Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/eb4347dd-7dc8-360f-8071-1115b6aa0c55.roa
File:                     eb4347dd-7dc8-360f-8071-1115b6aa0c55.roa (raw, json)
Hash identifier:          OrvlrndCSZTjc3HX51X4dBT9tGDhpEIomAgJSuUEs+w=
Subject key identifier:   06:11:9E:73:52:82:32:A4:6F:D4:20:AA:9E:C5:37:E2:81:9F:CF:EC
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285846E9656EA55259D720692C2520
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/eb4347dd-7dc8-360f-8071-1115b6aa0c55.roa
Signing time:             Sun 18 Aug 2024 01:00:29 +0000
ROA not before:           Sun 18 Aug 2024 01:00:29 +0000
ROA not after:            Sat 16 Nov 2024 02:00:29 +0000
asID:                     397235
IP address blocks:        156.154.65.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Oct 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:e9:65:6e:a5:52:59:d7:20:69:2c:25:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 18 01:00:29 2024 GMT
            Not After : Nov 16 02:00:29 2024 GMT
        Subject: CN=d515e9b8-8d9a-43c6-9da2-2522b8986790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:cd:8a:74:f5:e0:6a:45:eb:ff:6b:f2:aa:d0:
                    fe:3c:78:bf:ea:02:9f:67:40:7c:04:78:77:e1:e3:
                    9d:cd:97:0a:09:3c:1e:62:07:47:0f:42:dd:66:b8:
                    4c:3b:20:9a:11:e9:04:76:e1:86:0e:66:b7:c4:3e:
                    35:b5:82:05:7e:c8:bb:fa:75:ed:fa:c5:4e:74:2d:
                    42:35:e4:f2:65:db:47:f0:0e:09:10:cf:c6:66:80:
                    96:6d:21:64:8f:b7:17:f9:91:8d:20:69:21:ef:33:
                    7d:38:4e:36:e4:25:a1:73:49:a8:a7:e0:ea:c6:64:
                    62:e2:d7:50:a9:e5:28:67:5f:71:9e:8f:39:6d:19:
                    10:19:07:fa:be:1b:54:bc:cf:9a:78:12:fb:ff:e3:
                    31:2c:a0:84:73:d4:65:49:45:4b:b0:91:19:db:d0:
                    35:33:6d:c9:ae:b4:d9:7b:77:98:5e:31:46:3a:94:
                    cc:90:c0:25:59:ef:e8:f7:ef:26:c6:1b:07:25:e6:
                    6d:c7:15:27:95:18:99:14:82:bb:27:db:42:55:6b:
                    cf:80:1c:3d:7c:f9:44:f5:cb:4a:1d:74:7a:cc:87:
                    6a:bf:05:75:98:1b:43:b3:db:ee:f9:f0:fd:ff:5d:
                    5f:f1:8a:20:03:b3:74:b8:c1:3f:e6:05:5f:cc:c4:
                    22:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:11:9E:73:52:82:32:A4:6F:D4:20:AA:9E:C5:37:E2:81:9F:CF:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/eb4347dd-7dc8-360f-8071-1115b6aa0c55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:ff:9a:f7:91:bc:13:fc:2f:18:18:83:ef:8e:db:0c:c7:da:
         29:58:76:f9:1b:f9:29:e6:c5:34:95:b2:06:db:e3:7e:a7:82:
         b1:47:0a:b6:b7:3e:64:af:18:e1:64:b2:54:6a:a4:90:07:ea:
         83:a2:a7:7f:21:fc:51:b7:50:72:16:cd:ab:91:b2:78:bc:06:
         fa:4c:d3:f2:26:31:6f:2a:0c:30:d7:ea:8c:df:6c:3e:fc:9c:
         3f:b3:ab:ab:f1:5d:6e:d1:d9:56:09:12:f5:8e:b5:1d:cc:c5:
         73:d7:22:2c:14:91:e9:d2:1a:fd:93:41:2f:79:6c:8d:f7:1a:
         09:ab:5a:7c:13:f1:72:6e:48:9a:1a:43:4a:f8:60:a6:32:e8:
         92:23:e3:ad:17:97:10:26:f5:ee:6b:67:5a:fe:dd:b6:17:60:
         31:f6:e1:80:9b:ed:e8:8d:85:68:8b:e3:c4:bd:72:11:8a:ce:
         3f:c1:18:3f:dc:78:63:ea:2b:67:9c:65:31:6a:8d:9b:b8:31:
         9d:4b:c6:84:51:03:75:0b:05:a5:15:e2:a7:44:bb:8f:40:ca:
         9f:69:31:5e:99:ea:2f:d6:3f:5f:f0:9e:87:7a:ad:49:19:94:
         5f:83:42:a7:89:a2:e4:b1:75:50:e3:61:1a:24:de:20:50:70:
         ce:af:4e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 18:47:38 2024 by rpki-client on console-fra.rpki-client.org