f:48:eb:
         ca:30:84:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 06:33:59 2024 by rpki-client on console-ams.rpki-client.org