Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d83304d7-2c0a-3ba9-83a5-4402212d62fa.roa
File:                     d83304d7-2c0a-3ba9-83a5-4402212d62fa.roa (raw, json)
Hash identifier:          4/42X+8U2yLLTIsuJNXQnArwe85Ax5zLc01BP+ufXLQ=
Subject key identifier:   FD:5C:AF:D5:F7:2A:AD:18:DD:A8:35:C9:B5:D2:46:2F:87:FA:65:93
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847DDCA14AF09ECA91BBB29F240
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d83304d7-2c0a-3ba9-83a5-4402212d62fa.roa
Signing time:             Wed 13 Nov 2024 14:00:39 +0000
ROA not before:           Wed 13 Nov 2024 14:00:39 +0000
ROA not after:            Tue 11 Feb 2025 14:00:39 +0000
asID:                     397214
IP address blocks:        156.154.143.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dd:ca:14:af:09:ec:a9:1b:bb:29:f2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Nov 13 14:00:39 2024 GMT
            Not After : Feb 11 14:00:39 2025 GMT
        Subject: CN=1a4eea55-3d7c-4009-87ac-15283759fd1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:39:63:b1:05:b9:5f:5b:c7:13:4d:76:68:fa:
                    82:14:6e:2a:31:80:76:ff:e8:26:1a:c9:3a:18:3b:
                    58:f8:ff:da:c6:08:eb:8d:5c:1b:d3:63:b2:a1:df:
                    95:d4:c6:9c:47:51:f7:5b:8c:98:c3:32:5c:bf:9c:
                    80:7e:7f:69:77:97:b8:e0:55:73:1d:8b:16:1d:c8:
                    5f:9a:c9:30:e9:cc:f5:37:79:25:22:8d:66:11:30:
                    ad:8a:21:b1:00:57:16:f2:24:69:53:f7:af:b5:5f:
                    0d:2a:7d:39:46:a1:f6:35:ee:2c:11:51:fc:63:2c:
                    a8:e3:42:69:a3:3e:79:22:1f:0b:ef:56:c4:a4:62:
                    c5:5a:57:18:67:32:31:08:c0:c7:f9:6c:98:c6:24:
                    1c:74:16:19:15:64:68:c3:e2:33:a0:2a:83:3a:80:
                    1f:7f:bc:9e:f3:01:e7:95:8c:d5:0d:93:df:23:a2:
                    6a:f6:22:56:8c:10:fa:21:a9:aa:dd:17:c3:cc:68:
                    16:27:5f:6f:60:b2:b1:63:8b:1c:fc:f4:69:03:9e:
                    f0:c8:a5:a1:a8:9d:dd:f3:48:0c:43:f3:3a:4e:ca:
                    8b:d4:1e:6e:07:b4:39:c1:27:8b:31:4b:a2:01:77:
                    e2:44:9c:3f:3c:87:2d:da:bc:df:7b:24:39:89:12:
                    24:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:5C:AF:D5:F7:2A:AD:18:DD:A8:35:C9:B5:D2:46:2F:87:FA:65:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d83304d7-2c0a-3ba9-83a5-4402212d62fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:de:0b:c7:0e:00:51:0c:e8:1d:32:23:e3:93:90:5a:80:66:
         35:32:79:4d:2c:ef:bf:af:ff:83:83:c0:8a:9d:62:81:f9:1f:
         e1:40:4d:1a:cd:90:75:d0:60:2e:b7:45:38:1d:94:3b:cd:12:
         47:75:af:17:cd:36:81:3a:09:2d:2c:8e:81:6a:ac:02:fc:f0:
         d4:71:2b:3e:65:87:25:9d:40:9f:78:36:10:e9:94:2c:76:34:
         41:c0:d7:2f:5c:56:ab:db:ec:62:45:ce:da:da:f6:2c:ee:3f:
         94:86:5b:25:6b:a5:79:78:e5:8d:e5:c8:10:40:17:51:9e:81:
         f0:89:e8:78:f5:02:de:bf:bc:ca:96:a8:bb:e1:02:97:44:c1:
         af:b5:00:02:34:30:17:6b:4d:0f:81:46:b8:4c:78:f0:fa:92:
         a6:1d:a4:14:11:f8:30:34:7e:35:36:4b:9d:90:06:cb:cb:8b:
         4f:4c:5c:3b:15:3f:ae:d1:20:ab:fb:07:46:e7:8e:71:4f:7a:
         9a:a8:ef:38:2a:ae:7f:25:2f:bc:6a:1f:2e:37:82:6e:f6:8e:
         9e:29:a7:e0:86:00:30:bb:95:26:30:62:62:f8:db:1f:37:1d:
         f4:ec:0d:44:ad:e0:22:96:b6:29:02:79:bd:df:c3:1e:05:9f:
         b6:1e:1c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:06:55 2024 by rpki-client on console-ams.rpki-client.org