Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8dbb6e35-0ee3-39df-9754-9c385cb6a62a.roa
File:                     8dbb6e35-0ee3-39df-9754-9c385cb6a62a.roa (raw, json)
Hash identifier:          kT8wmYGp+pLDBSKviJ/eeizsBBTM/izN2gfiss5gLVg=
Subject key identifier:   15:0B:DF:DC:69:CA:26:2C:95:9F:0F:DA:D9:33:BA:61:22:1B:8B:8B
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858478CB69FBD470C36B24FB0EF20
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8dbb6e35-0ee3-39df-9754-9c385cb6a62a.roa
Signing time:             Tue 15 Oct 2024 13:00:47 +0000
ROA not before:           Tue 15 Oct 2024 13:00:47 +0000
ROA not after:            Mon 13 Jan 2025 14:00:47 +0000
asID:                     397222
IP address blocks:        156.154.54.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:b6:9f:bd:47:0c:36:b2:4f:b0:ef:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Oct 15 13:00:47 2024 GMT
            Not After : Jan 13 14:00:47 2025 GMT
        Subject: CN=0fd2e7e2-3e18-4c87-8711-e6af3c48b969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:37:79:ae:2e:28:71:2e:d4:cb:ef:03:32:6d:
                    87:04:54:90:1a:1b:6c:96:eb:27:1f:7a:b3:15:ac:
                    50:4f:3c:12:a4:50:84:51:f8:d0:ae:43:a5:06:8f:
                    4d:c7:9e:ec:69:ca:ad:41:91:74:e2:fc:72:b1:7f:
                    88:a4:57:da:48:f5:d1:18:fb:b0:88:d5:f2:6a:33:
                    55:b6:5a:e6:5c:e0:db:ed:9e:b3:6f:3c:6f:3a:49:
                    d3:ca:6b:a2:b0:76:f1:7a:4e:2e:b6:eb:4f:6e:c5:
                    f0:d2:f1:9c:d2:bc:14:9a:88:83:17:d7:43:05:e3:
                    bd:fa:f5:82:5a:03:6c:6b:8e:d9:28:b6:fa:6b:13:
                    f0:66:dc:da:69:ad:45:1b:10:58:66:60:ce:8a:36:
                    f2:22:8b:cd:7e:40:bb:ae:70:a6:cf:98:e0:13:57:
                    5c:1a:29:7a:14:1a:ff:6b:0e:5c:66:74:bb:c9:44:
                    0b:9b:32:79:ca:c0:81:a0:7f:b5:03:24:0e:02:aa:
                    96:3f:dd:7c:cc:71:9f:42:73:de:4e:cb:49:2e:24:
                    42:82:a1:ec:72:b6:df:7e:a1:f0:05:4e:9b:bf:32:
                    7f:f0:2f:dd:4f:38:ab:c0:c7:c9:fb:b0:0b:a1:6d:
                    1b:27:67:21:7e:ad:19:62:40:17:fb:ff:e2:97:9e:
                    ee:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:0B:DF:DC:69:CA:26:2C:95:9F:0F:DA:D9:33:BA:61:22:1B:8B:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8dbb6e35-0ee3-39df-9754-9c385cb6a62a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:8a:7e:51:d7:dc:c0:1b:85:8f:78:28:c8:a2:ad:ad:ba:9d:
         57:91:c6:84:c9:99:22:3f:ff:62:50:37:26:5a:6f:42:00:e4:
         df:98:ea:2d:06:87:0d:aa:ba:f4:aa:87:df:54:41:1b:3e:f1:
         dc:a4:94:e6:c2:ae:61:69:0c:d4:e0:7b:a2:ca:bf:af:d3:73:
         e0:8c:d0:2a:51:4d:32:2c:b2:a7:39:73:75:10:cc:a1:08:53:
         ed:d1:74:6b:ee:d9:eb:b8:42:49:1b:cb:27:b7:a2:a0:c4:05:
         a3:4a:45:b9:0a:90:dd:4b:f1:34:96:7c:be:fc:7c:7a:ae:2f:
         dd:dc:74:3e:8f:fb:10:a6:34:40:ce:38:17:14:b7:08:58:62:
         95:28:f7:5d:3a:ca:f9:78:3a:d2:b4:cf:55:b1:d4:b1:2d:e9:
         c6:dc:dd:69:29:3a:b1:fe:81:ac:8d:14:4d:e4:93:30:14:3d:
         22:93:d6:8d:39:50:33:88:30:c1:5a:84:16:ca:7b:a7:2a:29:
         c5:b2:ca:ee:11:a9:bf:ca:96:e8:3d:d0:d9:13:df:99:c7:ad:
         5e:5f:9b:18:08:ec:9b:44:5a:8a:0a:d0:0d:a4:68:1b:65:3b:
         eb:6c:cb:07:24:f6:6a:ee:9b:e6:09:f3:8d:f0:f9:95:1a:62:
         9f:1a:3f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:06:49 2024 by rpki-client on console-ams.rpki-client.org