Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c8455191-4028-3ff3-88e9-e3cbce50a975.roa
File:                     c8455191-4028-3ff3-88e9-e3cbce50a975.roa (raw, json)
Hash identifier:          JxYUjWzbXmc2GwM4kNEHYZ1gmbaQ6fqsxSHcmCuoSkQ=
Subject key identifier:   18:CF:16:85:08:1C:D3:7F:4D:10:8E:7D:1D:CB:0C:21:69:58:11:07
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847CA3F6C486C9B5284666ECF80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c8455191-4028-3ff3-88e9-e3cbce50a975.roa
Signing time:             Wed 06 Nov 2024 14:00:41 +0000
ROA not before:           Wed 06 Nov 2024 14:00:41 +0000
ROA not after:            Tue 04 Feb 2025 14:00:41 +0000
asID:                     12008
IP address blocks:        156.154.157.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:3f:6c:48:6c:9b:52:84:66:6e:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Nov  6 14:00:41 2024 GMT
            Not After : Feb  4 14:00:41 2025 GMT
        Subject: CN=704cbaeb-b139-4865-a240-bad010dab575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4e:eb:e6:76:0f:73:d4:df:1d:98:6b:52:00:
                    24:5c:bf:00:3b:75:22:45:aa:22:7a:5e:00:5e:31:
                    6c:22:d8:d6:02:14:82:48:f8:61:c4:a7:d3:bd:6e:
                    ce:c7:41:7b:c2:4f:31:58:9d:1b:1c:b0:aa:79:00:
                    e1:1c:03:f4:b7:d9:42:80:f8:3f:74:00:62:d0:f8:
                    e8:6f:23:d7:c7:ea:9c:c3:3d:d4:57:c9:b8:71:7a:
                    5a:fe:8a:8b:50:05:ee:6e:8b:03:f4:fa:f8:ef:b8:
                    7e:e2:52:00:84:12:26:5a:a4:11:2c:b2:e7:4e:c9:
                    44:94:8a:af:b5:de:ae:42:cf:23:04:04:f3:4c:20:
                    52:98:b1:10:24:6b:2f:ba:77:92:cb:7f:5f:43:71:
                    e0:3a:8b:b2:fe:44:da:e7:98:e5:fe:c1:23:41:21:
                    73:28:a9:da:65:03:28:88:d8:2d:33:c0:23:a2:0e:
                    47:cd:20:a6:49:33:7d:87:63:7a:e4:0b:65:b1:8a:
                    6b:6e:c3:4b:b0:1f:ac:6f:be:18:75:f0:3f:38:3e:
                    0a:87:35:35:ec:66:d3:0c:54:a6:2f:02:32:bf:40:
                    49:5d:4f:b7:55:2a:32:04:2b:0c:bf:2f:0c:2f:31:
                    26:fe:bc:29:15:58:75:2c:8e:5b:b0:30:e0:d7:43:
                    ef:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:CF:16:85:08:1C:D3:7F:4D:10:8E:7D:1D:CB:0C:21:69:58:11:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c8455191-4028-3ff3-88e9-e3cbce50a975.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:3d:a9:f4:16:28:a5:a8:b9:a6:4d:73:a0:c7:29:cc:cf:7e:
         8e:13:f0:34:15:fd:f9:b1:15:fb:5c:34:90:e2:9b:42:e1:9d:
         d2:27:81:48:da:85:55:72:45:72:f7:da:a3:c1:0e:98:53:23:
         89:da:bf:8a:7d:79:ae:29:b5:e8:56:cf:7c:9c:6b:f4:ef:f5:
         ec:59:14:56:91:4c:75:1b:fe:7d:c5:32:7e:3a:e4:4e:69:df:
         88:0e:05:3c:67:46:eb:5e:cb:3f:c5:a6:dd:dc:70:c2:96:03:
         35:97:07:2c:96:de:5f:7d:8a:9c:eb:2c:4e:c2:36:48:7a:19:
         ed:89:2b:81:02:8f:0a:64:5f:21:2f:61:9c:0d:c4:76:71:5a:
         07:81:0d:23:d0:77:84:66:ed:8f:34:46:90:2e:8f:db:88:65:
         57:07:9c:3e:fd:28:c4:2f:e7:ba:44:30:f3:b6:e8:4a:1d:d1:
         13:3a:b8:a2:85:19:c2:24:d9:96:3a:21:bc:a3:48:03:21:17:
         0b:04:42:b7:91:f0:29:10:49:78:9f:dd:4f:14:2e:97:e1:f2:
         3d:1b:f9:ce:f5:6d:5e:ee:cb:2c:06:32:a5:8c:04:53:0b:8b:
         eb:54:9b:fb:29:54:6e:b3:b1:4f:16:aa:85:9b:9c:91:72:73:
         9f:dd:69:25
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfKP2xIbJtShGZuz4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI0MTEwNjE0MDA0MVoXDTI1MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk
NzA0Y2JhZWItYjEzOS00ODY1LWEyNDAtYmFkMDEwZGFiNTc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsU7r5nYPc9TfHZhrUgAkXL8AO3UiRaoiel4A
XjFsItjWAhSCSPhhxKfTvW7Ox0F7wk8xWJ0bHLCqeQDhHAP0t9lCgPg/dABi0Pjo
byPXx+qcwz3UV8m4cXpa/oqLUAXubosD9Pr477h+4lIAhBImWqQRLLLnTslElIqv
td6uQs8jBATzTCBSmLEQJGsvuneSy39fQ3HgOouy/kTa55jl/sEjQSFzKKnaZQMo
iNgtM8Ajog5HzSCmSTN9h2N65AtlsYprbsNLsB+sb74YdfA/OD4KhzU17GbTDFSm
LwIyv0BJXU+3VSoyBCsMvy8MLzEm/rwpFVh1LI5bsDDg10PvuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBjPFoUIHNN/TRCOfR3LDCFpWBEHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYzg0NTUxOTEtNDAyOC0z
ZmYzLTg4ZTktZTNjYmNlNTBhOTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHg9qfQWKKWouaZNc6DHKczPfo4T8DQV/fmxFftcNJDim0LhndIngUja
hVVyRXL32qPBDphTI4nav4p9ea4ptehWz3yca/Tv9exZFFaRTHUb/n3FMn465E5p
34gOBTxnRuteyz/Fpt3ccMKWAzWXByyW3l99ipzrLE7CNkh6Ge2JK4ECjwpkXyEv
YZwNxHZxWgeBDSPQd4Rm7Y80RpAuj9uIZVcHnD79KMQv57pEMPO26Eod0RM6uKKF
GcIk2ZY6IbyjSAMhFwsEQreR8CkQSXif3U8ULpfh8j0b+c71bV7uyywGMqWMBFML
i+tUm/spVG6zsU8WqoWbnJFyc5/daSU=
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:06:54 2024 by rpki-client on console-ams.rpki-client.org