Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7fc757b5-d6cf-3993-80cd-f855b1e0c0d3.roa
File:                     7fc757b5-d6cf-3993-80cd-f855b1e0c0d3.roa (raw, json)
Hash identifier:          vosYcl8ziSW/dH/C+STO8PQFTXTawLRuy9DQlaQ+Lz0=
Subject key identifier:   6F:81:D8:C4:B2:D2:35:B5:22:B2:FC:85:BD:A4:78:D6:92:7C:CA:6D
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285846FCF04E8B58F0699CBFD8E800
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7fc757b5-d6cf-3993-80cd-f855b1e0c0d3.roa
Signing time:             Sun 25 Aug 2024 01:00:32 +0000
ROA not before:           Sun 25 Aug 2024 01:00:32 +0000
ROA not after:            Sat 23 Nov 2024 02:00:32 +0000
asID:                     397227
IP address blocks:        156.154.158.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Oct 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:fc:f0:4e:8b:58:f0:69:9c:bf:d8:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 25 01:00:32 2024 GMT
            Not After : Nov 23 02:00:32 2024 GMT
        Subject: CN=9f66b998-ddd0-4957-a46f-a4775d9c3246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:98:94:0a:46:de:96:96:32:ac:c4:a4:19:0c:
                    5f:db:c1:77:64:5f:6f:73:75:6f:7b:08:3e:a8:17:
                    39:5b:8c:9c:e2:fd:97:e0:82:94:7a:ea:b9:02:2a:
                    06:d6:af:1c:9d:ed:e3:0d:24:3f:27:dd:d9:63:36:
                    ba:4f:05:b5:5d:04:19:6e:50:5a:a3:da:2d:76:09:
                    eb:0c:40:9a:8f:2b:8a:4d:fc:92:66:e4:5e:61:5c:
                    92:21:4b:02:5d:0e:f5:62:ff:a2:5b:98:25:64:52:
                    1f:6e:be:69:dd:59:fe:03:f9:da:3d:20:2e:be:26:
                    f8:83:89:9c:8c:d7:09:e0:7e:66:df:99:a6:b6:8c:
                    b0:24:e6:d5:13:4d:a9:5b:77:3b:9b:3b:e8:75:2d:
                    e6:68:2c:58:39:72:82:d8:f2:5a:5b:94:f2:99:7d:
                    4b:ab:a7:ca:97:f7:a2:7d:e4:0d:85:8f:56:56:74:
                    19:ac:55:fe:83:94:b7:e1:ab:30:2d:14:b9:28:09:
                    a5:68:1b:18:bd:05:ff:cd:4a:c8:35:e5:86:a8:7f:
                    9f:20:a4:4b:44:d6:a0:b2:24:54:20:e4:fd:5b:d5:
                    8c:c4:c1:2a:ce:e2:d3:19:b5:2c:48:74:d3:3b:15:
                    03:e5:6e:cf:3e:38:57:12:b1:76:b9:54:66:18:a5:
                    94:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:81:D8:C4:B2:D2:35:B5:22:B2:FC:85:BD:A4:78:D6:92:7C:CA:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7fc757b5-d6cf-3993-80cd-f855b1e0c0d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:fc:2a:01:62:d1:8b:b2:e7:48:70:76:73:1d:2a:c0:eb:18:
         02:40:cb:d6:84:13:6a:eb:2d:f9:f9:15:ce:34:9b:4a:fa:d6:
         35:c8:00:69:29:e1:8a:37:f1:41:46:8c:27:63:e8:c2:a2:06:
         3d:81:e3:c0:55:3c:f4:5a:ba:19:94:98:4c:b1:3e:5e:a8:56:
         1b:13:e6:d5:4a:ba:36:1e:c9:7a:b8:dd:64:43:52:3f:a0:05:
         84:08:2c:e4:2a:90:e2:ca:48:87:7d:9e:bf:a9:83:e7:66:15:
         b1:01:a3:d3:be:1b:6b:08:12:e9:be:73:47:a0:d7:39:88:25:
         d6:2d:61:e4:9f:64:6f:fa:1c:37:4e:29:01:ba:84:82:30:2b:
         af:94:49:d9:c1:4d:46:b4:22:0f:d3:3d:dc:0f:04:8a:5c:e8:
         55:47:6a:a4:6b:39:2e:bd:d4:55:6f:ec:1d:40:5f:68:e4:ba:
         86:11:de:68:7a:c6:f7:b6:ce:89:08:9f:bd:14:7e:f0:f4:0a:
         74:d2:cf:86:6f:83:63:d3:e4:f9:37:d8:25:7f:76:dc:e7:e8:
         5e:85:9b:ea:ef:49:e7:f4:e0:bf:22:35:cc:de:27:75:a8:f1:
         62:74:1d:27:96:a5:5a:cc:e7:9f:1e:f5:b1:6e:7f:7d:06:96:
         99:e5:63:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 18:47:31 2024 by rpki-client on console-fra.rpki-client.org