Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b4c218a9-c77f-3ea9-bfcc-606292d0c00b.roa
File:                     b4c218a9-c77f-3ea9-bfcc-606292d0c00b.roa (raw, json)
Hash identifier:          Ij7oZwmF2VX1HZmWyDShiyTqLgkMD+CQQTm3RxkzTZM=
Subject key identifier:   75:2F:38:56:DF:3E:31:A5:04:2C:13:93:4C:74:53:B3:BC:15:62:1F
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847DDCA3064706030EC88973F00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b4c218a9-c77f-3ea9-bfcc-606292d0c00b.roa
Signing time:             Wed 13 Nov 2024 14:00:39 +0000
ROA not before:           Wed 13 Nov 2024 14:00:39 +0000
ROA not after:            Tue 11 Feb 2025 14:00:39 +0000
asID:                     397239
IP address blocks:        156.154.133.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dd:ca:30:64:70:60:30:ec:88:97:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Nov 13 14:00:39 2024 GMT
            Not After : Feb 11 14:00:39 2025 GMT
        Subject: CN=d0cffafb-7093-4cea-a63f-08cc22caea1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:47:c1:5f:9b:b9:19:8f:29:a1:99:31:54:7f:
                    3d:ae:ea:8e:c4:dd:5b:3c:66:fa:df:e1:b9:cf:2a:
                    2b:79:7a:8b:99:46:65:65:d8:90:2e:9c:eb:3e:3c:
                    0d:56:a1:16:cc:01:99:5d:13:35:99:d2:a8:f7:15:
                    e9:de:ea:64:20:f5:36:fe:24:82:40:85:f6:29:82:
                    20:ef:b0:3b:06:38:f3:47:1c:6b:2a:6f:a3:3c:b1:
                    b0:0a:c7:5c:17:07:90:9e:28:f1:1d:27:77:9b:79:
                    69:e2:3d:ab:d7:0f:b6:fa:80:11:83:79:ca:06:af:
                    00:98:d8:63:14:3b:7a:94:27:8f:72:22:c8:39:65:
                    2c:3e:4d:96:04:ae:9b:da:d3:f0:1a:b6:a9:0b:04:
                    17:43:a2:9a:a1:96:84:d5:20:cd:83:c7:90:06:c9:
                    86:6b:ad:c7:20:90:b3:ef:1c:a6:d7:a9:76:ae:98:
                    26:c0:cb:d6:dc:2b:53:8a:15:90:2e:0c:39:c9:d4:
                    23:86:c8:79:c6:c4:c9:e8:0c:10:09:e9:f1:4f:c5:
                    37:0b:00:a9:0b:ba:3e:3c:fb:f8:73:2a:37:1f:ec:
                    98:70:3c:e8:9f:86:33:d5:49:ee:49:bd:22:2c:3b:
                    bc:b6:c8:f8:0c:68:c8:6b:e1:2a:ef:fe:fa:f7:56:
                    76:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:2F:38:56:DF:3E:31:A5:04:2C:13:93:4C:74:53:B3:BC:15:62:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b4c218a9-c77f-3ea9-bfcc-606292d0c00b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:fb:a3:46:49:e0:50:22:c4:27:9b:06:1c:33:49:00:9f:d9:
         82:01:9a:02:72:7a:5a:1c:d8:80:a7:f3:10:34:56:ea:07:73:
         8f:f9:07:7f:9b:08:91:76:13:ae:d7:b5:57:b3:e2:b0:d8:47:
         74:5a:04:a4:bc:3b:5e:49:2a:cf:d2:15:94:d2:ba:92:c1:8e:
         96:62:82:e1:52:d7:48:53:d9:94:e7:f5:74:27:db:0e:5e:ec:
         7b:9b:00:f1:1c:9b:fa:59:b4:46:f8:19:45:1c:49:f8:2b:e6:
         c0:92:46:19:c7:eb:f8:71:b5:45:ad:53:fa:0e:b6:f5:70:b4:
         41:56:53:14:9f:56:35:de:c0:d4:43:00:0d:04:5e:23:d8:95:
         42:8b:de:8f:6b:73:de:30:82:b3:fc:c5:39:2b:5e:ad:6f:e7:
         c2:3e:f7:3d:8b:2a:58:30:04:8c:06:c4:f6:8a:a7:93:cc:75:
         65:64:16:60:2f:0e:bd:1e:9a:5d:c8:aa:30:e8:8b:74:b7:df:
         e7:0d:29:f3:82:3a:be:07:06:f8:98:50:bb:33:35:87:a2:5e:
         18:70:e0:e3:6b:13:2c:5f:14:b2:67:7e:12:12:22:11:1e:29:
         4d:d5:48:ea:95:c5:55:01:5d:61:a7:e2:28:ef:15:3f:bf:6d:
         12:e4:8d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:02:13 2024 by rpki-client on console-fra.rpki-client.org