Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/89cf8cbf-1b3f-3423-817f-650f2f2ad124.roa
File:                     89cf8cbf-1b3f-3423-817f-650f2f2ad124.roa (raw, json)
Hash identifier:          a/en8qRFYyVjzEp6daK9vV4a3/bhnqXLZHB1xXezsH0=
Subject key identifier:   44:0D:39:FD:2F:05:F0:4B:37:28:CE:AA:E6:E2:3D:91:E3:96:FF:CB
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858479D76E0D5405C17FE571DB080
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/89cf8cbf-1b3f-3423-817f-650f2f2ad124.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     397223
IP address blocks:        156.154.101.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:e0:d5:40:5c:17:fe:57:1d:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=c9b5d4fb-2232-4140-915a-60a4133a510f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0a:f9:6c:0a:ee:8d:0f:b2:9f:f9:27:e2:56:
                    25:94:0d:06:2b:21:97:b0:6d:2b:8b:9f:b9:69:f8:
                    30:18:b2:87:8f:bc:c7:70:ac:d5:9a:24:f5:19:01:
                    74:a7:d7:fb:ca:4d:2e:f1:df:a4:3e:15:ab:07:5e:
                    30:47:90:28:34:55:59:91:35:33:0e:60:02:69:a8:
                    26:3c:6d:55:dd:ec:ab:e8:ca:a0:1c:e1:84:29:c1:
                    38:1e:dd:b1:b8:da:a1:10:00:ef:2b:7c:55:9f:f6:
                    91:ac:67:cc:b1:a6:98:94:d0:a6:a7:1e:be:d1:f4:
                    9f:34:27:d4:b3:6b:eb:5d:2c:11:de:bd:03:67:84:
                    73:9f:a9:ce:c3:f8:31:f6:73:06:3e:bb:18:21:5b:
                    ea:ca:ef:f8:d4:1d:6b:c0:e7:3f:66:5e:72:17:87:
                    4b:e6:79:86:ea:8e:5f:aa:62:c7:0e:a8:21:ad:3f:
                    b0:fa:3d:74:0a:70:81:6e:27:d2:57:77:d3:18:25:
                    7e:16:99:bf:94:dd:54:13:fa:ce:9e:10:f2:c4:ac:
                    1d:25:1a:d0:63:eb:9d:d7:20:cb:7b:62:a0:00:ae:
                    9c:ab:83:f9:65:ac:1a:b5:24:03:ef:bf:43:e7:3b:
                    dd:bc:c6:1a:af:7a:20:18:65:fb:5a:1f:49:00:b7:
                    c2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:0D:39:FD:2F:05:F0:4B:37:28:CE:AA:E6:E2:3D:91:E3:96:FF:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/89cf8cbf-1b3f-3423-817f-650f2f2ad124.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:72:5b:98:c3:4f:3f:33:47:bc:c0:cc:7f:58:11:15:88:c6:
         c9:63:dc:28:cf:32:c5:42:81:db:c2:53:32:3c:14:d7:12:9e:
         2e:f8:58:5b:3f:0b:40:0b:95:e7:55:9a:f6:1d:07:fd:c8:4a:
         25:07:8e:d2:f7:a8:fe:65:c2:f7:51:00:9b:66:d9:a6:2d:52:
         74:ac:92:2f:c2:e2:c6:b2:51:10:a0:8b:5a:aa:df:53:50:44:
         6e:4f:83:c8:2e:ff:e3:87:65:3f:49:e0:a6:7e:7b:12:9b:bb:
         fb:bc:33:ac:1e:d4:35:74:98:13:30:1b:87:7a:6a:8c:2d:98:
         61:7d:6a:39:40:cd:7e:35:d6:2a:34:60:03:67:83:71:ef:93:
         71:3c:77:f0:fc:bf:05:72:d6:cb:fe:a5:72:36:6b:6e:27:fe:
         94:81:c3:54:0e:09:9e:19:d1:32:73:43:41:82:19:5c:ae:3a:
         d7:89:5e:7d:d9:cd:80:4a:83:4e:4e:30:9b:bf:5a:56:d5:44:
         7f:1d:07:e6:d9:d4:b4:47:53:4b:5c:a0:0c:96:08:c6:a8:e4:
         78:1f:7a:0e:2c:46:d3:62:cc:4a:34:d9:0c:9e:be:08:8c:fd:
         dc:dc:de:23:57:81:4f:1f:29:6a:3e:a2:a1:2b:0f:c9:e7:c3:
         35:73:dc:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:31:00 2024 by rpki-client on console-ams.rpki-client.org