Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/84b3f698-0df7-382b-beb8-237bfc387dad.roa
File:                     84b3f698-0df7-382b-beb8-237bfc387dad.roa (raw, json)
Hash identifier:          fz8VnIAZg0CsrLbozX0PxZG/uAv5FkzD8ex9Zm7cEPk=
Subject key identifier:   88:C2:D0:A7:B7:42:2B:AC:31:93:40:67:91:F5:AA:1C:F3:EF:53:0D
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847527C9C52C0A405D85DBA2300
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/84b3f698-0df7-382b-beb8-237bfc387dad.roa
Signing time:             Tue 24 Sep 2024 16:27:19 +0000
ROA not before:           Tue 24 Sep 2024 16:27:19 +0000
ROA not after:            Mon 23 Dec 2024 17:27:19 +0000
asID:                     397238
IP address blocks:        156.154.106.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Oct 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:52:7c:9c:52:c0:a4:05:d8:5d:ba:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 24 16:27:19 2024 GMT
            Not After : Dec 23 17:27:19 2024 GMT
        Subject: CN=e10e5321-c1de-4d02-85ec-9933a82cc505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:41:ad:e5:fd:22:ce:22:db:6b:85:0a:ed:00:
                    48:87:6c:b8:fb:66:20:93:b4:00:fb:2e:e6:78:b9:
                    17:1a:48:fe:6b:85:f3:24:18:a1:ec:b7:20:d8:a6:
                    34:7c:c8:96:d4:c4:99:28:c2:f0:82:46:14:5d:63:
                    52:8e:39:32:65:ba:78:ae:7d:86:06:2a:d9:83:3b:
                    f3:b1:c7:39:8c:65:80:56:71:fa:8a:54:ff:e3:bf:
                    87:ba:0d:5a:d7:90:23:56:29:8c:6d:29:93:7f:7c:
                    f0:5c:3f:5a:da:c4:2c:e2:d0:ff:99:f2:f5:5e:35:
                    14:32:fe:3d:c2:52:dd:d2:05:f6:9e:e5:68:78:60:
                    61:1b:13:1f:26:5b:00:34:28:44:97:d3:40:12:49:
                    ea:f0:02:75:53:1e:b8:29:6e:cf:ee:e1:d4:d3:52:
                    3f:ee:c1:b6:c0:f1:d2:27:0a:e1:cd:4b:33:c1:4e:
                    19:cb:d8:94:30:be:28:b7:8c:00:24:52:3e:6e:12:
                    3a:93:0f:03:55:55:8e:86:08:54:b0:f2:e9:8d:f0:
                    ed:46:f7:24:d7:44:b7:8f:05:2b:72:ab:fa:5f:8d:
                    47:39:8e:69:d5:55:99:ad:ad:29:0a:a1:d2:43:dc:
                    1c:bc:7b:d9:16:41:4e:dc:d0:c6:74:2c:46:9b:6e:
                    94:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:C2:D0:A7:B7:42:2B:AC:31:93:40:67:91:F5:AA:1C:F3:EF:53:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/84b3f698-0df7-382b-beb8-237bfc387dad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:4a:25:aa:e1:7f:5f:7d:a1:49:b0:73:ac:0f:ac:54:d3:6b:
         4c:35:e8:c3:87:e7:0b:76:87:d7:17:97:d8:7e:85:cd:f4:d9:
         37:1f:c7:37:fe:95:72:53:e6:23:19:b4:c4:e6:f5:db:de:52:
         69:36:35:6f:58:53:48:d3:8e:e9:96:92:ac:31:88:c2:91:b5:
         a1:ce:a8:ca:4f:89:b0:a7:ab:30:4b:02:f7:f6:73:77:6a:95:
         65:87:04:bb:0c:bf:62:25:35:11:dd:4d:93:61:28:04:7a:7b:
         42:95:0b:1d:1e:47:85:f0:74:18:63:e6:41:67:a6:e0:b7:1b:
         28:34:5b:7c:45:78:c6:8d:1b:61:5b:87:c7:13:f9:fc:6e:f9:
         3d:f2:f3:f1:7a:7a:c6:8d:f5:90:52:88:46:b2:da:7e:c8:be:
         73:19:be:41:22:86:ab:1c:35:71:f1:3e:8f:0c:4d:e5:5b:d7:
         68:c1:20:df:2e:34:b4:8c:78:79:e9:dc:11:e4:44:45:f8:f0:
         43:fc:1d:bb:bf:95:40:f8:4d:c4:c8:b5:73:6e:3c:60:61:d7:
         d0:a9:75:43:2f:30:24:e3:77:33:03:ab:92:c4:80:4a:20:23:
         a9:cf:2a:35:25:0f:16:e9:c4:dd:d0:b4:b9:d7:e1:7f:b7:03:
         0b:46:c4:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 18:47:31 2024 by rpki-client on console-fra.rpki-client.org