Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c2286d69-6348-360c-8fa0-537662a778e3.roa
File:                     c2286d69-6348-360c-8fa0-537662a778e3.roa (raw, json)
Hash identifier:          uszLE3c7+VnNAJKKc7zxgHAH81PX9ON5kh7OOASv3kA=
Subject key identifier:   A6:A8:2D:67:5B:7E:47:93:DD:68:AD:B1:7C:20:03:78:04:52:64:88
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285846D1AABC4F2664192D9B4F6380
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c2286d69-6348-360c-8fa0-537662a778e3.roa
Signing time:             Fri 09 Aug 2024 13:00:37 +0000
ROA not before:           Fri 09 Aug 2024 13:00:37 +0000
ROA not after:            Thu 07 Nov 2024 14:00:37 +0000
asID:                     397227
IP address blocks:        156.154.102.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Oct 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:d1:aa:bc:4f:26:64:19:2d:9b:4f:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug  9 13:00:37 2024 GMT
            Not After : Nov  7 14:00:37 2024 GMT
        Subject: CN=08c006a8-49d7-49ac-9aea-d3b33359ac08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ce:62:96:a8:bd:b2:a3:f2:fb:5c:c0:2b:45:
                    c6:9c:dd:e6:c3:1e:6f:8d:90:85:d5:97:ed:10:99:
                    f2:90:5e:fc:aa:52:2d:21:ea:f7:af:3e:ff:7f:2d:
                    b6:a3:4f:80:89:b5:79:f8:61:53:62:8c:68:4f:b1:
                    6a:3b:86:9b:f8:f2:77:f2:35:75:6b:88:08:4c:14:
                    83:b3:ff:c9:e1:db:d6:8c:dd:ca:9f:b1:0e:40:a8:
                    e4:b2:b7:55:d8:1d:98:89:8f:3d:1a:65:a3:25:b0:
                    1f:35:05:76:03:bc:f2:6d:d2:4b:39:e2:00:31:1e:
                    c5:19:fe:73:3a:62:9a:a8:16:47:fa:11:69:3c:f6:
                    ba:bc:9a:1f:df:e9:d1:53:79:ed:e4:6f:81:74:f3:
                    ab:22:9c:b5:a8:08:fd:ce:26:a8:c9:c8:0c:f3:72:
                    46:7f:62:d7:e5:17:d9:f2:6a:5f:99:a6:3a:21:1d:
                    9d:db:7e:c2:39:a2:a3:b9:6a:f8:c1:83:4e:9d:9e:
                    a9:19:1d:4e:6e:39:e0:f9:e7:1e:f7:aa:65:e4:d9:
                    d3:f8:1e:ce:3f:bb:00:59:70:1d:27:0d:c6:b8:6d:
                    10:8a:81:81:9d:59:bb:f4:36:80:42:ff:3e:7c:6b:
                    6f:b8:cb:26:fb:41:a0:9f:d1:21:e6:6e:4a:c5:89:
                    05:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A8:2D:67:5B:7E:47:93:DD:68:AD:B1:7C:20:03:78:04:52:64:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c2286d69-6348-360c-8fa0-537662a778e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:71:8c:7d:b5:75:4f:bf:e8:d6:56:a0:18:b4:4b:49:3f:1d:
         fc:4e:93:46:15:c6:5f:51:29:02:c0:bd:a2:0f:59:e5:b7:a4:
         bd:08:ab:66:73:d9:d6:e7:43:64:32:d9:fa:e5:e0:e6:b8:4c:
         0e:30:32:e0:d9:4b:53:0d:29:e3:63:4a:d3:a1:3b:40:d7:67:
         97:01:64:a8:b4:98:67:63:bf:7c:39:77:dc:66:78:ac:aa:bd:
         cf:c3:dc:e1:0d:23:c8:09:bb:06:85:9d:76:7a:0d:e8:e4:f8:
         79:20:e3:a4:c4:3d:71:43:e6:6c:8d:b5:dd:4f:62:78:79:ef:
         b2:ee:5b:14:25:1d:7f:7a:b0:8e:44:85:4a:76:a2:0f:d7:8b:
         4b:39:9a:b9:f1:0c:88:54:8a:b4:1d:50:b0:12:c2:72:32:01:
         f6:e1:63:0d:86:be:5d:ad:da:26:e1:10:c6:ed:47:3a:44:54:
         44:b6:f7:15:d2:28:23:56:51:42:8e:9f:8c:4a:33:45:2c:71:
         1b:d0:25:5f:78:1d:d9:cc:04:d6:5a:28:80:98:9a:dd:2d:e6:
         41:8a:71:dd:ed:76:5e:4a:32:94:2e:99:a4:b9:d0:76:b0:e6:
         62:f2:52:2f:75:75:cd:03:f6:e8:6d:89:2b:fe:53:29:ce:2c:
         db:a7:d0:96
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEbRqrxPJmQZLZtPY4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI0MDgwOTEzMDAzN1oXDTI0MTEwNzE0MDAzN1owLzEtMCsGA1UEAxMk
MDhjMDA2YTgtNDlkNy00OWFjLTlhZWEtZDNiMzMzNTlhYzA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt85ilqi9sqPy+1zAK0XGnN3mwx5vjZCF1Zft
EJnykF78qlItIer3rz7/fy22o0+AibV5+GFTYoxoT7FqO4ab+PJ38jV1a4gITBSD
s//J4dvWjN3Kn7EOQKjksrdV2B2YiY89GmWjJbAfNQV2A7zybdJLOeIAMR7FGf5z
OmKaqBZH+hFpPPa6vJof3+nRU3nt5G+BdPOrIpy1qAj9ziaoycgM83JGf2LX5RfZ
8mpfmaY6IR2d237COaKjuWr4wYNOnZ6pGR1Objng+ece96pl5NnT+B7OP7sAWXAd
Jw3GuG0QioGBnVm79DaAQv8+fGtvuMsm+0Ggn9Eh5m5KxYkFDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKaoLWdbfkeT3WitsXwgA3gEUmSIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYzIyODZkNjktNjM0OC0z
NjBjLThmYTAtNTM3NjYyYTc3OGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEFxjH21dU+/6NZWoBi0S0k/HfxOk0YVxl9RKQLAvaIPWeW3pL0Iq2Zz
2dbnQ2Qy2frl4Oa4TA4wMuDZS1MNKeNjStOhO0DXZ5cBZKi0mGdjv3w5d9xmeKyq
vc/D3OENI8gJuwaFnXZ6Dejk+Hkg46TEPXFD5myNtd1PYnh577LuWxQlHX96sI5E
hUp2og/Xi0s5mrnxDIhUirQdULASwnIyAfbhYw2Gvl2t2ibhEMbtRzpEVES29xXS
KCNWUUKOn4xKM0UscRvQJV94HdnMBNZaKICYmt0t5kGKcd3tdl5KMpQumaS50Haw
5mLyUi91dc0D9uhtiSv+UynOLNun0JY=
-----END CERTIFICATE-----
Generated at Fri Oct 25 18:47:36 2024 by rpki-client on console-fra.rpki-client.org