Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c578e704-82ca-3e1f-bf32-db7d95fcae74.roa
File:                     c578e704-82ca-3e1f-bf32-db7d95fcae74.roa (raw, json)
Hash identifier:          ZnrupuBIt3DYGft1Yc1bsQ0TZtvIaGYe3mHv49l48p0=
Subject key identifier:   7B:5B:7E:A5:39:EB:3D:F3:CB:64:5C:2F:C0:9A:3D:E7:C3:12:B6:DB
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847CA3F620F263237C3587DD040
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c578e704-82ca-3e1f-bf32-db7d95fcae74.roa
Signing time:             Wed 06 Nov 2024 14:00:41 +0000
ROA not before:           Wed 06 Nov 2024 14:00:41 +0000
ROA not after:            Tue 04 Feb 2025 14:00:41 +0000
asID:                     397231
IP address blocks:        156.154.69.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:3f:62:0f:26:32:37:c3:58:7d:d0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Nov  6 14:00:41 2024 GMT
            Not After : Feb  4 14:00:41 2025 GMT
        Subject: CN=2e9eb5a8-c08a-4d32-abb1-1576cca7b379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:84:92:f3:86:ac:69:60:08:76:80:e1:18:0d:
                    e8:90:4b:e9:83:b1:73:ac:48:a8:2b:94:bd:ce:1c:
                    47:8e:1d:57:af:78:0b:f6:da:e2:ab:99:0b:06:d1:
                    9c:7d:13:1b:fb:54:81:42:6f:59:06:fa:dd:7a:c4:
                    8b:a2:fd:de:eb:83:55:a1:1f:72:b9:97:7b:48:4a:
                    97:c4:ba:94:44:f0:20:48:96:56:30:c1:82:12:27:
                    25:7a:93:7b:38:d7:af:31:54:02:ed:ab:d5:cf:85:
                    c5:8c:fd:57:be:55:80:aa:df:c4:b7:af:90:71:8e:
                    46:0b:cb:98:93:7e:90:06:d9:e9:83:02:88:96:10:
                    fe:fe:74:2e:fc:d0:0d:f7:19:ea:07:fd:dd:e4:e8:
                    93:2b:1c:6a:bc:40:50:70:ef:86:7f:8a:e6:d1:7b:
                    ad:56:c7:c1:59:87:e2:61:a0:14:4f:7a:db:a3:55:
                    58:96:c7:bf:a3:87:e2:4f:db:cb:c8:29:bd:17:ee:
                    da:e7:fa:0f:bd:55:d0:54:2f:9e:00:09:1e:51:fb:
                    bc:5a:97:f7:df:02:41:33:b3:7b:02:7a:ae:38:6b:
                    fa:af:a2:4d:19:0b:fa:1e:5e:48:d0:f8:83:d2:40:
                    bf:d8:40:84:20:b4:8e:c0:76:6e:31:61:a8:16:ed:
                    a2:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:5B:7E:A5:39:EB:3D:F3:CB:64:5C:2F:C0:9A:3D:E7:C3:12:B6:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c578e704-82ca-3e1f-bf32-db7d95fcae74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:d2:25:d5:f8:ba:28:86:34:2c:20:08:31:d9:59:27:83:ff:
         c2:5c:d0:5c:f9:e6:eb:2d:c1:1b:f1:cd:3b:5d:08:68:89:da:
         51:43:23:c7:c5:37:89:75:8c:87:b0:ec:ea:77:4e:2a:48:92:
         59:10:64:3a:30:ad:87:5a:c4:53:d5:90:1c:ec:ac:7a:3f:09:
         8e:70:46:68:69:67:39:b4:5e:9b:e2:b7:a6:46:f1:59:df:b3:
         75:82:89:37:31:ae:d7:f5:9e:10:17:0c:b4:fd:cd:08:51:20:
         15:72:63:6c:35:cf:93:cb:d5:da:f1:0c:90:59:15:fb:91:eb:
         f0:2a:e7:3c:fe:0c:c9:f7:ad:8b:2b:dd:ce:62:6f:fa:66:32:
         81:81:fa:97:cf:5d:73:4f:d2:73:b0:25:a3:b2:df:fe:bd:f1:
         9d:7e:02:29:bc:db:8a:19:15:62:7c:18:e5:bf:f7:d3:c9:e5:
         3b:dc:8d:aa:42:69:9b:b4:5c:9b:c3:90:81:22:51:2b:4e:cc:
         53:73:dd:c7:8f:3e:3e:20:26:2a:de:20:a3:8f:4d:1f:14:29:
         4f:90:45:47:89:e7:30:a8:95:6f:9c:f6:06:8d:75:7e:42:cd:
         ec:30:8c:45:0d:ee:d6:ac:c5:f0:f7:e2:b0:45:46:67:ed:f9:
         19:9d:76:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:06:54 2024 by rpki-client on console-ams.rpki-client.org