Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7edcb1f4-ca03-3209-bd9b-0764b7d2774d.roa
File:                     7edcb1f4-ca03-3209-bd9b-0764b7d2774d.roa (raw, json)
Hash identifier:          PbM/aUXGFb+AtuOTBm+lzuPkLTCCtHb04bCtSNOzRTU=
Subject key identifier:   0F:3E:55:FA:76:BF:CF:0D:81:B3:3E:18:5C:62:BC:10:99:78:77:7E
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847DDCA2B8850368E0C9919A5C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7edcb1f4-ca03-3209-bd9b-0764b7d2774d.roa
Signing time:             Wed 13 Nov 2024 14:00:39 +0000
ROA not before:           Wed 13 Nov 2024 14:00:39 +0000
ROA not after:            Tue 11 Feb 2025 14:00:39 +0000
asID:                     397221
IP address blocks:        156.154.68.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dd:ca:2b:88:50:36:8e:0c:99:19:a5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Nov 13 14:00:39 2024 GMT
            Not After : Feb 11 14:00:39 2025 GMT
        Subject: CN=de27dc8f-a1c7-4a48-a2b4-b3dad87c324f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:58:fe:89:f4:a9:73:99:fa:d0:a0:94:b7:76:
                    bc:db:0c:54:47:07:73:2a:b0:86:f9:75:05:0f:4d:
                    d1:5a:04:cc:3a:56:e9:29:50:da:15:b3:c5:56:b1:
                    6d:3d:a8:38:3a:3c:24:7b:f2:83:a2:02:5e:dc:b6:
                    16:3b:83:4a:b4:7e:c5:cf:61:43:a2:57:5e:e1:94:
                    a1:b4:87:ec:4f:a5:39:68:e0:47:3d:89:04:c7:e7:
                    4d:de:ad:3d:65:5e:47:d1:3b:1e:67:80:d2:93:e0:
                    77:0e:31:0c:2d:e6:98:2e:68:61:02:50:29:2e:f4:
                    86:2e:fe:b8:27:f0:39:ff:94:64:6c:08:2a:41:34:
                    bb:a9:ff:71:48:24:9e:d6:45:04:7f:ef:79:b0:04:
                    5b:67:b7:11:57:79:8f:b9:35:13:e5:19:73:7a:9d:
                    7e:ba:8c:52:49:88:e4:35:4e:2f:f1:33:15:f2:20:
                    25:a3:7f:6a:a1:2d:03:ac:85:22:06:a0:bc:0e:c4:
                    67:7e:78:34:26:93:86:c6:f4:e0:f6:80:60:84:e7:
                    25:e4:d3:99:d6:3f:89:3b:d6:66:78:8f:a0:8b:2c:
                    87:49:ba:10:cd:85:10:43:62:e2:ab:19:e9:33:17:
                    67:e4:04:01:46:a7:02:40:c4:f8:8e:b7:20:1e:35:
                    bf:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:3E:55:FA:76:BF:CF:0D:81:B3:3E:18:5C:62:BC:10:99:78:77:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7edcb1f4-ca03-3209-bd9b-0764b7d2774d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:1b:5a:42:bb:53:4f:d8:ee:0b:e5:79:a0:ed:a3:a5:85:1b:
         b6:0f:4c:eb:bc:c1:0d:65:2a:68:d8:40:36:ff:0f:20:1b:ca:
         92:b8:47:3c:8c:ec:35:d0:35:d8:a9:ee:7e:8c:57:d9:7e:6e:
         ce:34:36:62:96:04:82:59:7d:f2:52:a4:bf:a1:f6:45:59:36:
         24:2a:5e:ec:eb:da:75:c6:af:77:7e:55:fb:04:d5:be:b5:9f:
         11:93:c0:d0:2f:f5:f6:e6:95:ba:48:08:53:0d:38:a0:05:46:
         5b:97:88:b0:7f:98:fc:d2:e3:66:8c:bd:e8:a5:e8:9a:23:17:
         a1:be:cd:85:c3:42:67:0e:97:e1:4d:91:f7:ee:f3:36:bb:94:
         51:a6:8b:aa:ba:76:8d:2e:59:77:66:eb:a3:94:4b:52:ec:e7:
         74:31:04:e4:b3:37:6d:d0:64:2f:31:6c:80:a3:a4:8f:f7:45:
         8f:cf:16:26:fd:3e:90:ec:b8:47:18:f0:73:0c:d6:a2:56:7e:
         e4:16:63:10:97:84:bf:11:02:34:90:84:b3:84:50:9f:57:70:
         19:71:a5:c0:3c:b4:e4:c4:85:5b:1e:f2:dc:50:e7:36:d2:b3:
         de:5e:f3:7f:1b:81:0c:1b:4d:5c:d7:e1:0b:4b:e3:8f:e0:80:
         dc:8a:cd:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:02:08 2024 by rpki-client on console-fra.rpki-client.org