Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cddca02d-1cf5-3904-a8cd-a66bf6d3a986.roa
File:                     cddca02d-1cf5-3904-a8cd-a66bf6d3a986.roa (raw, json)
Hash identifier:          Ol4EnyBS5q7iWNFomruJqJpqPwxCT/548b7ynXrb350=
Subject key identifier:   22:AE:E9:85:88:8A:5F:C2:6F:E9:48:8C:37:AF:96:D8:EF:AC:95:34
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847CA3F6D00C3D66EBEC1E3E300
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cddca02d-1cf5-3904-a8cd-a66bf6d3a986.roa
Signing time:             Wed 06 Nov 2024 14:00:41 +0000
ROA not before:           Wed 06 Nov 2024 14:00:41 +0000
ROA not after:            Tue 04 Feb 2025 14:00:41 +0000
asID:                     397225
IP address blocks:        156.154.157.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:3f:6d:00:c3:d6:6e:be:c1:e3:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Nov  6 14:00:41 2024 GMT
            Not After : Feb  4 14:00:41 2025 GMT
        Subject: CN=8131281b-daee-46fa-8282-0fb8e8ce59a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:fb:f3:70:c0:0e:91:8c:29:21:a6:36:dd:ae:
                    dd:48:26:80:2d:d0:d6:99:af:15:90:2e:2a:89:81:
                    9c:e7:34:7e:a3:f1:72:58:6e:3e:11:43:5f:72:be:
                    37:bd:a8:92:63:b3:a4:5c:ce:31:96:42:aa:57:57:
                    8a:5d:a9:63:e1:15:ec:ed:04:94:3b:1d:ed:96:24:
                    e5:46:50:c8:1f:66:ed:e2:92:b2:de:74:7f:3e:b2:
                    be:9b:36:c1:1c:be:3a:09:f3:05:97:a1:89:ef:53:
                    43:56:bb:c4:28:8d:fb:e1:9e:13:f3:e2:3e:95:ff:
                    80:92:e3:fe:c6:52:fe:07:9f:26:f3:0d:d7:89:53:
                    ad:c7:01:71:88:05:ea:4e:da:5c:f6:92:d4:41:ae:
                    6a:a9:d3:ed:13:63:eb:c8:74:e5:2b:bf:81:9e:6a:
                    41:73:e0:48:fb:3b:81:10:df:28:af:10:d2:d8:0f:
                    b0:99:30:74:d9:a6:e4:16:ec:df:1f:22:05:5c:cd:
                    10:ad:d6:cb:8d:92:e1:38:c9:9d:b8:33:ed:5e:20:
                    f4:2f:0c:8d:7f:79:b2:5a:30:50:f8:ad:ea:ea:3b:
                    37:c8:9f:45:f7:40:70:26:9a:ec:8a:1f:40:5c:42:
                    2f:9c:83:9c:96:62:ed:9f:d0:3e:df:fc:57:2b:5a:
                    d9:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:AE:E9:85:88:8A:5F:C2:6F:E9:48:8C:37:AF:96:D8:EF:AC:95:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cddca02d-1cf5-3904-a8cd-a66bf6d3a986.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:fd:8f:30:79:b6:08:3e:86:d3:f8:f7:69:83:a8:8a:20:b7:
         8d:02:27:70:63:8d:8d:e1:d2:bb:c8:0f:47:ec:1c:89:84:84:
         d9:94:5f:cd:cf:80:36:23:68:a5:47:72:d9:2c:f8:43:25:0f:
         6f:18:53:15:f2:b1:12:75:8a:c1:75:7c:a8:7d:f2:4f:d6:98:
         58:b9:09:4c:c7:f0:0d:68:18:3a:a5:ee:34:d7:fb:51:2c:a8:
         bc:3c:70:df:2b:b5:80:2b:f2:66:ea:b9:b7:97:0b:2a:7f:fc:
         cb:bc:0c:17:a8:27:57:85:5f:d2:26:96:b8:08:18:10:a9:78:
         dc:0e:6e:7d:13:68:fa:e5:a6:4d:2b:82:d5:03:bc:a9:ef:80:
         f3:53:2e:31:72:4f:48:64:84:58:ed:00:21:65:e6:02:61:6d:
         97:51:f0:10:29:89:cf:e4:2c:93:a6:35:73:fe:cd:a8:dc:34:
         51:07:a7:b4:2a:30:3e:94:19:29:88:e8:8c:ba:dc:2e:10:ff:
         86:f0:85:25:d1:90:2f:69:74:fe:14:ad:76:71:50:d6:0c:5c:
         d5:28:13:bb:6d:c0:3f:73:ad:62:93:7f:60:4b:51:bb:15:07:
         a8:eb:41:7d:5f:f9:44:96:0b:7b:90:7a:36:1f:fe:c6:e1:19:
         a8:46:7f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:05:41 2024 by rpki-client on console-fra.rpki-client.org