Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b3d59049-2b3c-3a70-8777-f4ffae3e92d7.roa
File:                     b3d59049-2b3c-3a70-8777-f4ffae3e92d7.roa (raw, json)
Hash identifier:          r9bFH+kdBPbLL7hAvunO0EEkrpsvoz/B7RdYVezbh1o=
Subject key identifier:   3E:12:B8:BC:0C:E0:D1:E4:BC:73:C0:66:29:80:CA:45:89:1F:22:39
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858478CB69EE3E99AA1D9E5ECC6C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b3d59049-2b3c-3a70-8777-f4ffae3e92d7.roa
Signing time:             Tue 15 Oct 2024 13:00:47 +0000
ROA not before:           Tue 15 Oct 2024 13:00:47 +0000
ROA not after:            Mon 13 Jan 2025 14:00:47 +0000
asID:                     397241
IP address blocks:        156.154.70.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:b6:9e:e3:e9:9a:a1:d9:e5:ec:c6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Oct 15 13:00:47 2024 GMT
            Not After : Jan 13 14:00:47 2025 GMT
        Subject: CN=88873fab-87b7-456d-a47e-5e70c579cbf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:27:e5:46:7a:d7:0b:47:78:0e:4a:d5:22:b4:
                    74:14:4b:11:fc:b8:48:2e:7d:1d:e1:9d:7f:9b:69:
                    82:a8:de:be:d2:42:04:f1:5d:e9:df:50:41:2a:9f:
                    2b:b4:e1:01:11:50:ee:af:16:ff:d5:3a:66:39:7b:
                    ab:7a:a8:5f:46:a5:5a:b8:e3:58:8a:58:cf:bd:03:
                    95:12:7e:08:19:c4:b5:cf:63:02:b6:9e:47:03:d7:
                    cd:af:66:7e:b3:1c:ab:ab:f9:99:27:c2:89:17:98:
                    c4:8b:a1:23:e7:b5:96:0f:6f:9c:92:cc:7e:24:71:
                    33:39:c1:59:ab:e1:02:6f:01:48:31:98:fb:02:e4:
                    78:cf:c3:3c:f0:51:d3:c0:f1:6c:6d:91:0d:16:71:
                    87:46:71:81:22:f8:c3:70:75:7b:07:44:be:e0:0c:
                    54:32:3d:50:3d:cf:1e:c4:62:50:62:26:41:69:10:
                    4b:cc:26:e4:8b:39:9f:ea:d8:7c:2d:8d:42:b1:8f:
                    9e:39:55:f4:97:19:ac:8e:e5:70:ec:b6:2d:64:fe:
                    1d:14:ac:ea:7d:2c:cb:29:8c:71:66:1d:b0:d2:85:
                    fd:32:72:bf:ae:3d:ae:ad:5c:9a:23:98:ad:d9:cd:
                    c4:c5:cd:37:9c:c3:dd:f2:b2:b9:89:de:01:16:96:
                    98:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:12:B8:BC:0C:E0:D1:E4:BC:73:C0:66:29:80:CA:45:89:1F:22:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b3d59049-2b3c-3a70-8777-f4ffae3e92d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:69:e1:83:a5:e8:17:31:22:76:c8:5f:04:41:d7:a9:a8:78:
         90:29:f7:47:d6:6c:7d:e1:c7:e2:39:29:59:66:a8:bc:7c:6f:
         61:e8:2c:54:6d:1e:08:e0:0e:2f:9d:99:f3:fa:34:31:fb:45:
         d7:49:20:38:e8:6a:aa:8a:8e:12:cc:b3:2c:57:8a:7f:bd:56:
         ee:40:c9:a2:bc:1b:42:0e:31:c3:cf:22:32:6c:f6:2f:87:4f:
         20:7d:2b:f6:92:cc:4c:4f:74:87:7b:8c:65:e3:2d:9e:d9:e2:
         97:d6:a7:54:1a:f3:47:d8:a7:56:a9:68:49:ce:1e:3a:d0:b1:
         5d:ca:a1:8d:b9:71:58:2a:4b:9a:31:dd:bd:e1:f7:55:0d:fc:
         45:25:53:9c:c0:29:9c:8d:cf:29:0c:cd:2c:fe:0a:4e:a3:2f:
         cf:0f:fb:4f:19:62:ea:2f:85:db:e8:32:f5:b3:f3:39:2b:35:
         62:30:b3:3c:82:fe:2d:8f:c3:bb:09:0b:e9:5f:06:67:9f:90:
         e3:f4:db:d9:81:75:55:fa:ff:06:db:b5:9e:d3:29:2e:3d:00:
         46:15:02:cf:c1:af:0e:00:5c:76:8a:a1:05:2b:70:33:fe:bd:
         1f:d4:a2:c8:a9:0f:07:5e:1f:cb:3a:5c:f5:30:be:d3:68:ee:
         d8:9d:03:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:02:13 2024 by rpki-client on console-fra.rpki-client.org