Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b02e90a8-54e4-39e8-9f31-06b3353b00c4.roa
File:                     b02e90a8-54e4-39e8-9f31-06b3353b00c4.roa (raw, json)
Hash identifier:          e4HG7i/YPRRWQ9VTyh9ahDHF9HnU7NVUmtpkjOMMH9E=
Subject key identifier:   13:0C:E7:0F:A9:DF:22:99:56:08:83:35:8D:2F:88:49:EE:D8:35:04
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858479D76E03AC31610891DB43300
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b02e90a8-54e4-39e8-9f31-06b3353b00c4.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     397213
IP address blocks:        156.154.101.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:e0:3a:c3:16:10:89:1d:b4:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=f29c78de-078e-4413-b395-9a4c32333714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:60:94:52:a5:2b:b8:cb:fa:1a:67:c5:62:97:
                    30:c2:73:df:13:59:b4:8d:63:c7:19:44:86:5b:c6:
                    dd:2b:d2:0e:60:48:00:69:4f:80:71:d0:41:bd:72:
                    58:d8:44:97:9d:40:e3:55:6c:0c:1e:34:66:cd:9d:
                    fd:e4:95:5c:86:ed:f9:4e:d7:78:04:26:db:02:48:
                    4f:bb:99:86:3c:35:62:2b:12:20:40:de:3c:65:51:
                    ec:1f:9b:69:b9:88:48:6d:44:6a:2e:c2:cf:ea:e7:
                    34:3b:08:5e:06:1c:f5:0e:93:35:af:b0:4e:8f:7a:
                    a4:64:84:4f:45:6a:70:74:d4:78:db:6e:14:6a:42:
                    b2:a5:48:a5:e2:5f:68:d1:38:a4:7c:dc:62:c3:fd:
                    1a:33:1b:68:fe:1f:8e:91:ac:4c:c0:59:9c:92:86:
                    25:cc:a6:87:8e:d3:f5:a7:7a:db:39:6d:0b:05:d1:
                    b6:fb:f7:82:1b:ec:17:43:f7:2d:0b:2c:c0:8d:a0:
                    5e:ab:d5:7b:70:41:60:e6:c6:2f:24:59:40:fb:69:
                    bb:51:87:8b:c7:d6:65:50:99:b5:1a:b0:76:8c:e5:
                    34:67:c8:5c:bc:05:fa:1f:74:71:c1:1a:49:7c:74:
                    7b:0f:37:91:66:cf:02:b5:c7:6d:40:07:8a:da:01:
                    e5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:0C:E7:0F:A9:DF:22:99:56:08:83:35:8D:2F:88:49:EE:D8:35:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b02e90a8-54e4-39e8-9f31-06b3353b00c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:7a:83:8d:fa:97:e2:9d:7c:83:e2:eb:7d:5a:80:07:8f:8d:
         40:60:76:2a:3c:fb:5d:2b:e4:79:d1:55:0d:ab:60:30:ae:b4:
         c4:b3:92:aa:c2:91:74:c2:c3:1f:95:2a:19:7c:85:ea:7a:08:
         db:f2:e3:9a:23:26:73:82:f4:57:ae:9f:c7:7c:8d:2b:72:08:
         ba:9b:96:44:fc:9d:7a:50:45:25:bf:67:0b:0c:cd:89:12:b5:
         b2:de:80:17:2e:e4:2b:99:f1:64:9f:19:04:49:31:32:1b:b1:
         a8:75:82:f5:48:3d:b7:a9:5d:c1:1e:2b:d7:a1:dc:b6:ba:f7:
         bc:1b:7a:12:a5:93:01:49:54:68:a6:c6:da:83:a4:a2:f0:51:
         0d:70:d6:55:2a:76:a4:34:5f:38:3c:59:90:e6:56:3e:aa:ea:
         18:58:e0:4c:14:33:e5:73:4c:de:f6:c3:66:32:b3:65:94:74:
         88:45:ee:f9:9c:c2:bb:73:46:a6:2f:7e:1b:72:bb:30:71:86:
         6b:14:0a:e9:38:9e:ba:23:bb:8d:67:23:fc:be:3d:26:9b:a3:
         f3:19:2e:36:40:6e:66:e3:5c:8d:8f:95:1f:e2:a5:52:44:9f:
         d8:ad:b4:dc:8c:7b:6c:7b:0c:bc:4c:f4:de:17:8a:8c:4e:61:
         5d:1c:79:75
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEedduA6wxYQiR20MwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI0MTAyMTEzMDA0MVoXDTI1MDExOTE0MDA0MVowLzEtMCsGA1UEAxMk
ZjI5Yzc4ZGUtMDc4ZS00NDEzLWIzOTUtOWE0YzMyMzMzNzE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02CUUqUruMv6GmfFYpcwwnPfE1m0jWPHGUSG
W8bdK9IOYEgAaU+AcdBBvXJY2ESXnUDjVWwMHjRmzZ395JVchu35Ttd4BCbbAkhP
u5mGPDViKxIgQN48ZVHsH5tpuYhIbURqLsLP6uc0OwheBhz1DpM1r7BOj3qkZIRP
RWpwdNR4224UakKypUil4l9o0TikfNxiw/0aMxto/h+OkaxMwFmckoYlzKaHjtP1
p3rbOW0LBdG2+/eCG+wXQ/ctCyzAjaBeq9V7cEFg5sYvJFlA+2m7UYeLx9ZlUJm1
GrB2jOU0Z8hcvAX6H3RxwRpJfHR7DzeRZs8CtcdtQAeK2gHlCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBMM5w+p3yKZVgiDNY0viEnu2DUEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYjAyZTkwYTgtNTRlNC0z
OWU4LTlmMzEtMDZiMzM1M2IwMGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJplMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEJ6g436l+KdfIPi631agAePjUBgdio8+10r5HnRVQ2rYDCutMSzkqrC
kXTCwx+VKhl8hep6CNvy45ojJnOC9Feun8d8jStyCLqblkT8nXpQRSW/ZwsMzYkS
tbLegBcu5CuZ8WSfGQRJMTIbsah1gvVIPbepXcEeK9eh3La697wbehKlkwFJVGim
xtqDpKLwUQ1w1lUqdqQ0Xzg8WZDmVj6q6hhY4EwUM+VzTN72w2Yys2WUdIhF7vmc
wrtzRqYvfhtyuzBxhmsUCuk4nroju41nI/y+PSabo/MZLjZAbmbjXI2PlR/ipVJE
n9ittNyMe2x7DLxM9N4XioxOYV0ceXU=
-----END CERTIFICATE-----
Generated at Fri Nov 22 07:02:13 2024 by rpki-client on console-fra.rpki-client.org