Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/864af433-4212-3ab0-946f-91849bc62c97.roa
File:                     864af433-4212-3ab0-946f-91849bc62c97.roa (raw, json)
Hash identifier:          rJcqVmTvm3zNCqa3bUhpPJji66bpym/TzLjkfdypDsM=
Subject key identifier:   0F:18:00:6A:31:9D:35:07:10:DC:B2:A1:8B:9D:44:9A:AF:5D:9F:8A
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847CA3F4C4AE37D6065E491290E
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/864af433-4212-3ab0-946f-91849bc62c97.roa
Signing time:             Wed 06 Nov 2024 14:00:41 +0000
ROA not before:           Wed 06 Nov 2024 14:00:41 +0000
ROA not after:            Tue 04 Feb 2025 14:00:41 +0000
asID:                     397242
IP address blocks:        156.154.140.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:3f:4c:4a:e3:7d:60:65:e4:91:29:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Nov  6 14:00:41 2024 GMT
            Not After : Feb  4 14:00:41 2025 GMT
        Subject: CN=b9bc683c-7183-4ea3-900e-a7683a078c85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:06:65:1a:98:83:e6:d9:c9:a5:09:60:cd:2a:
                    2d:d9:6e:15:e1:e0:07:9f:fa:04:33:65:75:8a:50:
                    60:c4:ec:01:d9:28:a3:a1:22:be:d4:6d:ef:e9:eb:
                    bb:ef:81:93:40:63:07:3a:6a:d8:80:fc:c1:3c:87:
                    63:fa:2e:ea:1b:d4:b5:81:2a:a6:e9:54:6e:0b:86:
                    6d:52:01:c4:7e:0d:cc:98:60:20:1c:41:21:89:38:
                    f6:21:f6:df:67:fd:04:04:26:0b:51:87:ba:ed:63:
                    29:ee:69:40:6c:fd:b3:57:44:f3:99:56:7d:17:4f:
                    52:02:0a:91:2d:a9:f4:f7:b2:83:a1:ae:65:a8:c8:
                    cb:88:0b:b5:75:4c:fd:83:83:65:6e:d5:4e:14:6c:
                    0e:fa:74:25:72:0c:cc:e8:5f:c9:8f:04:d1:70:d4:
                    3c:5e:53:3b:2a:07:af:b0:b0:40:94:07:ca:61:5e:
                    24:32:f0:07:03:fd:2f:fc:3d:68:f9:37:ea:ae:10:
                    05:f9:e5:85:bc:14:e2:fb:39:69:78:2c:5e:52:f2:
                    92:c9:a2:83:36:1d:76:a9:73:37:39:52:2f:ea:b1:
                    ac:08:da:9c:3a:e6:e0:49:dc:87:46:40:2c:48:20:
                    48:6c:05:12:c0:71:34:83:97:b5:11:de:a5:86:5d:
                    a0:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:18:00:6A:31:9D:35:07:10:DC:B2:A1:8B:9D:44:9A:AF:5D:9F:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/864af433-4212-3ab0-946f-91849bc62c97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:a5:8f:3e:d6:aa:08:2e:79:81:b6:f1:17:8f:0d:95:06:3e:
         8f:2a:a1:9d:69:e0:02:77:59:95:8a:c2:3f:4c:1f:cf:17:53:
         c4:40:8e:12:bd:b7:ad:de:27:3e:fc:5d:94:4f:88:d7:4d:29:
         4b:43:11:74:46:d4:f6:3e:cd:bb:73:32:ce:68:cf:5f:e0:06:
         6d:1a:b3:bc:ea:79:eb:14:ea:30:9c:58:48:fa:30:0d:15:aa:
         1a:6a:27:19:2e:72:b0:72:f1:a7:08:8a:04:cb:78:a2:d1:09:
         72:70:40:68:0c:dc:1e:5f:56:19:13:81:f9:76:6f:a5:94:69:
         1f:39:66:fc:15:78:f2:46:39:3d:b3:fd:6f:f3:d9:70:f7:80:
         6c:ce:78:db:bc:a5:49:96:15:d9:23:19:4d:3a:0b:96:7b:7d:
         c9:74:98:16:b1:6b:b3:35:a8:df:34:0b:c2:f4:7b:f8:cb:79:
         23:a8:45:de:ba:03:b4:d5:ab:98:4e:36:b6:02:8f:81:e3:97:
         60:f1:36:34:8c:0a:1b:83:71:fe:e2:a2:0c:30:1a:3b:d1:56:
         95:9d:28:a1:61:90:41:3b:6c:b4:19:1f:47:64:ab:d2:4d:ff:
         5f:7d:01:6e:73:da:5b:3f:a3:5a:b7:ff:83:47:c9:aa:1e:b8:
         a9:52:8e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:31:00 2024 by rpki-client on console-ams.rpki-client.org