Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c49cc463-f283-3748-a30c-f3394726694a.roa
File:                     c49cc463-f283-3748-a30c-f3394726694a.roa (raw, json)
Hash identifier:          ekmHyxeCn0FAVupJci0ypkJEU7HbJLJOtiL9nOFVoe4=
Subject key identifier:   1B:17:46:0C:B8:C8:A9:19:E5:32:FB:9E:8A:BC:9D:8A:B5:75:52:04
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847527C9FACDDE6F98CA2E27AE0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c49cc463-f283-3748-a30c-f3394726694a.roa
Signing time:             Tue 24 Sep 2024 16:27:20 +0000
ROA not before:           Tue 24 Sep 2024 16:27:20 +0000
ROA not after:            Mon 23 Dec 2024 17:27:20 +0000
asID:                     397243
IP address blocks:        156.154.107.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:52:7c:9f:ac:dd:e6:f9:8c:a2:e2:7a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 24 16:27:20 2024 GMT
            Not After : Dec 23 17:27:20 2024 GMT
        Subject: CN=823025fd-188e-4d4a-823d-93f7b311e274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e9:c8:06:7a:22:0e:be:d1:ca:6a:a3:a2:f5:
                    60:3f:fc:0c:c8:c6:20:86:e3:4e:fe:12:ce:00:b0:
                    af:b8:fe:6b:23:18:42:1a:32:e1:3f:30:9c:d0:94:
                    83:9d:80:18:bc:05:99:02:a1:77:b6:15:63:61:70:
                    01:98:2e:f9:36:38:f4:40:8a:12:29:51:be:cc:9b:
                    6d:57:da:be:51:d3:61:3d:ae:ec:14:cb:33:44:d1:
                    a6:1f:e3:cb:78:39:3b:bf:26:51:4d:41:11:c3:7b:
                    ed:f0:82:db:49:47:de:ad:4e:2d:4f:bf:69:ad:d9:
                    c7:a1:f8:9d:1b:62:bc:bd:21:9d:75:53:49:0a:bb:
                    6b:78:63:ab:1f:9e:96:20:bc:bc:c1:80:04:85:d4:
                    3d:00:5d:29:39:0f:07:87:d3:37:c1:2c:38:a6:3d:
                    ec:68:0a:51:d9:b9:0b:58:59:bb:30:cc:68:1e:bb:
                    54:d1:c0:03:26:a9:ed:b3:1d:b5:ce:b4:cd:42:26:
                    3a:73:c1:08:04:a9:68:d1:e3:83:dd:ed:2f:b5:52:
                    33:c9:a2:24:66:0c:0d:c4:e2:b9:78:3f:dc:5f:21:
                    01:15:bb:2d:32:31:9e:10:2d:9b:a5:59:58:39:35:
                    11:1c:a6:aa:a3:a9:a2:36:2b:c1:5f:1c:a5:5f:9e:
                    df:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:17:46:0C:B8:C8:A9:19:E5:32:FB:9E:8A:BC:9D:8A:B5:75:52:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c49cc463-f283-3748-a30c-f3394726694a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:ed:0f:60:26:15:7b:6a:d2:80:c9:cf:3e:81:06:86:99:6d:
         b7:a7:35:65:42:de:a7:20:09:f4:43:40:c6:3b:68:4d:c7:eb:
         48:9c:ab:2a:64:b8:08:74:1c:72:33:61:89:22:9e:2a:71:7a:
         fc:0f:65:d0:df:4c:76:59:23:31:b9:02:66:09:a6:48:44:82:
         0e:91:25:b9:93:22:0d:77:79:9e:d0:77:cb:42:e7:3f:b9:92:
         cb:57:28:9f:fe:be:20:a0:9c:d6:76:f1:cc:d7:d3:da:28:dc:
         f8:57:c0:c3:5d:11:1b:55:27:ce:f7:96:0b:c9:55:04:b1:0e:
         75:56:67:26:49:95:31:a1:86:56:b7:0f:06:9e:67:b1:bd:09:
         24:28:5c:fb:da:d2:db:af:99:ca:b3:39:b3:8b:c6:3d:d6:59:
         df:c1:4e:2a:76:6e:bb:b6:ea:47:33:9b:4d:30:cd:98:18:10:
         9f:f4:8e:d0:c6:17:39:74:3d:14:78:ad:78:b4:9d:b3:48:17:
         0b:30:6e:0b:fc:e0:dc:fa:71:56:11:ca:34:ba:19:c2:a5:51:
         a9:60:7d:87:c4:c9:92:5e:b9:42:4b:d0:35:7c:f2:1a:12:8e:
         d2:7b:2e:3a:ce:71:75:f4:ce:bd:d3:2c:3f:e5:31:ac:e0:e7:
         18:a8:79:bc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdSfJ+s3eb5jKLieuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI0MDkyNDE2MjcyMFoXDTI0MTIyMzE3MjcyMFowLzEtMCsGA1UEAxMk
ODIzMDI1ZmQtMTg4ZS00ZDRhLTgyM2QtOTNmN2IzMTFlMjc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgenIBnoiDr7RymqjovVgP/wMyMYghuNO/hLO
ALCvuP5rIxhCGjLhPzCc0JSDnYAYvAWZAqF3thVjYXABmC75Njj0QIoSKVG+zJtt
V9q+UdNhPa7sFMszRNGmH+PLeDk7vyZRTUERw3vt8ILbSUferU4tT79prdnHofid
G2K8vSGddVNJCrtreGOrH56WILy8wYAEhdQ9AF0pOQ8Hh9M3wSw4pj3saApR2bkL
WFm7MMxoHrtU0cADJqntsx21zrTNQiY6c8EIBKlo0eOD3e0vtVIzyaIkZgwNxOK5
eD/cXyEBFbstMjGeEC2bpVlYOTURHKaqo6miNivBXxylX57fiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBsXRgy4yKkZ5TL7noq8nYq1dVIEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYzQ5Y2M0NjMtZjI4My0z
NzQ4LWEzMGMtZjMzOTQ3MjY2OTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJprMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADntD2AmFXtq0oDJzz6BBoaZbbenNWVC3qcgCfRDQMY7aE3H60icqypk
uAh0HHIzYYkinipxevwPZdDfTHZZIzG5AmYJpkhEgg6RJbmTIg13eZ7Qd8tC5z+5
kstXKJ/+viCgnNZ28czX09oo3PhXwMNdERtVJ873lgvJVQSxDnVWZyZJlTGhhla3
DwaeZ7G9CSQoXPva0tuvmcqzObOLxj3WWd/BTip2bru26kczm00wzZgYEJ/0jtDG
Fzl0PRR4rXi0nbNIFwswbgv84Nz6cVYRyjS6GcKlUalgfYfEyZJeuUJL0DV88hoS
jtJ7LjrOcXX0zr3TLD/lMazg5xioebw=
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:06:53 2024 by rpki-client on console-ams.rpki-client.org