Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/df6727da-fd25-3bc0-a428-19aa6a820332.roa
File:                     df6727da-fd25-3bc0-a428-19aa6a820332.roa (raw, json)
Hash identifier:          FKbF6DOG2MweR0FTCfViUsVKELO9517mZl7dqDUZui4=
Subject key identifier:   B3:1D:78:01:36:D8:52:32:6D:A8:E6:1C:00:CD:C3:C5:E3:EB:ED:C2
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847CA3F7345EB42A16538FBB900
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/df6727da-fd25-3bc0-a428-19aa6a820332.roa
Signing time:             Wed 06 Nov 2024 14:00:41 +0000
ROA not before:           Wed 06 Nov 2024 14:00:41 +0000
ROA not after:            Tue 04 Feb 2025 14:00:41 +0000
asID:                     397242
IP address blocks:        156.154.173.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:3f:73:45:eb:42:a1:65:38:fb:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Nov  6 14:00:41 2024 GMT
            Not After : Feb  4 14:00:41 2025 GMT
        Subject: CN=bc1a3e42-362a-4ad4-967c-cddc6a4de2de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ee:a6:3b:22:c9:4e:04:24:5f:c0:05:fe:ce:
                    ff:97:89:cf:31:95:39:4e:d4:b3:e6:0a:51:32:3b:
                    72:b1:24:1d:b6:59:b5:57:f5:28:44:ba:97:59:d3:
                    7e:d9:52:11:2d:83:2e:33:2a:c3:9d:f6:3d:9b:20:
                    cd:92:df:ac:4a:a9:61:32:f3:99:37:ba:36:90:53:
                    36:06:6a:f7:8b:33:8d:51:ee:4a:fb:8a:fd:f3:09:
                    5c:0c:3a:4e:70:7f:b1:7e:9a:bc:34:8d:0a:dc:a0:
                    3c:a8:16:26:6d:8a:57:74:3e:4f:b7:47:03:2c:de:
                    1f:53:72:06:b5:dd:2e:ad:18:77:71:70:5e:18:cc:
                    e6:e8:76:29:db:82:2b:cc:37:cd:89:28:d8:66:c1:
                    7b:19:2f:37:d1:eb:41:28:b9:b4:b1:f4:ef:3e:fb:
                    40:47:28:d3:a2:99:4b:ff:b5:74:d1:8d:fe:b4:e3:
                    8f:be:84:51:aa:34:fb:ea:89:e9:e8:54:a5:99:be:
                    6b:80:f8:37:5e:d4:60:55:5f:71:5a:a7:61:71:6a:
                    b2:a5:1b:0e:2a:3c:b3:03:63:a9:95:7c:bc:11:ea:
                    6e:7b:a6:16:86:95:db:5b:ff:b5:c6:9a:1a:bc:05:
                    36:e0:96:1b:ee:51:2b:f5:bb:1e:18:cf:e0:3c:fb:
                    c6:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:1D:78:01:36:D8:52:32:6D:A8:E6:1C:00:CD:C3:C5:E3:EB:ED:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/df6727da-fd25-3bc0-a428-19aa6a820332.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:2d:7e:40:60:3f:f1:cc:c8:54:4b:7b:4c:ae:c3:2f:d8:c6:
         5e:d1:40:98:b1:ce:21:7e:57:ba:ba:fd:ca:3b:78:a2:6a:28:
         b0:34:f3:aa:57:3e:25:f1:8c:6b:bf:39:c3:2d:6c:dc:48:79:
         43:3f:51:93:06:88:71:8d:1a:43:3d:02:fe:5b:56:d2:f8:8c:
         bd:72:61:1f:bb:3b:ba:1e:5e:27:5a:b3:88:0e:99:96:a3:83:
         32:6d:05:b2:b1:34:99:5e:61:18:e7:5f:9f:7b:27:b6:60:02:
         d0:f4:8a:93:73:26:f1:81:eb:43:93:51:22:f9:d9:11:a0:e5:
         19:5b:e6:f2:72:41:ab:40:04:63:2c:bc:85:2c:5e:58:ae:f8:
         6d:78:5d:b6:4f:d0:69:5e:0e:83:b3:d9:84:96:fb:3b:06:a4:
         31:d2:61:71:59:1d:81:ed:70:4c:77:45:ed:f3:2d:f4:0b:79:
         9e:08:14:b5:7c:e8:74:a3:96:bc:11:69:5f:ec:a2:e6:c1:5b:
         a8:d4:13:df:29:73:6d:61:53:a3:a6:48:a8:77:19:b7:e0:79:
         2d:3c:95:fd:57:51:7e:b3:31:2e:8a:78:1a:f3:05:2d:34:52:
         a5:90:ef:1b:e0:bd:8f:2e:07:5e:3d:93:b4:27:d7:df:d0:54:
         ba:dd:4e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:02:18 2024 by rpki-client on console-fra.rpki-client.org