Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bbc99b82-2c4c-30f0-b9ee-95344e9a5881.roa
File:                     bbc99b82-2c4c-30f0-b9ee-95344e9a5881.roa (raw, json)
Hash identifier:          3XbOHValhJBjxfkT1zgRgD39w+ViXpXEs0JwzbKzPpM=
Subject key identifier:   E3:E6:26:34:1A:FA:53:94:76:C8:6C:6C:6E:97:D0:3C:A4:EA:3D:DB
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847527C9925039AEA9F12C3B28E
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bbc99b82-2c4c-30f0-b9ee-95344e9a5881.roa
Signing time:             Tue 24 Sep 2024 16:27:17 +0000
ROA not before:           Tue 24 Sep 2024 16:27:17 +0000
ROA not after:            Mon 23 Dec 2024 17:27:17 +0000
asID:                     397238
IP address blocks:        156.154.128.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:52:7c:99:25:03:9a:ea:9f:12:c3:b2:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 24 16:27:17 2024 GMT
            Not After : Dec 23 17:27:17 2024 GMT
        Subject: CN=4a3262ae-9280-4bbf-8fa2-9fc3b5c13588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c9:27:81:ea:8e:10:54:c9:bf:95:5d:00:ab:
                    5f:b5:93:eb:1d:91:d7:20:fd:a1:cd:dd:b9:e1:52:
                    ec:53:ff:96:05:f2:dc:21:ef:0e:db:01:f7:3c:f4:
                    45:e3:07:c5:a3:37:52:66:7d:ac:2b:06:5d:11:09:
                    24:9a:69:06:c7:93:22:b3:ee:b9:b1:e2:eb:3c:ad:
                    9c:af:1c:a7:b9:f8:70:7a:39:a6:6f:7f:b3:de:25:
                    24:2b:3a:14:56:84:43:1e:3f:11:5d:12:b2:0c:9a:
                    40:be:5f:12:08:f2:63:0c:6d:49:66:63:2a:12:4f:
                    86:34:b9:94:3a:1a:e0:5a:28:4f:23:98:70:ab:9e:
                    d7:0a:c5:a1:e9:1f:a8:5c:f5:21:95:b7:b8:bb:40:
                    50:2b:2f:d1:0d:95:d5:87:c5:b1:14:d5:0c:86:fe:
                    05:19:05:6c:19:b9:ba:4e:20:d3:da:39:77:c8:bf:
                    e4:43:44:9b:0a:dc:b2:43:e3:1b:29:26:bc:ad:f9:
                    f7:17:50:6d:52:c9:10:ff:9c:b1:15:56:d3:8d:19:
                    d7:0c:17:40:a8:26:c5:f6:d0:98:16:1a:c6:83:ac:
                    59:78:c7:87:97:f4:14:57:a1:f9:cc:1c:83:e6:4f:
                    43:55:1a:96:50:e4:cf:35:50:89:ed:fe:20:e6:66:
                    68:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:E6:26:34:1A:FA:53:94:76:C8:6C:6C:6E:97:D0:3C:A4:EA:3D:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bbc99b82-2c4c-30f0-b9ee-95344e9a5881.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:c5:ba:e0:da:6a:e6:e8:e3:f2:a3:5e:60:2f:47:11:f0:a6:
         06:77:41:a3:7b:9b:4a:77:e2:30:e4:70:82:84:e3:ee:bb:63:
         cf:ba:6f:6e:0f:29:88:3f:50:ea:5a:58:17:07:39:0f:94:21:
         fb:19:39:63:c9:78:74:eb:40:51:b6:b1:57:75:c3:89:bd:84:
         92:ec:94:0e:e3:6a:27:73:61:3f:c2:09:ad:ad:c6:76:ab:39:
         56:07:95:89:c3:ec:cf:0b:86:51:73:c7:46:ea:1b:b8:7d:2f:
         f3:f1:2e:7b:71:e7:55:4b:f8:7f:2c:92:41:53:6a:f4:ed:15:
         ef:63:07:86:f2:d1:c8:76:a3:4e:45:ae:ad:b1:77:80:39:79:
         57:a1:0d:1a:f4:d2:95:93:4f:01:fa:b6:0d:9d:2e:40:25:9f:
         c2:ca:34:b3:42:33:78:83:b6:ee:d5:9e:c5:57:fb:63:39:c2:
         97:b0:35:e5:a3:b3:21:34:2d:8d:56:68:d4:95:f2:f6:f4:47:
         60:cd:0b:40:6c:fb:b9:d2:df:62:a0:ad:1d:56:c5:1f:e6:50:
         f2:92:7f:5a:79:7c:bb:2e:9c:39:a1:15:aa:d6:1c:b6:04:b6:
         8f:f7:8c:d5:5f:b8:74:a5:9a:1b:8e:f6:e3:46:a6:9c:02:2e:
         13:3e:b9:cd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdSfJklA5rqnxLDso4wDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI0MDkyNDE2MjcxN1oXDTI0MTIyMzE3MjcxN1owLzEtMCsGA1UEAxMk
NGEzMjYyYWUtOTI4MC00YmJmLThmYTItOWZjM2I1YzEzNTg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMkngeqOEFTJv5VdAKtftZPrHZHXIP2hzd25
4VLsU/+WBfLcIe8O2wH3PPRF4wfFozdSZn2sKwZdEQkkmmkGx5Mis+65seLrPK2c
rxynufhwejmmb3+z3iUkKzoUVoRDHj8RXRKyDJpAvl8SCPJjDG1JZmMqEk+GNLmU
OhrgWihPI5hwq57XCsWh6R+oXPUhlbe4u0BQKy/RDZXVh8WxFNUMhv4FGQVsGbm6
TiDT2jl3yL/kQ0SbCtyyQ+MbKSa8rfn3F1BtUskQ/5yxFVbTjRnXDBdAqCbF9tCY
FhrGg6xZeMeHl/QUV6H5zByD5k9DVRqWUOTPNVCJ7f4g5mZosQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOPmJjQa+lOUdshsbG6X0Dyk6j3bMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYmJjOTliODItMmM0Yy0z
MGYwLWI5ZWUtOTUzNDRlOWE1ODgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABfFuuDaaubo4/KjXmAvRxHwpgZ3QaN7m0p34jDkcIKE4+67Y8+6b24P
KYg/UOpaWBcHOQ+UIfsZOWPJeHTrQFG2sVd1w4m9hJLslA7jaidzYT/CCa2txnar
OVYHlYnD7M8LhlFzx0bqG7h9L/PxLntx51VL+H8skkFTavTtFe9jB4by0ch2o05F
rq2xd4A5eVehDRr00pWTTwH6tg2dLkAln8LKNLNCM3iDtu7VnsVX+2M5wpewNeWj
syE0LY1WaNSV8vb0R2DNC0Bs+7nS32KgrR1WxR/mUPKSf1p5fLsunDmhFarWHLYE
to/3jNVfuHSlmhuO9uNGppwCLhM+uc0=
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:06:52 2024 by rpki-client on console-ams.rpki-client.org