Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/975f059f-f02c-3bd6-b658-c2ae83d218e2.roa
File:                     975f059f-f02c-3bd6-b658-c2ae83d218e2.roa (raw, json)
Hash identifier:          vA6iOSHpZRV+QKm4zxwGEXz68wjPAPG4lUPt1VV85DM=
Subject key identifier:   DC:ED:1F:C7:1C:5A:8A:69:6C:35:5A:3C:0F:7D:29:E4:81:6D:BA:6D
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847527CA8D1B33C8ED095AF2680
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/975f059f-f02c-3bd6-b658-c2ae83d218e2.roa
Signing time:             Tue 24 Sep 2024 16:27:24 +0000
ROA not before:           Tue 24 Sep 2024 16:27:24 +0000
ROA not after:            Mon 23 Dec 2024 17:27:24 +0000
asID:                     397224
IP address blocks:        156.154.110.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:52:7c:a8:d1:b3:3c:8e:d0:95:af:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 24 16:27:24 2024 GMT
            Not After : Dec 23 17:27:24 2024 GMT
        Subject: CN=0f0dd686-2077-4b45-8f7e-d76c211d8901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:be:28:2f:71:34:c2:2d:a2:b1:d4:55:fd:cf:
                    5f:43:05:4d:5d:40:33:20:97:08:cd:87:e7:d7:90:
                    47:a5:1a:f8:61:ad:e2:f0:84:44:d3:0d:7b:4a:1e:
                    a0:4e:b3:11:b0:77:3a:6b:6f:5e:0a:d7:ef:9c:e6:
                    f0:51:0a:e2:70:05:01:94:8d:ef:23:9a:6b:1d:3a:
                    90:be:ac:3b:10:82:af:82:86:31:13:88:f0:bf:36:
                    47:71:55:69:d7:99:2a:f4:94:2c:cd:39:d1:14:33:
                    99:8f:55:24:8c:ee:37:de:5b:31:0e:1c:31:a3:65:
                    36:be:1d:08:bf:b1:52:4a:a8:84:47:c4:e5:6c:38:
                    e9:45:61:17:e9:ef:4d:19:bb:5a:ee:be:4f:c0:6f:
                    d3:85:aa:7c:0b:cb:a0:8e:f4:82:6c:14:81:04:f8:
                    4f:04:7f:36:d5:80:91:13:0a:b7:69:17:8a:49:60:
                    56:50:c6:58:e1:91:5d:3c:5c:33:b2:67:d6:21:d8:
                    15:77:b6:21:05:32:6a:90:33:8a:d3:52:7e:6f:51:
                    37:2a:05:37:ce:d3:0e:e1:d7:94:d6:8d:ba:13:a3:
                    25:9e:f8:5b:ed:ae:ef:d3:9f:81:9b:c4:e8:5d:22:
                    32:6e:27:05:4c:72:6b:c0:a9:09:9e:fd:b4:1b:fe:
                    35:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:ED:1F:C7:1C:5A:8A:69:6C:35:5A:3C:0F:7D:29:E4:81:6D:BA:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/975f059f-f02c-3bd6-b658-c2ae83d218e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:07:32:ab:3e:fc:59:58:ff:8e:58:8b:88:d8:0a:0a:5e:2e:
         1f:f4:7a:b3:a1:ad:50:bf:5c:95:80:87:b1:7e:f8:78:bf:8b:
         dc:74:7f:d8:7d:56:64:52:0f:7e:33:31:67:33:e1:d5:00:d7:
         e1:d6:5e:af:68:2c:c2:14:a2:eb:4c:cb:c1:b8:8e:c6:a9:50:
         f9:26:89:db:a1:43:80:02:59:6b:7f:ad:fd:f6:23:6a:24:b1:
         7b:b3:9d:29:1d:54:86:db:8c:e7:61:03:67:c2:e1:90:e5:ac:
         3b:3e:c6:ed:10:05:17:c6:d8:40:24:13:3b:53:dc:27:60:32:
         fb:c4:5f:4f:d6:77:91:e7:94:20:ee:6f:b9:d6:0e:23:41:69:
         17:1a:71:1a:23:89:75:69:39:bb:52:20:5d:3c:67:0a:37:35:
         05:d7:72:97:43:34:bf:1a:47:61:0f:2c:d6:f8:86:95:2e:cd:
         1c:22:f1:94:db:65:58:87:e6:be:6e:a8:29:96:d2:58:f0:e2:
         17:f6:a8:55:01:c6:a8:b6:0f:14:a4:4e:72:08:89:17:dd:da:
         c0:67:a3:be:b3:3b:65:df:7f:25:42:e0:f3:7d:77:8a:a4:b6:
         95:fc:c6:43:97:84:3f:18:fb:4b:04:80:39:3e:99:96:87:7c:
         1e:40:a3:27
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdSfKjRszyO0JWvJoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI0MDkyNDE2MjcyNFoXDTI0MTIyMzE3MjcyNFowLzEtMCsGA1UEAxMk
MGYwZGQ2ODYtMjA3Ny00YjQ1LThmN2UtZDc2YzIxMWQ4OTAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzL4oL3E0wi2isdRV/c9fQwVNXUAzIJcIzYfn
15BHpRr4Ya3i8IRE0w17Sh6gTrMRsHc6a29eCtfvnObwUQricAUBlI3vI5prHTqQ
vqw7EIKvgoYxE4jwvzZHcVVp15kq9JQszTnRFDOZj1UkjO433lsxDhwxo2U2vh0I
v7FSSqiER8TlbDjpRWEX6e9NGbta7r5PwG/Thap8C8ugjvSCbBSBBPhPBH821YCR
Ewq3aReKSWBWUMZY4ZFdPFwzsmfWIdgVd7YhBTJqkDOK01J+b1E3KgU3ztMO4deU
1o26E6Mlnvhb7a7v05+Bm8ToXSIybicFTHJrwKkJnv20G/411wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNztH8ccWoppbDVaPA99KeSBbbptMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOTc1ZjA1OWYtZjAyYy0z
YmQ2LWI2NTgtYzJhZTgzZDIxOGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH4HMqs+/FlY/45Yi4jYCgpeLh/0erOhrVC/XJWAh7F++Hi/i9x0f9h9
VmRSD34zMWcz4dUA1+HWXq9oLMIUoutMy8G4jsapUPkmiduhQ4ACWWt/rf32I2ok
sXuznSkdVIbbjOdhA2fC4ZDlrDs+xu0QBRfG2EAkEztT3CdgMvvEX0/Wd5HnlCDu
b7nWDiNBaRcacRojiXVpObtSIF08Zwo3NQXXcpdDNL8aR2EPLNb4hpUuzRwi8ZTb
ZViH5r5uqCmW0ljw4hf2qFUBxqi2DxSkTnIIiRfd2sBno76zO2XffyVC4PN9d4qk
tpX8xkOXhD8Y+0sEgDk+mZaHfB5Aoyc=
-----END CERTIFICATE-----
Generated at Mon Nov 25 16:31:01 2024 by rpki-client on console-ams.rpki-client.org