Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ecfd10cd-b063-3102-a8f4-9456d8f10d1c.roa
File:                     ecfd10cd-b063-3102-a8f4-9456d8f10d1c.roa (raw, json)
Hash identifier:          q1G5ptg6aPcoRLmVUmdXav6YbTwU8i0JIbCe2rah4w4=
Subject key identifier:   A5:3B:A3:AF:18:4C:7E:05:29:F0:7E:07:61:82:6C:4F:65:07:1E:6F
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847B10172AA2303E7026A5C7380
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ecfd10cd-b063-3102-a8f4-9456d8f10d1c.roa
Signing time:             Mon 28 Oct 2024 13:00:40 +0000
ROA not before:           Mon 28 Oct 2024 13:00:40 +0000
ROA not after:            Sun 26 Jan 2025 14:00:40 +0000
asID:                     397238
IP address blocks:        156.154.100.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b1:01:72:aa:23:03:e7:02:6a:5c:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Oct 28 13:00:40 2024 GMT
            Not After : Jan 26 14:00:40 2025 GMT
        Subject: CN=ef86307e-79fe-46a3-9848-13acf6601762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:83:0c:44:ec:b4:d8:9d:d5:20:ba:c9:66:24:
                    dd:d4:82:87:8e:29:70:9b:14:d5:b5:1d:46:f7:15:
                    2a:b6:06:5f:02:f8:00:ab:72:a5:a4:97:ec:8e:37:
                    85:4a:74:19:aa:8a:1a:cb:e5:5c:9e:6d:96:26:e2:
                    62:cd:78:6f:bc:a6:e8:f4:3b:fe:c7:7b:8a:c0:4f:
                    7b:93:a8:f1:cd:86:47:19:35:c7:2e:9a:be:b3:ee:
                    b6:db:f2:45:91:ae:dc:2e:9f:16:e7:e9:88:16:59:
                    0b:03:66:51:38:81:ec:35:c6:3e:d7:e0:fd:ae:63:
                    a6:f5:a7:ec:e4:6f:01:66:b2:a3:4a:1b:5f:5d:cb:
                    1e:38:d7:76:74:4a:49:be:7d:dd:55:ff:59:0e:e3:
                    61:6a:0e:7f:06:54:04:57:77:62:33:57:99:cf:92:
                    9e:39:f7:56:f6:eb:11:4b:96:d6:0c:87:3c:3f:72:
                    10:f6:ba:c4:24:ad:34:51:a0:22:00:e2:63:f4:96:
                    22:30:d9:56:3a:d7:b2:89:a9:fd:d1:d3:51:d2:43:
                    f9:62:f9:e6:f8:31:13:74:50:b9:6d:bf:96:45:c3:
                    0e:16:e2:de:17:a6:d0:64:af:5a:68:29:1d:eb:ba:
                    a3:22:fa:9f:6a:25:db:bf:9f:cd:85:5c:07:94:00:
                    e1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:3B:A3:AF:18:4C:7E:05:29:F0:7E:07:61:82:6C:4F:65:07:1E:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ecfd10cd-b063-3102-a8f4-9456d8f10d1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:43:16:a5:9d:e0:fa:68:fc:af:12:aa:b8:6d:b9:32:a1:ae:
         66:2f:c1:81:f0:b7:2f:7f:84:17:a0:82:68:a7:54:0a:de:fd:
         87:20:81:71:f2:f6:a8:08:bc:7f:bd:ac:bc:54:17:20:a4:1b:
         3d:8e:ce:d2:b3:5d:3c:f4:7e:fc:75:16:e9:70:c2:58:04:e2:
         48:4a:0a:d0:b3:db:9b:6c:c3:ba:ab:2b:d8:d7:bd:91:60:29:
         fc:da:6a:5d:23:47:8d:07:98:ad:4b:57:78:85:f2:ef:9b:6c:
         9f:78:3d:7e:be:82:29:d1:e5:49:e5:d4:42:31:2e:bc:5e:9d:
         80:18:bd:89:30:97:2c:bb:c9:9f:9f:ac:46:22:4b:b9:f6:4b:
         1e:72:91:67:14:dd:5c:e5:80:06:88:3e:01:41:b3:3d:ef:4a:
         e3:6e:0e:66:09:9d:e1:ac:70:b3:5d:08:cd:60:08:45:ed:be:
         36:b9:59:ac:13:83:10:ba:5b:a3:09:eb:1e:9e:69:fd:69:f9:
         ae:3e:6a:de:a2:3b:3d:6f:bc:f1:92:c1:46:3a:ec:80:13:33:
         91:7d:a9:55:be:a5:26:f6:a1:0b:54:9e:87:09:6a:37:68:80:
         d4:17:23:4b:4d:e8:37:f2:25:12:48:f4:7f:f9:8e:b3:20:41:
         aa:c8:4c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:02:20 2024 by rpki-client on console-fra.rpki-client.org