Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a5c11e26-e9be-37a3-8194-b9c9bd2150f1.roa
File:                     a5c11e26-e9be-37a3-8194-b9c9bd2150f1.roa (raw, json)
Hash identifier:          UsvPcqYfSokP9miNE8/Vwpmd7ZblB4GxlnWYFHOH7q8=
Subject key identifier:   C1:E4:31:B1:BA:40:7C:85:AF:94:15:29:7E:CB:F1:3D:78:CC:AF:AA
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847DDCA2AB0062EF18BB6A3C180
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a5c11e26-e9be-37a3-8194-b9c9bd2150f1.roa
Signing time:             Wed 13 Nov 2024 14:00:39 +0000
ROA not before:           Wed 13 Nov 2024 14:00:39 +0000
ROA not after:            Tue 11 Feb 2025 14:00:39 +0000
asID:                     397241
IP address blocks:        156.154.66.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dd:ca:2a:b0:06:2e:f1:8b:b6:a3:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Nov 13 14:00:39 2024 GMT
            Not After : Feb 11 14:00:39 2025 GMT
        Subject: CN=5fddd7a1-620a-4384-9f73-df6277e2c97d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ab:82:ae:81:22:52:73:42:8a:2f:4d:9f:67:
                    21:30:88:90:73:1f:86:e2:7e:74:10:db:fb:7d:eb:
                    6d:15:0b:e7:50:e2:35:6d:a1:54:b8:20:c2:f3:94:
                    34:67:7f:a8:08:70:c8:fc:e8:77:1a:10:71:c1:48:
                    67:73:37:32:98:01:84:66:41:75:37:83:bd:11:91:
                    3f:a7:1c:d5:06:90:0e:88:cf:16:49:73:d9:4c:ad:
                    c6:58:5e:c1:56:3b:ec:79:f8:54:1b:e2:14:0b:b4:
                    9e:04:d7:e0:71:85:ca:a5:90:3f:e0:d6:9e:a7:1d:
                    4d:93:cc:25:fa:84:75:36:a9:99:96:21:21:a4:df:
                    3d:9d:3f:ee:9c:48:27:c0:01:ac:57:16:83:3f:fa:
                    6a:4c:c7:6c:d1:02:5a:f9:24:d6:05:9b:a8:84:95:
                    a0:27:0d:aa:c5:2c:b2:c1:fa:9d:1b:cc:3a:f8:36:
                    0a:ef:ee:f1:9c:3a:b9:b3:a3:dc:e1:fe:22:60:9c:
                    37:98:e9:07:e4:91:cc:c4:a3:4f:b3:c2:66:5d:ab:
                    2b:a0:ce:97:b3:11:2b:d8:f6:cb:7f:be:94:43:6c:
                    06:42:08:25:db:c8:4d:8b:42:d1:e4:e5:a4:84:59:
                    58:b7:41:ce:61:40:f8:99:c6:1f:9b:61:1b:4b:fa:
                    55:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:E4:31:B1:BA:40:7C:85:AF:94:15:29:7E:CB:F1:3D:78:CC:AF:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a5c11e26-e9be-37a3-8194-b9c9bd2150f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:09:ba:f2:5f:44:18:e3:e4:c6:47:13:90:48:c8:21:fd:61:
         0f:7f:22:be:e0:f1:de:2c:a8:ca:0b:79:52:ec:bb:fc:b1:d2:
         76:ae:17:a5:10:ac:b3:28:a1:6b:aa:f0:21:04:56:7f:d1:88:
         98:94:65:be:d5:e3:d0:7b:29:f5:1b:ca:38:0b:9e:2e:f4:10:
         f0:b7:68:94:fa:84:45:36:ed:d1:d9:d9:0d:63:34:b5:d7:50:
         7e:98:9a:a7:97:2f:61:d4:77:39:09:50:b4:e8:83:54:58:f1:
         b0:fa:6f:39:72:53:12:6e:fb:b5:bc:84:c2:46:e6:e4:05:e6:
         fe:92:4c:2f:12:1c:05:8a:8e:85:38:99:e0:f2:fd:2b:86:49:
         a0:ab:52:3c:8d:d3:96:1c:56:b4:f6:34:ce:dd:fc:ac:f7:4c:
         41:e8:17:ae:73:59:8f:ef:71:60:c8:01:1c:50:46:cd:49:3c:
         a7:1d:03:7a:11:b5:95:70:85:7f:0b:32:25:ec:2b:14:9b:e4:
         92:05:e3:8f:a5:ea:a2:1a:57:78:45:7f:03:4b:2d:9a:ea:98:
         ad:3c:75:bf:eb:93:56:ce:7e:1a:cd:e2:59:d8:07:eb:a3:a6:
         8e:50:f6:2f:e3:22:4d:41:58:51:85:f9:84:5f:f2:5e:d2:1c:
         29:af:9d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:06:50 2024 by rpki-client on console-ams.rpki-client.org