Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a7887988-ec65-3227-9390-adb5ae6af15a.roa
File:                     a7887988-ec65-3227-9390-adb5ae6af15a.roa (raw, json)
Hash identifier:          ADKNqxa0oWJ4fO7gfFGsbSQtvxPKc3gZoVJ1T+fZySE=
Subject key identifier:   5B:05:07:C4:38:56:B1:16:E4:FB:B0:F8:4F:66:AF:72:D0:19:A2:B9
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285844FE2AC93BA72E279604F78380
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a7887988-ec65-3227-9390-adb5ae6af15a.roa
Signing time:             Sat 24 Feb 2024 02:00:26 +0000
ROA not before:           Sat 24 Feb 2024 02:00:26 +0000
ROA not after:            Fri 24 May 2024 01:00:26 +0000
asID:                     397236
IP address blocks:        156.154.105.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fe:2a:c9:3b:a7:2e:27:96:04:f7:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Feb 24 02:00:26 2024 GMT
            Not After : May 24 01:00:26 2024 GMT
        Subject: CN=5a99a51e-d407-499a-9959-ad747c86b8e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9a:c9:2c:5d:f7:bd:48:4b:84:10:29:8f:c7:
                    8f:c9:5d:b6:df:4a:7c:29:ac:e2:cc:cf:de:45:da:
                    d8:62:ec:d3:fe:f3:17:59:91:04:bf:d7:91:2a:8b:
                    fd:1b:51:6c:ec:52:c7:9f:41:8e:3f:c7:89:75:bd:
                    37:3e:7b:7d:b5:f5:d3:1c:49:d4:3e:1f:6b:f9:3a:
                    a6:4c:7e:a0:5f:de:03:4a:17:39:b0:74:8b:7a:36:
                    d3:0b:1c:f7:0a:10:2f:50:2b:1b:91:83:62:c2:62:
                    19:7e:2d:39:43:e2:df:e1:56:be:ba:e2:68:54:f6:
                    0e:15:5c:e1:61:6a:c8:c7:53:91:11:2c:e0:98:c1:
                    8a:53:cb:43:3c:14:da:08:86:ac:76:f9:9f:f0:35:
                    3a:ae:4b:a1:9a:96:4b:aa:d5:55:03:b6:03:ee:44:
                    41:77:5b:91:82:17:8d:41:13:87:19:98:76:90:be:
                    d8:6e:78:b8:1a:a2:26:05:db:44:57:34:5a:b8:b2:
                    6f:ed:96:d2:2e:a5:e2:7d:3b:dd:1a:46:c0:05:dc:
                    a7:32:95:0b:57:e4:e1:ee:20:c9:85:e9:4d:cc:f4:
                    f8:21:65:0e:98:51:db:13:cf:24:2b:b4:0f:4c:a9:
                    a1:fe:87:bc:6f:28:29:89:f8:f8:35:8e:1d:4b:0e:
                    f5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:05:07:C4:38:56:B1:16:E4:FB:B0:F8:4F:66:AF:72:D0:19:A2:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a7887988-ec65-3227-9390-adb5ae6af15a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:22:3d:53:4e:8d:28:fc:88:a6:55:be:f4:dd:42:a5:cd:bc:
         4b:17:de:b5:0e:40:0b:3d:35:9a:4b:17:1c:ff:da:b0:42:5b:
         2b:d6:88:e2:af:ad:f2:48:0c:d9:dd:85:04:4b:b9:19:ed:3f:
         cc:8a:56:81:37:a7:53:02:6f:69:3a:06:6b:e1:55:f0:0e:98:
         99:fd:e8:6f:1c:8d:9f:c8:4b:64:a8:29:5e:76:5c:ab:b5:d7:
         39:68:3c:91:9b:66:fe:53:00:e1:7f:24:22:9d:5c:68:53:43:
         c9:02:96:99:5d:a3:3d:01:18:23:07:f2:05:cf:c4:5a:34:e6:
         e2:3f:bb:d0:72:3e:df:7e:db:5b:72:a7:71:b5:d4:41:87:a6:
         83:ef:ee:12:99:9e:26:77:d8:24:cf:28:b9:96:60:78:70:6b:
         68:99:c7:87:4e:d1:17:e9:51:ba:50:3d:39:57:50:a4:00:1f:
         8a:29:ea:44:3d:ac:85:cc:87:82:07:23:e1:85:e5:b6:54:ec:
         f8:eb:62:c9:30:fc:ef:1d:40:fa:15:46:74:de:69:44:b0:b5:
         03:53:57:a9:ee:e1:37:7c:70:08:6a:15:49:36:4f:7b:87:00:
         ae:2d:82:51:b5:88:99:39:4b:b8:61:7d:ca:c5:2c:68:ee:ee:
         9f:e9:0c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:26:44 2024 by rpki-client on console-ams.rpki-client.org