Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/88cbc73f-6883-3a6b-bc7b-e7ba27c03176.roa
File:                     88cbc73f-6883-3a6b-bc7b-e7ba27c03176.roa (raw, json)
Hash identifier:          rHm0KpW8WZOII2Wc+qT6JjT9ZjcFIP57fPq4QZmBRZE=
Subject key identifier:   10:98:E1:0C:A5:6C:5F:F5:0E:3E:A7:85:9D:30:CC:72:37:DA:0E:32
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847527C8E2A4327DE0D6221AE00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/88cbc73f-6883-3a6b-bc7b-e7ba27c03176.roa
Signing time:             Tue 24 Sep 2024 16:27:12 +0000
ROA not before:           Tue 24 Sep 2024 16:27:12 +0000
ROA not after:            Mon 23 Dec 2024 17:27:12 +0000
asID:                     397217
IP address blocks:        156.154.127.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:52:7c:8e:2a:43:27:de:0d:62:21:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 24 16:27:12 2024 GMT
            Not After : Dec 23 17:27:12 2024 GMT
        Subject: CN=dc3445a7-0407-447e-a939-291b22158a47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2e:b9:f9:14:c2:0b:52:9d:f3:1f:0b:e5:2e:
                    55:57:80:c3:74:65:98:b6:87:47:5c:fa:ee:66:5c:
                    c4:fb:e6:a3:83:d3:43:d0:a6:47:f8:92:53:2a:ba:
                    1c:66:18:56:09:8b:95:f7:98:f3:e5:f4:ce:d4:87:
                    df:4c:67:8e:60:0b:33:08:8a:31:eb:99:76:e1:5d:
                    bd:3a:8b:b3:fe:8d:a6:1b:58:f4:fe:eb:df:25:ce:
                    a4:7f:0e:b6:66:f8:53:a7:b7:c2:85:55:bc:3e:11:
                    fe:bf:8e:26:25:6c:ff:46:42:bb:36:1d:8e:02:17:
                    e6:5d:90:95:13:92:94:a6:d5:6b:26:27:8f:e0:d9:
                    25:9c:59:d9:93:22:e5:d3:e4:b0:2b:0b:4c:71:c9:
                    38:d0:a6:ca:17:f7:7d:1e:23:62:29:a8:53:d0:04:
                    3f:df:86:38:26:81:29:e4:a1:d6:8b:e0:ee:db:50:
                    05:0d:36:94:8b:e3:42:45:1f:d0:26:72:7a:0d:06:
                    05:4e:8b:d5:6b:64:6c:64:40:d4:5d:fa:df:f5:d0:
                    fb:d3:ff:44:21:c6:f3:e7:ba:55:72:a2:0a:5c:f5:
                    d4:50:f6:6d:f6:8d:82:f5:db:64:b5:99:4e:6c:6c:
                    5d:c6:d6:e8:8a:5d:ce:a3:24:c7:4a:5f:40:7a:17:
                    6e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:98:E1:0C:A5:6C:5F:F5:0E:3E:A7:85:9D:30:CC:72:37:DA:0E:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/88cbc73f-6883-3a6b-bc7b-e7ba27c03176.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:61:52:99:88:38:b2:9a:bd:f3:77:ee:5e:3d:4f:5b:83:25:
         12:95:d9:20:a6:d9:3b:57:b1:45:80:08:51:17:69:30:67:5e:
         00:02:b5:a6:a0:7a:b2:f1:9a:be:f2:3c:26:69:5f:9b:1d:ee:
         2f:fd:a4:e0:3a:09:21:f2:78:4b:80:13:be:f7:06:2a:13:b6:
         b6:58:ff:df:85:11:d6:76:53:1c:60:51:ce:06:88:65:7e:11:
         ad:84:3f:f1:48:49:ff:8a:30:eb:b0:97:04:5a:a3:12:0f:f9:
         0e:33:ac:10:eb:af:f4:c2:47:d1:df:4f:99:18:a4:02:96:35:
         3d:32:0a:a3:3f:98:bc:e5:c6:89:61:42:36:af:a3:8b:18:98:
         2b:e8:d1:37:32:04:ae:60:b4:e4:bf:8c:60:4a:48:66:f1:6b:
         3c:85:ae:fd:3d:20:14:f8:ea:83:01:01:11:9c:f1:ba:4d:23:
         db:18:73:d7:6e:80:c2:a0:9b:33:1f:db:64:c6:5d:05:2e:94:
         80:51:e7:38:a3:48:3b:1d:9b:68:01:8b:2d:88:17:a9:2d:e9:
         3e:99:01:7f:db:a3:0b:34:20:69:d6:84:96:f1:c3:5e:48:61:
         85:36:fd:5c:10:dc:46:1c:8f:47:23:69:8a:57:19:6e:53:88:
         6e:29:ab:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:02:09 2024 by rpki-client on console-fra.rpki-client.org