Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e993210d-6de5-31cc-a28f-bc6163a735ee.roa
File:                     e993210d-6de5-31cc-a28f-bc6163a735ee.roa (raw, json)
Hash identifier:          A0//Pn5YoUnphaxGsNz3tvpQ8YT2Vg+oq9QhkdjhAhU=
Subject key identifier:   35:56:46:B5:35:7F:49:FE:1E:87:CC:0B:85:64:2E:E9:EB:10:B3:B1
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847527C8B2988184C64DBA2C420
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e993210d-6de5-31cc-a28f-bc6163a735ee.roa
Signing time:             Tue 24 Sep 2024 16:27:10 +0000
ROA not before:           Tue 24 Sep 2024 16:27:10 +0000
ROA not after:            Mon 23 Dec 2024 17:27:10 +0000
asID:                     397218
IP address blocks:        156.154.125.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:52:7c:8b:29:88:18:4c:64:db:a2:c4:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 24 16:27:10 2024 GMT
            Not After : Dec 23 17:27:10 2024 GMT
        Subject: CN=22d43a28-8f20-4343-abc0-a0fd1501c9b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:75:c0:40:22:70:6f:91:01:b3:f1:64:8e:a5:
                    5d:0d:9e:7b:f7:5c:51:38:f5:1d:68:ea:26:17:18:
                    0b:4f:59:8c:c1:45:65:82:d2:7d:f4:77:da:49:b9:
                    57:ee:b7:12:ea:7a:df:90:67:45:5e:71:15:93:11:
                    11:0d:30:78:2f:88:8d:f5:10:c2:f1:03:77:e2:a3:
                    62:a8:eb:f1:b2:fc:a2:ad:70:af:4b:0c:1f:0b:20:
                    37:5e:31:4b:7f:aa:02:de:d6:c1:b1:36:eb:90:78:
                    5e:a9:06:69:2b:5f:7e:ee:6b:aa:a6:ff:ca:3f:db:
                    38:f6:78:27:13:3e:3a:40:1e:cb:3a:87:0d:4d:a1:
                    56:66:57:25:9e:56:02:01:b3:97:96:40:f8:b3:01:
                    89:2c:e1:91:e3:a0:d9:0c:8f:67:18:36:d5:22:26:
                    53:fe:b5:1e:7a:bc:bf:bb:bd:bb:42:68:b2:30:96:
                    7b:95:84:75:29:0c:d5:b8:ab:b4:c9:f6:53:f3:3e:
                    85:a1:24:e4:f1:7b:7d:37:fd:2f:64:93:16:aa:f6:
                    f3:9e:35:3a:ee:da:a5:90:aa:52:0d:19:09:14:42:
                    b6:37:3f:89:8d:eb:0f:3c:4d:22:4c:e4:86:02:52:
                    60:c3:39:3c:ed:06:b5:07:09:35:af:e4:90:26:eb:
                    68:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:56:46:B5:35:7F:49:FE:1E:87:CC:0B:85:64:2E:E9:EB:10:B3:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e993210d-6de5-31cc-a28f-bc6163a735ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:d7:70:f5:0e:58:a6:e4:31:67:e2:85:33:c1:88:42:38:4e:
         8d:5e:1f:38:c4:c8:04:00:c7:7f:8d:73:de:c9:c7:48:dd:bc:
         6c:95:55:83:68:36:ab:e7:e4:e4:7e:e1:5f:54:3b:25:e9:80:
         eb:58:7b:ab:4d:c3:52:7d:30:c3:7e:46:37:94:35:27:4d:a2:
         f8:ea:8a:59:92:41:e3:12:ea:a2:e4:c0:8d:74:bf:83:b5:5d:
         4d:d3:fe:42:c5:e3:1e:41:e9:20:d1:e6:07:de:37:b5:a9:e2:
         1c:52:7a:d5:57:66:3a:58:7d:c2:1a:db:2e:16:33:51:b5:18:
         17:eb:5f:f3:ff:b0:30:55:03:32:54:2e:33:50:ec:0f:99:e2:
         67:44:02:f1:3e:02:6c:9d:71:ff:19:1a:06:e9:9c:68:e1:26:
         4d:f2:20:9b:83:ec:d0:b8:1b:de:9a:f7:4d:8e:23:6e:c6:71:
         a7:de:82:26:f7:fb:37:ec:76:46:ec:af:fd:a1:15:9d:46:58:
         0a:0b:74:c0:bd:6e:cf:07:58:6a:93:cb:40:f6:be:34:8a:80:
         93:90:ff:ab:bc:ee:74:d1:5c:b7:2f:62:c9:63:5a:07:55:75:
         6a:19:98:69:62:25:68:ca:d3:10:3d:ea:ff:de:5c:76:68:65:
         cc:66:9a:00
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdSfIspiBhMZNuixCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI0MDkyNDE2MjcxMFoXDTI0MTIyMzE3MjcxMFowLzEtMCsGA1UEAxMk
MjJkNDNhMjgtOGYyMC00MzQzLWFiYzAtYTBmZDE1MDFjOWI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXXAQCJwb5EBs/FkjqVdDZ5791xROPUdaOom
FxgLT1mMwUVlgtJ99HfaSblX7rcS6nrfkGdFXnEVkxERDTB4L4iN9RDC8QN34qNi
qOvxsvyirXCvSwwfCyA3XjFLf6oC3tbBsTbrkHheqQZpK19+7muqpv/KP9s49ngn
Ez46QB7LOocNTaFWZlclnlYCAbOXlkD4swGJLOGR46DZDI9nGDbVIiZT/rUeery/
u727QmiyMJZ7lYR1KQzVuKu0yfZT8z6FoSTk8Xt9N/0vZJMWqvbznjU67tqlkKpS
DRkJFEK2Nz+JjesPPE0iTOSGAlJgwzk87Qa1Bwk1r+SQJutoRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDVWRrU1f0n+HofMC4VkLunrELOxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZTk5MzIxMGQtNmRlNS0z
MWNjLWEyOGYtYmM2MTYzYTczNWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFfXcPUOWKbkMWfihTPBiEI4To1eHzjEyAQAx3+Nc97Jx0jdvGyVVYNo
Nqvn5OR+4V9UOyXpgOtYe6tNw1J9MMN+RjeUNSdNovjqilmSQeMS6qLkwI10v4O1
XU3T/kLF4x5B6SDR5gfeN7Wp4hxSetVXZjpYfcIa2y4WM1G1GBfrX/P/sDBVAzJU
LjNQ7A+Z4mdEAvE+Amydcf8ZGgbpnGjhJk3yIJuD7NC4G96a902OI27Gcafegib3
+zfsdkbsr/2hFZ1GWAoLdMC9bs8HWGqTy0D2vjSKgJOQ/6u87nTRXLcvYsljWgdV
dWoZmGliJWjK0xA96v/eXHZoZcxmmgA=
-----END CERTIFICATE-----
Generated at Mon Nov 25 16:31:05 2024 by rpki-client on console-ams.rpki-client.org