Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8529e9c6-8071-3257-b2b8-14bf4967071e.roa
File:                     8529e9c6-8071-3257-b2b8-14bf4967071e.roa (raw, json)
Hash identifier:          gTVXdrx7V3Kci3CY8hs0jbBZAJeZ6Q1Egu3Y0SE5ylw=
Subject key identifier:   29:0B:F0:19:92:0F:9F:8B:DB:27:14:02:1E:EC:9E:F9:81:58:70:93
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285846E9657D33C59CE72264298A80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8529e9c6-8071-3257-b2b8-14bf4967071e.roa
Signing time:             Sun 18 Aug 2024 01:00:29 +0000
ROA not before:           Sun 18 Aug 2024 01:00:29 +0000
ROA not after:            Sat 16 Nov 2024 02:00:29 +0000
asID:                     397218
IP address blocks:        156.154.159.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Oct 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:e9:65:7d:33:c5:9c:e7:22:64:29:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 18 01:00:29 2024 GMT
            Not After : Nov 16 02:00:29 2024 GMT
        Subject: CN=c5f53265-1e9f-40eb-af7d-c94f5a7dcb86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b2:04:8a:1a:bd:ba:bf:b5:79:fa:5b:b5:9f:
                    20:04:46:d2:3f:7b:74:e5:5b:ce:51:18:1f:fc:c0:
                    9e:f3:1e:8b:c9:06:ad:93:82:8d:e3:e8:58:3d:fd:
                    63:b1:d1:a0:2c:36:92:7c:54:2a:49:5e:24:32:a1:
                    10:86:9d:6e:f3:c3:5c:1b:21:47:af:7a:12:f2:9e:
                    1c:7e:8d:74:7b:51:7f:f4:40:06:f7:0e:86:86:86:
                    6e:c0:f7:41:41:a7:e0:c3:f2:75:91:c1:00:47:1f:
                    eb:cd:3b:e5:2a:1d:eb:1e:a1:6d:1d:d8:41:f9:a7:
                    a1:b9:4c:20:50:8a:f2:58:28:14:a2:34:93:d0:49:
                    15:5b:10:15:bb:c9:98:16:44:fc:6d:f6:24:63:d1:
                    30:32:3c:61:31:42:6b:43:07:f7:b6:0d:64:70:78:
                    22:29:43:74:c7:64:64:4c:46:df:4a:f2:d7:b9:51:
                    e7:81:f9:5f:05:bb:0b:2d:63:5a:05:01:70:73:53:
                    ab:1a:cf:07:a5:6a:87:f8:aa:d6:6b:6b:97:45:62:
                    73:a5:a4:7a:99:6c:37:57:41:11:15:91:65:7f:ae:
                    6c:e8:23:9b:89:fc:f4:69:0d:f5:68:97:e2:49:3b:
                    a9:94:32:78:35:6f:d7:1f:e7:21:d5:28:b8:77:77:
                    24:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:0B:F0:19:92:0F:9F:8B:DB:27:14:02:1E:EC:9E:F9:81:58:70:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8529e9c6-8071-3257-b2b8-14bf4967071e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:ad:40:78:f4:ec:ab:33:ee:14:d1:57:5e:55:c4:0b:c5:2e:
         05:77:f7:43:77:dd:a3:f2:b1:c5:17:ba:ea:cd:29:a6:74:2e:
         a4:5f:d3:36:00:59:4a:2a:f5:0e:23:19:42:02:b3:59:90:ba:
         ea:6c:98:92:91:86:19:5c:a8:aa:53:d1:44:c9:36:3b:37:dc:
         49:45:1d:a7:e4:c1:d6:af:0e:86:a8:0e:69:8d:50:f8:d6:1c:
         63:7a:6a:89:fa:ea:a9:ab:2e:f5:f7:eb:7d:22:37:98:3b:24:
         e0:68:61:cc:c6:12:f7:77:24:30:52:01:fa:52:24:ae:3e:b2:
         3e:f7:de:af:7f:a4:89:0f:10:30:09:11:cd:51:9c:0b:e4:f3:
         8f:d7:60:8c:b0:4e:a1:50:16:75:66:0a:2d:cf:38:b3:54:3d:
         69:23:9c:f0:18:b0:94:98:17:88:0c:48:c1:d6:3f:b4:ac:a7:
         d0:9a:a0:26:74:29:c9:5d:4b:d2:45:28:00:4c:49:eb:4f:88:
         ad:87:f9:f1:7b:e2:98:46:bb:ab:90:1d:60:90:31:83:d8:c7:
         00:cd:4f:ee:5b:55:87:6a:90:b6:db:4a:0f:02:a5:d8:b7:c7:
         2a:76:d9:9c:6a:47:72:90:c5:d9:6f:b4:f1:d1:fb:58:4c:90:
         93:ba:0f:ae
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEbpZX0zxZznImQpioAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI0MDgxODAxMDAyOVoXDTI0MTExNjAyMDAyOVowLzEtMCsGA1UEAxMk
YzVmNTMyNjUtMWU5Zi00MGViLWFmN2QtYzk0ZjVhN2RjYjg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLIEihq9ur+1efpbtZ8gBEbSP3t05VvOURgf
/MCe8x6LyQatk4KN4+hYPf1jsdGgLDaSfFQqSV4kMqEQhp1u88NcGyFHr3oS8p4c
fo10e1F/9EAG9w6GhoZuwPdBQafgw/J1kcEARx/rzTvlKh3rHqFtHdhB+aehuUwg
UIryWCgUojST0EkVWxAVu8mYFkT8bfYkY9EwMjxhMUJrQwf3tg1kcHgiKUN0x2Rk
TEbfSvLXuVHngflfBbsLLWNaBQFwc1OrGs8HpWqH+KrWa2uXRWJzpaR6mWw3V0ER
FZFlf65s6CObifz0aQ31aJfiSTuplDJ4NW/XH+ch1Si4d3ck3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCkL8BmSD5+L2ycUAh7snvmBWHCTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvODUyOWU5YzYtODA3MS0z
MjU3LWIyYjgtMTRiZjQ5NjcwNzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHutQHj07Ksz7hTRV15VxAvFLgV390N33aPyscUXuurNKaZ0LqRf0zYA
WUoq9Q4jGUICs1mQuupsmJKRhhlcqKpT0UTJNjs33ElFHafkwdavDoaoDmmNUPjW
HGN6aon66qmrLvX3630iN5g7JOBoYczGEvd3JDBSAfpSJK4+sj733q9/pIkPEDAJ
Ec1RnAvk84/XYIywTqFQFnVmCi3POLNUPWkjnPAYsJSYF4gMSMHWP7Ssp9CaoCZ0
KcldS9JFKABMSetPiK2H+fF74phGu6uQHWCQMYPYxwDNT+5bVYdqkLbbSg8Cpdi3
xyp22ZxqR3KQxdlvtPHR+1hMkJO6D64=
-----END CERTIFICATE-----
Generated at Fri Oct 25 20:01:12 2024 by rpki-client on console-ams.rpki-client.org