Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d675264f-bd24-39d9-9f0a-fe0dcbc34d4a.roa
File:                     d675264f-bd24-39d9-9f0a-fe0dcbc34d4a.roa (raw, json)
Hash identifier:          DbOMWUoduabV2bJsekrBI2zcKSrFbF04/z3P+Zp6eqk=
Subject key identifier:   A3:D6:A7:F6:6A:6A:B4:53:0C:B5:F2:44:D6:50:A2:35:6A:85:B8:84
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847B10173919AC6B6F4F34AEE40
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d675264f-bd24-39d9-9f0a-fe0dcbc34d4a.roa
Signing time:             Mon 28 Oct 2024 13:00:40 +0000
ROA not before:           Mon 28 Oct 2024 13:00:40 +0000
ROA not after:            Sun 26 Jan 2025 14:00:40 +0000
asID:                     397218
IP address blocks:        156.154.102.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b1:01:73:91:9a:c6:b6:f4:f3:4a:ee:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Oct 28 13:00:40 2024 GMT
            Not After : Jan 26 14:00:40 2025 GMT
        Subject: CN=1b5f06c3-6200-469b-8541-df0064c53444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2d:c9:aa:d8:b6:41:2e:8f:88:6c:0a:68:cb:
                    61:f5:f6:8e:b4:25:44:8d:97:84:13:31:53:93:02:
                    3b:ed:cc:69:09:95:7f:dc:79:75:33:17:71:1b:fd:
                    8f:d2:f1:c0:ee:2e:e2:6b:e8:91:3e:60:ed:c1:e5:
                    fd:4c:bb:2e:f9:be:4f:6a:2e:7f:51:ad:61:1b:28:
                    78:95:d5:99:db:d8:a2:dd:7c:26:c0:c3:71:ce:0a:
                    a1:66:e1:e7:14:60:7c:03:cf:ad:17:77:2c:0b:b0:
                    7e:2a:fb:59:e8:58:61:a4:9a:d4:4e:fc:e9:7c:34:
                    c4:c4:54:24:df:37:b9:7e:70:0a:c3:b3:be:cd:f3:
                    ab:9b:01:db:5a:f3:26:42:c7:1b:dd:85:d7:e5:b3:
                    6a:7f:fb:3b:49:8d:5b:fd:d8:12:f9:0f:87:9a:ba:
                    f8:93:c2:2c:15:35:b4:10:81:3e:5f:a6:d1:07:9f:
                    33:ea:c6:27:4f:cb:2d:0f:b5:dc:96:aa:40:5d:8e:
                    17:c1:0f:6d:2b:e3:82:c5:2e:34:d1:b2:13:3b:2f:
                    9f:ae:aa:cd:5f:b0:b0:ef:e5:f8:45:45:7e:d2:42:
                    66:12:2c:8e:01:63:20:7d:b0:8d:ee:66:0d:ed:08:
                    b0:fe:93:4f:15:f7:d9:0c:6d:5a:a8:6b:a6:ef:32:
                    15:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:D6:A7:F6:6A:6A:B4:53:0C:B5:F2:44:D6:50:A2:35:6A:85:B8:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d675264f-bd24-39d9-9f0a-fe0dcbc34d4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:da:18:84:6f:8e:c2:3b:e2:20:d9:5f:26:3f:a1:99:b6:a6:
         b3:e7:91:ac:b4:aa:1e:74:d3:d2:61:94:68:cd:73:79:e8:ed:
         2b:48:5a:8a:51:28:bb:de:f5:fd:fb:c0:52:86:ff:3f:40:40:
         f5:26:77:bf:59:c8:73:88:94:ee:31:d3:fb:18:6a:f1:83:41:
         d0:44:df:8a:6a:70:ea:6e:8a:20:43:a9:31:a7:e1:39:71:67:
         71:82:b2:1e:fd:45:c4:71:ed:a0:d6:6e:f2:65:1b:77:07:b6:
         5f:98:42:6e:c1:1e:db:77:40:b7:8d:1c:6f:a1:8e:b5:bc:db:
         7c:53:f8:12:1e:86:f5:ba:90:a0:ce:7e:88:c9:63:16:81:ac:
         6f:7f:f4:b8:d7:7e:fb:b9:a2:b7:ec:d9:12:63:cc:05:11:e9:
         59:c9:1e:83:de:da:ee:97:41:2c:f3:df:a2:48:5d:62:d4:e9:
         6d:a7:09:96:6c:d0:bc:ff:93:51:f6:02:4f:c8:5b:73:08:fa:
         a7:e6:a3:53:8a:0a:8a:24:d6:34:d9:3e:9e:2b:0b:c6:17:4c:
         e9:0a:4d:a0:11:17:c1:24:93:3d:7f:44:43:3b:20:3c:8b:5a:
         ff:6d:eb:1f:d3:59:3d:16:b6:7d:5b:4c:28:a0:36:c6:4d:32:
         96:73:46:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:06:55 2024 by rpki-client on console-ams.rpki-client.org