Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a9c196fc-54e7-30bc-ab95-303e9f201b08.roa
File:                     a9c196fc-54e7-30bc-ab95-303e9f201b08.roa (raw, json)
Hash identifier:          UODD7hP0Fh/mGn2XqqpH2OUbsIzHs5rVRLbTMSGWJbo=
Subject key identifier:   1F:2F:E1:11:D1:DD:2F:11:A4:0C:D5:44:04:B2:55:08:13:98:95:1C
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847CA3F6F5D2A97BA7E93F7E170
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a9c196fc-54e7-30bc-ab95-303e9f201b08.roa
Signing time:             Wed 06 Nov 2024 14:00:41 +0000
ROA not before:           Wed 06 Nov 2024 14:00:41 +0000
ROA not after:            Tue 04 Feb 2025 14:00:41 +0000
asID:                     397236
IP address blocks:        156.154.169.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:3f:6f:5d:2a:97:ba:7e:93:f7:e1:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Nov  6 14:00:41 2024 GMT
            Not After : Feb  4 14:00:41 2025 GMT
        Subject: CN=d5f2bae2-7fa1-4a5f-b583-080ce5e806e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:50:6e:e9:b7:2f:1f:6f:1e:6c:de:6d:4d:98:
                    b5:53:5e:14:1e:de:6f:40:64:22:89:9d:19:57:a6:
                    69:66:9d:5a:19:f6:17:aa:f4:ed:44:e9:2a:59:f5:
                    90:4f:01:e9:d4:7a:ad:6b:ca:9f:36:f6:b4:9e:a5:
                    3c:60:20:9f:cd:d2:8e:d6:c3:79:ae:cd:83:c0:7e:
                    bc:3d:81:51:53:3a:0c:e8:5f:83:ac:46:19:e7:b0:
                    d7:82:07:82:27:40:64:4f:21:c6:9c:e8:91:98:f9:
                    78:74:27:27:ff:f5:8c:74:aa:b4:73:0c:8c:5f:ae:
                    19:3b:77:46:60:ce:8b:bc:9c:73:d9:a8:51:80:d8:
                    bf:1c:2c:cd:85:e9:35:03:c0:66:05:73:e4:3c:da:
                    b0:a4:d0:f1:37:ea:7a:c1:f5:bc:90:db:eb:07:bb:
                    2f:5a:e6:8b:d8:a6:0a:1a:c5:13:fe:f7:27:8d:79:
                    69:e4:51:53:d7:c0:98:db:8b:ee:1e:45:71:a4:98:
                    bc:7e:7c:f9:54:8c:36:75:a6:e0:83:c0:46:79:61:
                    7d:84:cd:b0:35:ae:2c:5d:87:4c:1f:cb:53:a1:57:
                    fe:7f:c0:a7:14:7a:9f:10:7c:67:b7:5f:98:4b:a8:
                    d7:05:61:7a:e4:03:0d:d3:f8:2b:be:0d:09:16:ac:
                    81:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:2F:E1:11:D1:DD:2F:11:A4:0C:D5:44:04:B2:55:08:13:98:95:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a9c196fc-54e7-30bc-ab95-303e9f201b08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:eb:80:46:27:28:c8:5e:d5:4d:fa:64:84:4c:84:fb:78:a7:
         b6:f3:e2:7d:cc:08:82:29:0f:07:3a:d6:dc:2a:87:6a:50:5b:
         ce:8f:9a:ad:d0:d5:d8:6e:8a:c4:df:d5:0c:c2:64:a2:de:d8:
         e3:15:33:01:e2:27:5f:e8:e5:9a:54:0d:f8:09:54:e1:1d:72:
         bf:0a:a7:c9:11:51:ca:7e:9c:54:aa:93:aa:92:22:38:53:2b:
         31:c5:fd:6b:ed:df:06:73:29:24:5a:42:ef:0c:83:b8:0d:4a:
         23:bc:f9:62:97:8b:44:37:63:df:d1:1f:9f:cd:50:23:64:db:
         ae:7e:07:7b:fb:78:cd:8f:50:d4:84:49:d2:03:b4:ad:c6:aa:
         43:27:7a:82:0e:d4:8a:49:0f:db:4d:0a:3f:38:d0:72:47:fa:
         8a:5e:07:fe:bc:1e:d9:57:a5:1e:ea:ba:6c:31:e6:bb:3f:22:
         c8:3b:52:fc:4e:7a:5c:c0:15:a4:71:ea:52:35:ed:4a:ba:8f:
         9b:a1:1b:b9:e4:7b:fa:57:5a:da:6a:68:e4:a7:e2:af:73:3b:
         c6:61:c1:34:4f:1e:26:25:8a:be:49:f8:ee:48:37:2f:bf:b1:
         c5:d7:fa:c4:ce:d1:d4:2b:20:e6:fe:74:8a:20:68:d4:ed:51:
         3c:c8:32:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:06:51 2024 by rpki-client on console-ams.rpki-client.org