Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c5dc36e5-dfe6-343f-86cc-3fe583180ca8.roa
File:                     c5dc36e5-dfe6-343f-86cc-3fe583180ca8.roa (raw, json)
Hash identifier:          vv/0F3C8KDB1tlQNt1HagHid/iTS/Hg9eeBbeNJfMRk=
Subject key identifier:   A6:1B:34:B2:C1:7E:5D:EC:79:0E:E5:DB:B7:99:BF:34:00:F7:5C:14
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847DDCA360F9F1C7273972CD280
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c5dc36e5-dfe6-343f-86cc-3fe583180ca8.roa
Signing time:             Wed 13 Nov 2024 14:00:39 +0000
ROA not before:           Wed 13 Nov 2024 14:00:39 +0000
ROA not after:            Tue 11 Feb 2025 14:00:39 +0000
asID:                     12008
IP address blocks:        156.154.158.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dd:ca:36:0f:9f:1c:72:73:97:2c:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Nov 13 14:00:39 2024 GMT
            Not After : Feb 11 14:00:39 2025 GMT
        Subject: CN=21ce0849-bb72-463d-8517-a704e683e5d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:18:e5:5d:19:77:68:9e:3e:33:81:a7:1c:75:
                    93:1d:85:ec:8d:58:84:5c:33:d6:97:1d:6e:2f:02:
                    1a:18:47:08:5a:4a:92:19:6f:ff:5e:c9:d6:d8:8f:
                    93:3e:32:a3:c9:0f:83:18:bf:14:2f:29:5b:c3:b9:
                    ef:9b:b0:b9:ff:7f:08:e4:28:b2:ce:7a:fd:05:7d:
                    24:9d:84:9d:4c:4d:fc:98:2c:74:10:c8:20:92:0e:
                    58:3f:49:99:27:f4:a4:01:f6:9e:ab:5d:c2:ea:b9:
                    d0:3b:47:81:c1:58:42:3c:71:68:b2:a5:0f:ae:fe:
                    49:ed:fa:5a:8d:22:7c:76:ca:75:d8:53:13:f3:06:
                    3e:88:c6:7b:e2:17:0c:5a:87:ee:a4:69:46:79:9a:
                    83:de:84:13:30:df:75:9c:6e:90:ed:4a:3a:71:74:
                    c4:3a:76:64:d3:95:27:37:d7:6b:c2:63:14:8f:6e:
                    a7:a2:7b:3a:4c:40:a2:1a:65:fd:32:0e:03:75:66:
                    f6:86:e8:52:f8:00:57:fd:d7:33:80:d4:b7:8b:7d:
                    4d:ad:de:48:16:fb:4f:a7:29:09:f3:b6:d8:04:d5:
                    b4:b1:54:99:f3:6a:69:23:71:18:be:8c:3d:b6:61:
                    69:d2:59:46:7d:51:0f:ed:e3:2e:e4:bb:69:c2:05:
                    73:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:1B:34:B2:C1:7E:5D:EC:79:0E:E5:DB:B7:99:BF:34:00:F7:5C:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c5dc36e5-dfe6-343f-86cc-3fe583180ca8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:46:9e:64:e3:ec:11:75:43:63:63:66:00:f6:4f:b5:9b:38:
         9e:c5:63:fa:ce:8d:75:a1:5e:da:87:b3:0d:3c:eb:3c:65:7e:
         2e:97:74:04:99:b8:e8:91:6a:ff:0d:ae:b7:0c:9c:8d:81:af:
         26:b6:ad:26:fa:b7:24:f9:b5:4c:96:35:e6:42:79:06:ca:ad:
         42:54:21:31:50:2b:57:dc:67:e7:99:b4:04:86:af:27:bb:b0:
         f5:3d:72:24:58:12:a2:f1:7e:99:bd:1b:b0:2e:6a:ca:e3:71:
         03:9d:7b:b7:84:42:58:8e:26:e3:00:02:ac:6c:11:3f:d3:d3:
         4b:ef:d3:81:08:04:de:ce:80:5e:ba:f5:ec:99:4e:5d:ac:ef:
         f5:7c:96:59:0c:9d:98:85:77:75:80:d0:e3:51:e0:28:6f:3f:
         86:43:5e:ce:3e:0e:7e:20:9f:d9:2f:45:55:27:01:24:98:fe:
         52:aa:ac:10:a3:6e:0d:e4:32:85:22:7f:1f:ec:4a:af:8b:81:
         30:e3:64:05:d7:a6:16:f2:61:ff:b6:8e:4e:95:89:e4:eb:8a:
         62:42:d2:7d:1f:3d:18:cb:9c:a2:4f:a7:44:16:72:39:37:fc:
         0c:43:69:b5:b5:3f:c2:7d:0d:17:8d:ac:af:9e:47:78:40:e9:
         0c:e2:ae:ad
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfdyjYPnxxyc5cs0oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI0MTExMzE0MDAzOVoXDTI1MDIxMTE0MDAzOVowLzEtMCsGA1UEAxMk
MjFjZTA4NDktYmI3Mi00NjNkLTg1MTctYTcwNGU2ODNlNWQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RjlXRl3aJ4+M4GnHHWTHYXsjViEXDPWlx1u
LwIaGEcIWkqSGW//XsnW2I+TPjKjyQ+DGL8ULylbw7nvm7C5/38I5Ciyznr9BX0k
nYSdTE38mCx0EMggkg5YP0mZJ/SkAfaeq13C6rnQO0eBwVhCPHFosqUPrv5J7fpa
jSJ8dsp12FMT8wY+iMZ74hcMWofupGlGeZqD3oQTMN91nG6Q7Uo6cXTEOnZk05Un
N9drwmMUj26nons6TECiGmX9Mg4DdWb2huhS+ABX/dczgNS3i31Nrd5IFvtPpykJ
87bYBNW0sVSZ82ppI3EYvow9tmFp0llGfVEP7eMu5LtpwgVzLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKYbNLLBfl3seQ7l27eZvzQA91wUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYzVkYzM2ZTUtZGZlNi0z
NDNmLTg2Y2MtM2ZlNTgzMTgwY2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF9GnmTj7BF1Q2NjZgD2T7WbOJ7FY/rOjXWhXtqHsw086zxlfi6XdASZ
uOiRav8NrrcMnI2Brya2rSb6tyT5tUyWNeZCeQbKrUJUITFQK1fcZ+eZtASGrye7
sPU9ciRYEqLxfpm9G7AuasrjcQOde7eEQliOJuMAAqxsET/T00vv04EIBN7OgF66
9eyZTl2s7/V8llkMnZiFd3WA0ONR4ChvP4ZDXs4+Dn4gn9kvRVUnASSY/lKqrBCj
bg3kMoUifx/sSq+LgTDjZAXXphbyYf+2jk6VieTrimJC0n0fPRjLnKJPp0QWcjk3
/AxDabW1P8J9DReNrK+eR3hA6Qzirq0=
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:06:54 2024 by rpki-client on console-ams.rpki-client.org