Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c56fde7d-5c0d-3f7a-ab1f-ea5d51bd25f1.roa
File:                     c56fde7d-5c0d-3f7a-ab1f-ea5d51bd25f1.roa (raw, json)
Hash identifier:          F63+kCAcl/WDq32hS5UIGAieDGOWfpXh1NhdFydVHbI=
Subject key identifier:   DD:CC:8F:80:44:C1:2E:C1:6B:9E:2B:51:43:DF:34:B4:E5:64:45:C6
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847527CAB952435309BCEA9E000
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c56fde7d-5c0d-3f7a-ab1f-ea5d51bd25f1.roa
Signing time:             Tue 24 Sep 2024 16:27:26 +0000
ROA not before:           Tue 24 Sep 2024 16:27:26 +0000
ROA not after:            Mon 23 Dec 2024 17:27:26 +0000
asID:                     397216
IP address blocks:        156.154.111.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:52:7c:ab:95:24:35:30:9b:ce:a9:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 24 16:27:26 2024 GMT
            Not After : Dec 23 17:27:26 2024 GMT
        Subject: CN=396ec53b-5231-478a-8d66-2731146b5276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c9:4c:9c:04:2e:3a:8d:b5:90:12:50:88:3f:
                    a6:7e:c1:2b:f8:77:1d:b7:01:68:74:95:d1:30:4d:
                    3f:6c:7f:5f:e2:32:e9:46:1e:88:58:cf:80:a9:cb:
                    b9:ef:7f:05:e4:a6:56:81:8b:f3:aa:39:cd:3a:86:
                    d2:b2:0a:5c:f4:42:4d:05:8a:af:23:c0:23:3b:88:
                    6b:2f:96:02:76:43:e1:87:54:c8:d2:cc:e0:ea:ea:
                    a9:8d:58:f6:c5:90:b1:ad:f9:a1:eb:08:af:f5:c0:
                    dc:50:de:2c:39:a1:3d:61:87:3c:9d:7a:7e:03:2b:
                    d4:68:8c:d1:63:fd:1e:81:90:63:ef:d0:ba:76:f0:
                    d0:60:98:06:3e:dc:cd:74:e5:43:69:4d:9b:53:0f:
                    05:0d:2d:db:1c:a8:5c:02:fc:09:eb:4d:94:bf:f9:
                    a0:38:b7:c6:44:5f:18:35:79:63:c7:94:d6:f4:b9:
                    2d:e0:ca:48:f5:a1:04:28:0b:9e:03:ee:db:80:fd:
                    b3:44:de:18:f8:85:43:2b:8a:22:32:76:c3:71:62:
                    0e:e5:01:c0:84:47:48:72:73:85:9c:83:33:94:1d:
                    57:0a:2b:63:f0:46:90:c0:af:5f:98:14:fa:98:8d:
                    a8:cb:0d:0c:4e:53:ef:7e:1a:79:a1:57:1a:bc:27:
                    22:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:CC:8F:80:44:C1:2E:C1:6B:9E:2B:51:43:DF:34:B4:E5:64:45:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c56fde7d-5c0d-3f7a-ab1f-ea5d51bd25f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:f2:26:e3:d7:b1:aa:3f:31:5a:a1:5f:13:5e:23:b6:2a:b1:
         98:ba:b8:d4:fd:8b:db:26:a2:d0:de:f0:85:94:05:2f:ef:10:
         c2:18:38:26:a7:9f:0d:a0:9d:11:d8:60:cb:7f:62:f7:8a:5a:
         21:fe:ce:17:b6:95:db:7b:e4:6d:66:c7:6f:01:4c:ac:29:47:
         c8:c5:c2:59:36:aa:56:a9:52:8f:1e:1a:3b:13:b2:e2:3d:66:
         5a:3f:e9:c6:6d:8d:6f:69:cd:26:7a:58:4f:f5:65:c0:ed:3a:
         bf:16:1f:f3:4c:9c:05:f9:96:5f:07:d2:72:ca:57:f8:47:54:
         0f:4b:c9:dd:5e:aa:bf:5a:ac:8c:f1:8b:19:60:4a:31:d3:16:
         58:f0:d9:5f:ac:08:97:40:fd:fe:34:e6:fa:35:91:2d:d8:73:
         b9:74:55:54:79:17:ca:88:d0:b9:c1:78:dd:67:3c:68:a0:3c:
         50:60:03:2c:9f:67:14:76:6f:a9:03:b7:91:5c:96:11:de:92:
         a1:f4:7c:30:d3:ac:e6:cf:f5:e1:83:15:d6:09:56:c5:48:d5:
         b3:1a:99:33:0e:d9:77:d5:15:c7:6c:84:62:80:40:a6:59:a1:
         ac:fc:26:94:9b:87:7a:89:5b:de:dc:ff:38:41:11:0e:f6:d4:
         18:07:dc:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:02:15 2024 by rpki-client on console-fra.rpki-client.org