Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ce8dd4e6-fdd6-3dd5-9c0b-2cccbc4bcfd8.roa
File:                     ce8dd4e6-fdd6-3dd5-9c0b-2cccbc4bcfd8.roa (raw, json)
Hash identifier:          tjR4/9E56YtDdEMuXX0QVM8uvdDtcDJbtIREMw5ySIo=
Subject key identifier:   09:F0:05:DD:B6:6F:34:E2:EC:5B:AC:9D:7B:47:B4:7D:29:1D:8B:FA
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847CA3F6A881C87AA1792EFA780
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ce8dd4e6-fdd6-3dd5-9c0b-2cccbc4bcfd8.roa
Signing time:             Wed 06 Nov 2024 14:00:41 +0000
ROA not before:           Wed 06 Nov 2024 14:00:41 +0000
ROA not after:            Tue 04 Feb 2025 14:00:41 +0000
asID:                     12008
IP address blocks:        156.154.159.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:3f:6a:88:1c:87:aa:17:92:ef:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Nov  6 14:00:41 2024 GMT
            Not After : Feb  4 14:00:41 2025 GMT
        Subject: CN=d5403f1d-d518-4a16-93d7-f6a5e57536d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a0:ca:be:61:95:9b:61:e6:df:46:53:64:21:
                    dc:5b:91:96:09:6a:d3:56:fb:39:c3:45:0f:58:70:
                    70:3d:a9:04:33:ee:78:c6:cb:43:ed:f3:fd:dd:dc:
                    71:63:fb:93:7a:84:b7:31:63:5d:19:49:ee:0f:d0:
                    4d:26:ba:3a:78:eb:40:44:2f:f5:83:c7:cb:f8:d0:
                    94:61:d6:d1:6b:67:72:77:31:41:0a:f7:7b:6d:22:
                    43:98:a4:41:23:85:48:ef:16:6a:5d:02:2c:30:b4:
                    4f:3a:0b:7b:be:cc:66:33:33:42:4f:3b:2d:d8:f4:
                    71:b9:f3:76:c0:2f:d1:46:95:e2:18:02:11:9f:41:
                    4c:52:f2:53:31:9f:f2:44:d9:3e:fb:86:db:54:69:
                    78:76:ab:c6:60:dc:68:6d:33:9c:bf:c0:fd:16:18:
                    4f:51:e5:ca:9f:78:86:72:56:46:f6:f8:49:fd:d2:
                    ed:81:dd:a7:15:02:25:19:b6:8f:f3:cf:4a:d5:dc:
                    e9:63:46:9a:8b:0c:9f:d1:1f:f4:62:fa:83:b2:81:
                    d5:11:01:9a:7e:96:6d:35:70:31:5f:2d:68:1b:70:
                    53:c9:55:f5:13:62:34:b5:a1:4e:cc:aa:25:4b:49:
                    78:b5:52:4c:a5:3d:30:9b:c7:69:8a:ca:ba:14:fb:
                    d5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:F0:05:DD:B6:6F:34:E2:EC:5B:AC:9D:7B:47:B4:7D:29:1D:8B:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ce8dd4e6-fdd6-3dd5-9c0b-2cccbc4bcfd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:54:4a:98:57:f6:46:6f:bc:48:33:ee:e9:31:ce:13:3a:7f:
         b3:d1:61:b1:84:d4:63:04:25:f7:4f:dc:5a:c7:9e:72:2f:89:
         49:f4:c2:5d:b4:76:dc:ba:cb:b8:cf:c2:83:2e:cc:20:bd:29:
         1c:e3:c9:36:b5:12:f1:73:e7:db:43:59:b5:ff:31:3c:3e:4d:
         69:c6:30:ae:5b:60:4b:81:00:dd:cd:48:92:3b:f8:79:07:ae:
         97:a3:17:8b:2c:ab:ca:9f:cd:74:4f:c5:b3:7e:4f:77:55:17:
         fd:fb:06:93:05:d9:da:b7:fa:4d:80:2e:68:9b:05:c3:32:d1:
         2b:14:17:65:15:03:57:1f:19:e4:07:91:f5:55:80:8b:85:03:
         b7:74:1e:a8:f0:46:04:c3:e7:66:28:bb:72:a8:1f:b7:98:dd:
         e0:8c:6e:b4:e2:b7:2b:54:f4:5f:ed:df:4e:b4:05:2c:2c:d9:
         2f:c9:fd:fd:84:c1:5c:3c:55:ab:3f:f1:af:30:c9:58:47:33:
         39:cc:e3:70:70:d5:cc:32:25:83:b0:09:da:24:d6:d0:7d:23:
         f1:f0:4f:32:b8:72:e6:b6:2f:ac:f6:8d:9d:7b:1c:e3:6c:a3:
         63:f0:98:5b:5c:22:a2:74:a1:c3:53:9b:4c:32:ee:2b:4f:d2:
         3c:aa:d2:5a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfKP2qIHIeqF5Lvp4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI0MTEwNjE0MDA0MVoXDTI1MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk
ZDU0MDNmMWQtZDUxOC00YTE2LTkzZDctZjZhNWU1NzUzNmQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6DKvmGVm2Hm30ZTZCHcW5GWCWrTVvs5w0UP
WHBwPakEM+54xstD7fP93dxxY/uTeoS3MWNdGUnuD9BNJro6eOtARC/1g8fL+NCU
YdbRa2dydzFBCvd7bSJDmKRBI4VI7xZqXQIsMLRPOgt7vsxmMzNCTzst2PRxufN2
wC/RRpXiGAIRn0FMUvJTMZ/yRNk++4bbVGl4dqvGYNxobTOcv8D9FhhPUeXKn3iG
clZG9vhJ/dLtgd2nFQIlGbaP889K1dzpY0aaiwyf0R/0YvqDsoHVEQGafpZtNXAx
Xy1oG3BTyVX1E2I0taFOzKolS0l4tVJMpT0wm8dpisq6FPvVIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAnwBd22bzTi7FusnXtHtH0pHYv6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvY2U4ZGQ0ZTYtZmRkNi0z
ZGQ1LTljMGItMmNjY2JjNGJjZmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFhUSphX9kZvvEgz7ukxzhM6f7PRYbGE1GMEJfdP3FrHnnIviUn0wl20
dty6y7jPwoMuzCC9KRzjyTa1EvFz59tDWbX/MTw+TWnGMK5bYEuBAN3NSJI7+HkH
rpejF4ssq8qfzXRPxbN+T3dVF/37BpMF2dq3+k2ALmibBcMy0SsUF2UVA1cfGeQH
kfVVgIuFA7d0HqjwRgTD52You3KoH7eY3eCMbrTitytU9F/t3060BSws2S/J/f2E
wVw8Vas/8a8wyVhHMznM43Bw1cwyJYOwCdok1tB9I/HwTzK4cua2L6z2jZ17HONs
o2PwmFtcIqJ0ocNTm0wy7itP0jyq0lo=
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:06:54 2024 by rpki-client on console-ams.rpki-client.org