Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d547b71b-e899-3b23-851c-f56c9f64662b.roa
File:                     d547b71b-e899-3b23-851c-f56c9f64662b.roa (raw, json)
Hash identifier:          2z8DsHiFZdg/R8zfzVZ97MeeKmWP3qf4g5EbrNRe16s=
Subject key identifier:   11:31:B2:2F:2A:C5:1A:BD:E9:84:67:CF:D0:5D:A2:F9:20:92:07:E5
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285845CE08FF9D17221E1EFF7C9680
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d547b71b-e899-3b23-851c-f56c9f64662b.roa
Signing time:             Wed 08 May 2024 13:00:34 +0000
ROA not before:           Wed 08 May 2024 13:00:34 +0000
ROA not after:            Tue 06 Aug 2024 13:00:34 +0000
asID:                     397229
IP address blocks:        156.154.54.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ce:08:ff:9d:17:22:1e:1e:ff:7c:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May  8 13:00:34 2024 GMT
            Not After : Aug  6 13:00:34 2024 GMT
        Subject: CN=ac0fec1a-8ea7-4c7b-9efe-c7984769a566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:28:12:33:6c:a7:8b:7f:49:5b:ef:1e:67:3b:
                    32:7e:02:ac:cb:76:e0:2d:cf:b1:98:dd:da:62:aa:
                    a9:0a:3a:fa:85:42:4b:44:94:bd:5b:23:02:6a:80:
                    98:e2:d1:d0:7e:60:31:b5:2e:db:38:6d:30:8a:99:
                    8f:c1:e4:43:cc:36:79:e1:46:a6:17:78:d0:bf:c7:
                    1c:2a:01:ad:47:36:62:4d:50:ee:e8:2e:bb:ba:7c:
                    77:da:49:4f:c3:2e:9a:73:67:76:b4:29:26:a6:7e:
                    13:d9:2e:6f:6a:d5:ef:e5:6b:cf:1d:ff:dc:2a:87:
                    ce:47:5f:de:ff:0e:52:52:c1:96:b2:77:93:3d:42:
                    b5:a5:fd:8f:e0:67:4f:52:47:e4:a0:54:09:eb:68:
                    8b:d9:f5:d3:1b:c4:78:c3:50:e2:39:c6:56:51:6e:
                    38:05:97:7c:71:af:c0:87:8d:b8:5d:9b:f3:cf:cb:
                    d2:e6:6e:15:0f:1f:52:d5:c2:99:a3:a2:41:e2:b8:
                    a8:34:cf:fd:a0:db:ba:39:e6:87:fe:27:94:d0:b8:
                    3f:11:fd:ea:35:a8:af:0d:cb:58:e6:a6:aa:aa:6c:
                    de:ae:2a:97:cc:45:7c:4a:eb:3f:ae:85:97:3a:89:
                    f4:20:c4:a7:82:a9:0e:bf:54:ce:73:68:40:0a:ce:
                    6e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:31:B2:2F:2A:C5:1A:BD:E9:84:67:CF:D0:5D:A2:F9:20:92:07:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d547b71b-e899-3b23-851c-f56c9f64662b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:c2:ac:4c:f9:fd:4b:48:9c:17:5f:b3:ae:f7:22:51:1f:02:
         d3:69:ba:f0:3d:f4:c1:bb:b2:4e:2e:8d:d1:ba:ce:3e:d6:98:
         35:85:6a:44:83:ce:86:e5:1b:f4:bc:17:82:cf:8b:f7:be:1c:
         02:aa:e2:8f:e6:e2:a7:20:89:d3:2d:75:f7:71:36:fc:d9:71:
         03:ed:50:5f:92:5f:33:ed:15:cd:13:93:bb:c7:46:7b:f3:1f:
         af:00:ba:5a:f1:3e:0c:4e:e6:35:ac:27:e8:1e:c2:3f:d1:1a:
         16:a4:fd:58:aa:a4:fb:7e:37:1d:d3:ea:90:d6:1b:0e:95:2b:
         fc:16:b5:45:02:4b:f0:bf:31:fb:98:c0:64:55:f2:fc:1a:90:
         e1:54:5f:83:da:d7:7f:53:2e:9f:72:87:f3:81:99:26:8c:98:
         c6:f2:f4:6f:ca:8a:1b:5f:ae:a1:7b:aa:ed:65:a4:10:d9:a2:
         2c:f4:e3:42:bc:0d:f1:b2:0b:3f:85:0d:9e:7e:7c:07:df:2c:
         0e:bc:7f:ad:3c:a4:92:90:0c:3b:5f:2f:ad:aa:c7:89:78:7f:
         ba:85:ce:88:8e:a8:9d:35:07:12:ba:ee:ca:16:c1:ad:ef:bb:
         64:9a:6f:9a:37:46:e2:d4:27:b0:af:cb:ff:66:bc:72:1e:1a:
         24:1c:a0:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 15:33:38 2024 by rpki-client on console-fra.rpki-client.org