Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9c6eb54b-0d4d-39b3-8e99-a362500f6fbe.roa
File:                     9c6eb54b-0d4d-39b3-8e99-a362500f6fbe.roa (raw, json)
Hash identifier:          mJNM7aRyo1dmwBe9rATYUWZuzh2cTUrmjjSW2bPw9nE=
Subject key identifier:   93:3A:9B:08:36:3D:7C:39:89:E5:A0:FD:22:02:B9:4A:4D:E5:2C:7F
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285844FE2AAF6D96D0C2806BD5D440
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9c6eb54b-0d4d-39b3-8e99-a362500f6fbe.roa
Signing time:             Sat 24 Feb 2024 02:00:26 +0000
ROA not before:           Sat 24 Feb 2024 02:00:26 +0000
ROA not after:            Fri 24 May 2024 01:00:26 +0000
asID:                     397219
IP address blocks:        156.154.71.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fe:2a:af:6d:96:d0:c2:80:6b:d5:d4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Feb 24 02:00:26 2024 GMT
            Not After : May 24 01:00:26 2024 GMT
        Subject: CN=f8488bc0-fdc7-4257-ac71-3dda2d4a48ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5f:7e:9c:d9:f5:eb:93:5e:a0:6e:5c:62:0c:
                    ec:a6:28:94:c4:3d:2b:64:d2:44:7b:ba:c1:8d:ec:
                    62:20:2a:20:75:79:e6:49:c2:21:f0:4c:8e:cf:c1:
                    f5:85:61:62:43:f7:28:f8:a2:e1:04:31:c9:5f:e9:
                    af:58:2a:f9:ff:36:2d:8a:42:6c:ef:f0:59:1c:37:
                    cf:1f:70:e7:68:18:31:95:bb:c5:e2:02:9e:4b:fe:
                    02:aa:a2:01:14:e1:64:82:8e:91:27:60:d2:a3:cb:
                    cf:15:d9:dc:49:5f:19:17:9e:5b:f7:58:83:10:de:
                    39:ef:bf:0b:43:3c:63:fa:32:c3:31:6d:17:c1:84:
                    dc:ef:1f:9b:ff:d3:dd:d7:c7:44:29:e1:8d:c6:4d:
                    6f:25:44:91:1f:6c:00:d8:87:cb:ae:56:25:81:ae:
                    64:34:8f:42:3e:ee:97:06:58:9c:24:8a:ff:93:fa:
                    15:46:e8:49:ee:6e:bc:f6:28:dc:66:dc:93:3e:8b:
                    20:aa:de:7f:22:e7:11:ed:aa:a4:23:db:4f:fb:be:
                    64:a5:ed:f2:1c:4d:43:9b:cc:b9:8c:19:a8:8e:2d:
                    fe:33:4c:88:0e:b3:dd:46:32:7d:42:83:50:c5:e0:
                    40:77:26:78:ad:3c:b1:c6:09:54:e7:e2:23:2c:df:
                    29:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:3A:9B:08:36:3D:7C:39:89:E5:A0:FD:22:02:B9:4A:4D:E5:2C:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9c6eb54b-0d4d-39b3-8e99-a362500f6fbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:14:99:fb:44:99:c7:2f:00:20:b8:08:f7:32:2a:60:f2:09:
         97:b9:79:fe:78:bf:70:9e:bb:af:9f:3f:12:71:d5:d8:95:82:
         10:64:f9:dc:77:f9:58:63:c1:f2:68:b7:e7:e0:c2:1b:2a:92:
         20:a9:ea:72:83:37:f5:2d:b9:58:b0:a6:91:47:4c:25:7f:9e:
         6c:9f:4c:e2:39:ec:50:70:1c:dc:8a:80:79:d0:80:fc:81:af:
         3e:63:9f:0f:71:d2:31:0c:aa:e0:1e:72:b1:90:b2:fa:3c:67:
         17:99:70:3d:e2:bc:64:8e:4e:07:cf:76:42:4f:25:ea:c5:c0:
         dd:56:66:54:9b:86:4b:9f:0b:f2:76:2f:fc:68:5c:13:95:cd:
         57:e0:19:aa:23:bf:8b:0b:df:fb:b6:eb:fe:f2:a2:bc:4f:27:
         d0:f7:d7:b8:17:e0:f0:8d:70:b2:15:f7:46:e5:d9:57:73:8b:
         34:b5:0d:62:c1:7a:ee:d5:18:c7:9b:a5:13:83:89:08:13:be:
         7f:8e:a4:c4:58:9f:9f:88:6d:9d:de:b5:8c:33:ab:0b:48:72:
         d9:8a:df:18:d3:de:3a:80:d6:7d:67:0b:21:a7:ca:ce:56:1b:
         a6:4e:86:46:3f:bb:52:a0:77:db:bf:31:8b:c7:04:f2:38:b5:
         64:1e:3d:81
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWET+Kq9tltDCgGvV1EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI0MDIyNDAyMDAyNloXDTI0MDUyNDAxMDAyNlowLzEtMCsGA1UEAxMk
Zjg0ODhiYzAtZmRjNy00MjU3LWFjNzEtM2RkYTJkNGE0OGVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo19+nNn165NeoG5cYgzspiiUxD0rZNJEe7rB
jexiICogdXnmScIh8EyOz8H1hWFiQ/co+KLhBDHJX+mvWCr5/zYtikJs7/BZHDfP
H3DnaBgxlbvF4gKeS/4CqqIBFOFkgo6RJ2DSo8vPFdncSV8ZF55b91iDEN45778L
Qzxj+jLDMW0XwYTc7x+b/9Pd18dEKeGNxk1vJUSRH2wA2IfLrlYlga5kNI9CPu6X
BlicJIr/k/oVRuhJ7m689ijcZtyTPosgqt5/IucR7aqkI9tP+75kpe3yHE1Dm8y5
jBmoji3+M0yIDrPdRjJ9QoNQxeBAdyZ4rTyxxglU5+IjLN8pyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJM6mwg2PXw5ieWg/SICuUpN5Sx/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOWM2ZWI1NGItMGQ0ZC0z
OWIzLThlOTktYTM2MjUwMGY2ZmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGoUmftEmccvACC4CPcyKmDyCZe5ef54v3Ceu6+fPxJx1diVghBk+dx3
+VhjwfJot+fgwhsqkiCp6nKDN/UtuViwppFHTCV/nmyfTOI57FBwHNyKgHnQgPyB
rz5jnw9x0jEMquAecrGQsvo8ZxeZcD3ivGSOTgfPdkJPJerFwN1WZlSbhkufC/J2
L/xoXBOVzVfgGaojv4sL3/u26/7yorxPJ9D317gX4PCNcLIV90bl2VdzizS1DWLB
eu7VGMebpRODiQgTvn+OpMRYn5+IbZ3etYwzqwtIctmK3xjT3jqA1n1nCyGnys5W
G6ZOhkY/u1Kgd9u/MYvHBPI4tWQePYE=
-----END CERTIFICATE-----
Generated at Sun May 5 18:35:53 2024 by rpki-client on console-fra.rpki-client.org