Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8546660e-239b-348e-997f-e391c1f070c8.roa
File:                     8546660e-239b-348e-997f-e391c1f070c8.roa (raw, json)
Hash identifier:          OVYqCoru9KUw5pYEzYSInHLZCMn9vWnMvaBCQKWbksI=
Subject key identifier:   2E:04:0C:4B:BD:04:0A:01:6A:2D:E0:1B:9E:86:02:81:9B:34:9D:86
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847DDCA3A4D7CC24B7E2B21C400
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8546660e-239b-348e-997f-e391c1f070c8.roa
Signing time:             Wed 13 Nov 2024 14:00:39 +0000
ROA not before:           Wed 13 Nov 2024 14:00:39 +0000
ROA not after:            Tue 11 Feb 2025 14:00:39 +0000
asID:                     397224
IP address blocks:        156.154.172.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dd:ca:3a:4d:7c:c2:4b:7e:2b:21:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Nov 13 14:00:39 2024 GMT
            Not After : Feb 11 14:00:39 2025 GMT
        Subject: CN=9ec97188-713a-426b-90e0-41bb7c9cdde2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:1e:ba:19:d6:6e:00:1f:dd:0c:50:40:01:26:
                    ba:d5:77:f6:61:b2:6a:ad:1c:4f:70:17:60:49:ea:
                    60:ca:34:ea:a9:46:a6:d5:83:be:b4:e2:f1:9b:aa:
                    67:6f:2b:cf:ee:69:01:6e:49:88:71:ae:4e:c5:c0:
                    52:8b:86:c2:5f:69:c6:91:73:c3:67:d0:15:4c:12:
                    d3:16:d8:13:91:80:47:e5:81:34:08:17:77:f6:6b:
                    d6:02:be:de:8d:2c:a6:08:8d:62:7c:13:ad:8d:e3:
                    00:f8:a5:e6:81:32:dd:4f:4b:40:73:e2:86:35:aa:
                    0d:4a:c5:38:f7:6b:22:2d:ae:b5:25:03:8c:42:d8:
                    34:0f:50:9c:52:cf:91:f5:dd:cb:c4:dd:3d:3d:0a:
                    7f:b2:f9:c8:7c:5b:79:c1:f7:0b:89:41:ef:18:d6:
                    36:aa:71:b1:e9:5e:b1:8c:63:3c:32:b2:bd:b6:32:
                    98:b7:1e:da:3b:56:ea:f6:6d:59:3e:cd:8f:02:96:
                    28:1b:f0:c9:e6:6e:69:72:c7:11:7d:21:c9:49:3f:
                    6d:00:dc:66:38:a9:52:82:ae:c2:b3:e8:d4:a2:c7:
                    cd:84:22:5e:17:4c:7a:83:36:da:05:c8:9a:4a:dc:
                    be:72:82:ce:0d:42:67:98:8d:57:ca:06:10:e9:ab:
                    46:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:04:0C:4B:BD:04:0A:01:6A:2D:E0:1B:9E:86:02:81:9B:34:9D:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8546660e-239b-348e-997f-e391c1f070c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:f4:9e:69:b6:28:c1:8b:2c:94:d0:5c:86:bf:92:08:5f:2a:
         aa:23:b4:6a:be:4b:19:8c:92:31:da:87:85:28:73:c6:7b:6c:
         11:be:b6:cf:10:c3:60:b7:33:46:d8:7a:de:42:50:05:84:6b:
         f3:d0:d8:ea:5e:10:c2:68:bd:e7:86:20:44:66:50:10:df:92:
         aa:de:7e:ea:b6:34:c6:14:f8:a1:5d:1a:77:95:6b:21:81:3e:
         98:55:95:6f:7d:a0:e1:d3:27:27:1d:3f:6a:0d:66:09:b2:98:
         e5:50:23:dc:12:3e:73:67:fd:ff:04:95:16:09:6a:88:d1:fb:
         42:25:47:dd:c6:9d:6f:33:d3:ec:e9:48:f8:73:94:75:0c:c2:
         aa:7d:1a:9b:2f:18:19:03:c0:a8:21:e0:f3:90:48:df:ae:0a:
         58:2a:54:28:d0:cd:e1:a9:85:24:21:a9:2b:93:db:35:48:31:
         e3:4d:d0:e0:bb:d7:a4:96:ac:8f:be:d8:e6:ce:c0:d9:a7:ff:
         c5:8a:46:ce:89:cc:f3:51:1d:63:5b:8a:aa:0d:78:71:b1:d2:
         a8:86:0b:55:1f:13:ee:39:42:cd:23:c7:93:10:bd:d2:bc:f4:
         e8:1f:c8:c0:a7:a2:4d:88:3a:5a:4d:48:e2:09:43:b3:93:8a:
         80:32:0a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:02:08 2024 by rpki-client on console-fra.rpki-client.org