Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e6b92de8-12f2-3f2f-a539-4c0f805421c4.roa
File:                     e6b92de8-12f2-3f2f-a539-4c0f805421c4.roa (raw, json)
Hash identifier:          aGczdqxftQR5GpDsjUaApb0j9zwbnJw/DdjajL+ew/k=
Subject key identifier:   32:B6:5D:CB:FA:FE:44:3A:75:D7:C7:81:46:71:76:9B:88:F8:3E:C2
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285846FCF03E628E28E96A68AC9180
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e6b92de8-12f2-3f2f-a539-4c0f805421c4.roa
Signing time:             Sun 25 Aug 2024 01:00:32 +0000
ROA not before:           Sun 25 Aug 2024 01:00:32 +0000
ROA not after:            Sat 23 Nov 2024 02:00:32 +0000
asID:                     397219
IP address blocks:        156.154.66.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Oct 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:fc:f0:3e:62:8e:28:e9:6a:68:ac:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 25 01:00:32 2024 GMT
            Not After : Nov 23 02:00:32 2024 GMT
        Subject: CN=fee7b0a9-f7ab-48c1-831a-3e6ae377d59a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8a:cf:81:75:96:19:98:d7:e1:32:8f:7d:2f:
                    10:e9:10:46:71:93:0e:7d:57:3d:fd:47:8b:54:b6:
                    5d:52:d2:87:da:a3:ae:40:81:54:7f:c4:2b:55:0d:
                    13:f3:9e:8c:29:36:3b:b5:c7:ff:36:48:18:91:a4:
                    ff:d1:48:96:17:b5:b5:32:00:0b:cb:5c:ed:18:7d:
                    3e:8a:69:cd:52:e7:35:8d:14:d1:a9:71:ea:ae:76:
                    c5:17:79:74:f1:a5:c0:05:70:e3:7f:01:8e:fc:4e:
                    22:4e:c1:59:28:1c:fc:05:73:dd:c5:04:99:62:7b:
                    8d:3c:eb:bc:71:68:fd:73:96:96:40:a9:46:93:bb:
                    29:c3:b7:c6:0a:4c:f6:bf:3a:94:59:43:5b:9f:4d:
                    4b:d7:02:df:ae:e6:1e:0d:e9:2c:6e:78:da:23:83:
                    39:f4:70:48:8e:40:aa:b5:eb:23:d8:66:54:4d:92:
                    de:65:ef:97:2c:1e:4f:5f:8f:66:e7:75:44:ae:94:
                    c0:9d:ee:7e:cb:2b:c0:c6:c8:37:74:a6:5d:d8:34:
                    78:40:b6:c4:c0:5d:45:bc:f7:61:ad:12:c5:db:4e:
                    d5:c8:68:b7:be:2d:9e:45:66:a0:1b:a5:a0:b4:ed:
                    bb:da:cb:83:03:60:2b:c7:68:51:f2:ff:b7:b1:09:
                    1e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:B6:5D:CB:FA:FE:44:3A:75:D7:C7:81:46:71:76:9B:88:F8:3E:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e6b92de8-12f2-3f2f-a539-4c0f805421c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:ee:e5:d9:99:b1:88:3a:cf:ef:04:61:83:b2:f8:3a:d8:e1:
         27:be:98:3c:3e:d9:81:9e:ac:7e:2b:a8:49:4a:72:01:95:b5:
         e0:7a:07:d1:84:fd:6d:8e:2b:81:fe:bf:f8:59:53:1f:ac:06:
         50:0e:88:3d:20:ce:f6:84:3d:49:8a:aa:17:43:e0:43:ba:61:
         7c:aa:68:ae:ef:aa:b5:9f:31:6c:c8:18:f0:fa:7e:6c:5e:cf:
         40:90:1c:92:ee:9a:f5:c6:50:62:43:08:5a:4f:4c:cd:b2:0e:
         33:66:9f:0f:11:db:cc:ae:45:05:5a:bc:c6:99:3d:8b:ff:35:
         45:51:2a:b7:3b:3e:b2:bb:cf:30:98:33:1c:70:ce:aa:02:a1:
         81:da:2b:5d:4a:ca:23:c8:eb:d5:6a:13:2d:82:c6:4a:dd:36:
         2f:c2:d2:67:51:55:1d:46:98:83:43:61:14:2b:54:30:a3:32:
         7c:85:2f:fe:b3:45:58:8f:94:1f:cc:9f:e9:59:f6:dc:70:0a:
         1b:e0:96:e1:ff:9d:ff:de:ba:5d:47:2b:45:7f:10:8d:4a:db:
         8d:05:47:13:87:48:6f:af:ec:bd:3e:d8:53:e2:0f:65:74:fc:
         23:1e:95:00:8b:fc:51:3b:08:7d:cc:ff:74:7e:4a:95:47:49:
         e8:d6:8c:67
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEb88D5ijijpamiskYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI0MDgyNTAxMDAzMloXDTI0MTEyMzAyMDAzMlowLzEtMCsGA1UEAxMk
ZmVlN2IwYTktZjdhYi00OGMxLTgzMWEtM2U2YWUzNzdkNTlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIrPgXWWGZjX4TKPfS8Q6RBGcZMOfVc9/UeL
VLZdUtKH2qOuQIFUf8QrVQ0T856MKTY7tcf/NkgYkaT/0UiWF7W1MgALy1ztGH0+
imnNUuc1jRTRqXHqrnbFF3l08aXABXDjfwGO/E4iTsFZKBz8BXPdxQSZYnuNPOu8
cWj9c5aWQKlGk7spw7fGCkz2vzqUWUNbn01L1wLfruYeDeksbnjaI4M59HBIjkCq
tesj2GZUTZLeZe+XLB5PX49m53VErpTAne5+yyvAxsg3dKZd2DR4QLbEwF1FvPdh
rRLF207VyGi3vi2eRWagG6WgtO272suDA2Arx2hR8v+3sQkegwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDK2Xcv6/kQ6ddfHgUZxdpuI+D7CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZTZiOTJkZTgtMTJmMi0z
ZjJmLWE1MzktNGMwZjgwNTQyMWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB7u5dmZsYg6z+8EYYOy+DrY4Se+mDw+2YGerH4rqElKcgGVteB6B9GE
/W2OK4H+v/hZUx+sBlAOiD0gzvaEPUmKqhdD4EO6YXyqaK7vqrWfMWzIGPD6fmxe
z0CQHJLumvXGUGJDCFpPTM2yDjNmnw8R28yuRQVavMaZPYv/NUVRKrc7PrK7zzCY
MxxwzqoCoYHaK11KyiPI69VqEy2CxkrdNi/C0mdRVR1GmINDYRQrVDCjMnyFL/6z
RViPlB/Mn+lZ9txwChvgluH/nf/eul1HK0V/EI1K240FRxOHSG+v7L0+2FPiD2V0
/CMelQCL/FE7CH3M/3R+SpVHSejWjGc=
-----END CERTIFICATE-----
Generated at Fri Oct 25 18:47:38 2024 by rpki-client on console-fra.rpki-client.org