Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a34a98f8-54a2-385f-9791-a327e24184a7.roa
File:                     a34a98f8-54a2-385f-9791-a327e24184a7.roa (raw, json)
Hash identifier:          Azkaq31TZvHC8k9x6H6I9Wx9OBs//MoDTJXEuIZ23nU=
Subject key identifier:   3E:71:F0:0D:2E:AC:E2:1D:25:C3:F8:61:B2:93:81:EC:C7:13:81:D5
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858479D76D386A7E2DC08CFBAAE20
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a34a98f8-54a2-385f-9791-a327e24184a7.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     397214
IP address blocks:        156.154.71.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:d3:86:a7:e2:dc:08:cf:ba:ae:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=8e64c742-45ef-4606-9283-cb2c91fd6a15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:1f:b4:ec:21:bd:80:a5:1b:6b:50:e0:c2:3a:
                    e0:6e:47:25:13:74:f0:f1:12:83:8e:08:b3:94:82:
                    95:ba:5b:3b:0a:01:4f:94:6e:5e:ff:63:54:39:32:
                    d1:5d:99:52:5a:37:06:11:98:41:99:99:c0:d3:86:
                    38:0d:7a:d0:b9:0f:0a:44:fd:fe:8f:ea:f8:6e:96:
                    8e:f1:1f:33:8e:6c:b7:73:1c:1f:5d:a6:c6:d0:64:
                    75:23:ae:7c:da:6f:0f:cc:e3:b5:92:1c:3f:e1:22:
                    7e:39:93:91:62:bd:a0:b7:43:7c:5f:98:0b:e3:bd:
                    5c:c9:80:35:8a:78:c5:a5:35:77:70:72:a9:7a:ec:
                    c6:34:1b:16:dd:a8:5d:1a:12:52:42:d2:eb:7a:0e:
                    b5:88:1f:26:36:9e:ac:df:87:88:60:6e:e8:3c:06:
                    41:5d:c4:73:66:ae:21:00:11:15:0c:c6:f8:f6:9d:
                    dd:9e:c4:df:48:cd:7c:55:2e:bf:ed:64:79:c5:59:
                    82:cd:35:bd:ca:65:80:4f:02:e0:d6:b9:0f:b4:31:
                    df:c9:ae:46:38:b9:b3:49:d4:bb:c9:57:e3:79:7c:
                    bb:e1:cc:b2:3a:8d:bc:df:14:c4:ff:7c:b5:0a:c6:
                    3b:e5:68:30:bf:eb:e1:43:fc:63:3f:26:33:b9:4d:
                    6f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:71:F0:0D:2E:AC:E2:1D:25:C3:F8:61:B2:93:81:EC:C7:13:81:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a34a98f8-54a2-385f-9791-a327e24184a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:75:34:71:fb:f7:7f:91:be:28:e0:04:16:86:a3:e5:7b:91:
         76:22:f8:c1:8d:7f:54:12:07:d6:ae:19:2d:86:f1:f4:57:01:
         58:36:20:30:53:39:fb:c7:09:f7:8c:9d:29:1e:eb:af:fe:1e:
         84:b6:10:31:04:ad:e8:20:00:fd:c5:9f:21:43:89:a5:ca:02:
         bc:b4:c6:f4:e7:cc:fc:df:26:00:7c:71:68:bf:5c:6e:e5:0d:
         be:06:11:c4:8b:c1:20:5f:b1:4f:94:36:87:af:57:81:be:bf:
         67:4e:17:9a:ad:70:0a:dc:b6:2c:a0:b1:61:3f:8b:b3:bd:eb:
         d3:c5:ba:e2:1d:30:9a:e6:0f:c5:05:d2:89:6c:bc:94:f1:04:
         37:b4:5f:ae:a2:72:3d:56:a8:0a:3c:80:cc:bb:12:e9:bd:38:
         20:a3:18:92:6c:e7:0a:a9:92:40:1c:43:34:c7:46:d0:a4:dc:
         17:0c:77:98:ff:8b:bd:a6:45:2d:bf:0a:5e:90:12:b4:ac:cf:
         8c:78:7e:6c:5c:27:f8:ef:c4:cc:af:85:13:95:e9:ec:2a:a6:
         a2:f8:68:fd:5a:51:a1:4f:2d:6a:5c:51:c4:4d:65:6e:78:a2:
         28:f7:bc:62:cc:ac:39:e0:74:44:90:82:a3:0d:86:5f:4d:6c:
         de:3f:93:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:05:38 2024 by rpki-client on console-fra.rpki-client.org