Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a48f78a0-9a9a-3aa2-a837-bac842e6e25b.roa
File:                     a48f78a0-9a9a-3aa2-a837-bac842e6e25b.roa (raw, json)
Hash identifier:          ZS+5Mvdw34BZO14xbmMhRcf2voo3Mjt7YCg3XZgWLvA=
Subject key identifier:   25:AB:2C:64:5D:04:4E:15:1D:AA:76:23:A3:7E:55:E3:1A:CE:45:79
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847DDCA184E0C326A799F36FD80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a48f78a0-9a9a-3aa2-a837-bac842e6e25b.roa
Signing time:             Wed 13 Nov 2024 14:00:39 +0000
ROA not before:           Wed 13 Nov 2024 14:00:39 +0000
ROA not after:            Tue 11 Feb 2025 14:00:39 +0000
asID:                     397236
IP address blocks:        156.154.154.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dd:ca:18:4e:0c:32:6a:79:9f:36:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Nov 13 14:00:39 2024 GMT
            Not After : Feb 11 14:00:39 2025 GMT
        Subject: CN=f5304aba-15d7-4d49-8a38-636a0907c112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ac:25:a1:a7:f1:97:33:29:25:0b:ce:28:29:
                    ed:00:69:cf:dd:03:7a:88:d4:6b:5c:b9:e5:85:87:
                    29:6c:a8:ff:5d:7e:b3:41:ca:ba:92:1d:ab:1c:3c:
                    a4:f1:23:cc:c6:49:2f:3f:66:a0:f0:cb:da:5d:13:
                    fd:ee:4e:04:83:7d:ce:42:ae:9e:4f:4e:b9:91:e7:
                    10:ee:1d:36:0d:7d:21:96:cf:aa:17:c2:d4:7a:49:
                    26:53:ee:68:bf:85:e8:80:3c:07:3a:aa:2d:52:e1:
                    35:3e:2a:c6:d2:f7:6b:02:ca:79:84:0a:57:92:0e:
                    1f:da:31:03:87:5f:6a:9e:0d:b5:d6:cc:3d:4d:68:
                    d1:b8:71:ce:80:cd:dd:6d:84:48:14:53:c1:e1:9d:
                    07:6a:22:30:75:d7:7c:e8:c8:bf:f7:df:1c:33:e3:
                    26:70:d7:ef:a5:88:ae:19:3c:af:82:62:21:93:51:
                    e7:67:bb:14:35:5f:ac:5b:0b:2c:a4:71:fd:58:b9:
                    70:b5:e2:11:7e:70:74:0f:c3:ab:03:1c:1c:5f:07:
                    8a:f7:0c:2e:1d:26:30:4f:8e:ff:2d:3f:2d:c0:63:
                    37:de:0c:3a:a8:40:cb:0f:b1:ba:d3:d8:10:89:cb:
                    c8:8a:d5:a8:58:9b:37:9f:7d:6e:97:2e:27:8a:4d:
                    a0:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:AB:2C:64:5D:04:4E:15:1D:AA:76:23:A3:7E:55:E3:1A:CE:45:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a48f78a0-9a9a-3aa2-a837-bac842e6e25b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:ea:44:fd:96:98:f3:39:05:f6:b2:6a:6b:a7:7d:95:32:8f:
         48:97:59:33:cc:67:4a:be:f8:8e:74:f8:9b:b2:d9:ff:15:21:
         aa:32:bd:07:8c:3f:31:0a:87:bb:a6:04:57:f0:ea:a9:12:6a:
         34:82:f5:c2:12:ed:a0:8d:60:08:b4:d1:8a:fd:d8:e9:68:df:
         af:bb:3d:9d:c5:44:3f:1e:96:a9:fa:41:d5:eb:47:63:f4:cc:
         5d:6b:26:51:58:f1:ca:2b:cb:ec:b1:f6:d9:42:43:4c:bf:f5:
         78:dc:30:1c:9b:8f:99:82:ed:8d:1f:85:64:3b:a2:bd:72:df:
         ed:00:2c:62:2c:8c:0f:ab:3b:44:42:7c:8b:de:33:df:35:29:
         33:d8:4c:8a:d4:85:a2:b2:73:64:46:e1:35:96:ae:c4:dc:e2:
         8c:d1:60:96:50:39:27:38:9a:25:80:f5:d6:ed:c8:05:50:b9:
         34:bd:38:de:b5:f1:35:42:16:f1:83:0a:4a:79:6a:95:9a:76:
         07:48:ae:3a:92:33:e6:78:90:18:88:cb:30:d2:09:9a:9d:75:
         04:f3:03:7b:e1:08:3a:86:b3:9d:09:65:07:37:1a:46:8f:20:
         26:1f:f5:95:a9:c0:bb:5c:c7:f7:45:55:b5:d5:64:a4:7b:c7:
         16:38:90:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:02:12 2024 by rpki-client on console-fra.rpki-client.org