Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ed146ec7-7e6f-319e-866d-36b93dbadde5.roa
File:                     ed146ec7-7e6f-319e-866d-36b93dbadde5.roa (raw, json)
Hash identifier:          2N+qR8tcPHGlf1jRJHMO07jPG4LqhTct0am6SEiEKo0=
Subject key identifier:   AA:46:EB:BB:46:30:05:D2:22:87:CC:C8:42:FC:67:B9:7A:0B:45:F2
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847DDCA38B7F9B3463FD04416C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ed146ec7-7e6f-319e-866d-36b93dbadde5.roa
Signing time:             Wed 13 Nov 2024 14:00:39 +0000
ROA not before:           Wed 13 Nov 2024 14:00:39 +0000
ROA not after:            Tue 11 Feb 2025 14:00:39 +0000
asID:                     397228
IP address blocks:        156.154.170.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dd:ca:38:b7:f9:b3:46:3f:d0:44:16:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Nov 13 14:00:39 2024 GMT
            Not After : Feb 11 14:00:39 2025 GMT
        Subject: CN=4b7be36d-11ae-49ef-a421-0311444c6316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0f:52:ab:b0:d4:8b:ec:2a:f3:9b:0a:14:e6:
                    d9:3a:cb:23:44:06:85:77:2d:8c:ec:ca:b2:4b:0c:
                    bc:03:fd:b7:51:31:6d:75:66:55:9f:3f:3f:49:30:
                    66:2d:c1:8e:11:55:59:4f:d1:6e:48:e2:03:8e:be:
                    d2:ee:15:1c:04:92:30:89:f8:bf:2a:0a:9e:41:ee:
                    0b:a0:7f:c0:c6:4f:b9:79:96:c9:ee:0b:38:c3:d0:
                    7f:05:6a:5a:0f:03:e8:c8:48:4d:dc:af:31:fa:81:
                    8d:e6:c8:fd:b8:7e:5e:ad:d4:da:cc:e5:0d:b1:3e:
                    71:a7:17:fa:d5:a5:40:6f:01:61:f2:e7:a1:06:37:
                    ef:3c:42:25:01:7d:e9:f2:6c:a4:a7:3d:26:53:a8:
                    a6:b3:66:6d:5c:cd:7a:e7:5b:45:25:b2:74:d3:4b:
                    c5:a1:74:4d:ab:bc:77:d1:5b:64:a0:37:88:a7:48:
                    81:f0:60:bf:45:8b:66:78:ca:32:1a:75:b9:9f:5e:
                    1f:9c:bb:ea:b3:53:13:69:dd:93:e2:ea:1d:bd:42:
                    63:60:38:36:d5:c1:1d:d4:61:dc:2b:23:c6:09:d6:
                    74:ff:0e:1f:5d:1d:f4:2b:e7:45:c2:bd:6c:54:42:
                    d8:69:9f:e2:d1:34:73:b5:c4:70:3e:f5:12:5f:15:
                    b2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:46:EB:BB:46:30:05:D2:22:87:CC:C8:42:FC:67:B9:7A:0B:45:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ed146ec7-7e6f-319e-866d-36b93dbadde5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:b0:f7:5f:49:83:fb:c6:14:fa:eb:d4:98:62:a1:89:e4:54:
         b6:ec:f8:67:4c:28:1e:39:29:58:8d:7d:ea:42:f8:19:65:0f:
         d8:55:3f:e9:f1:43:f2:99:7c:67:61:e1:53:d8:33:30:19:5d:
         fc:cb:ba:b9:0b:fc:e5:54:89:c7:34:d3:aa:26:89:72:86:34:
         5e:00:72:db:cd:05:28:65:8f:9f:6d:18:7c:03:5b:7c:4d:27:
         de:70:df:36:b2:84:c8:20:6f:7a:d1:7f:96:a8:83:eb:6a:e3:
         88:22:94:4f:de:0e:d2:ea:95:a0:aa:7b:9b:44:93:5b:0b:c2:
         e3:d1:77:62:93:5e:22:e9:a2:87:07:ec:5e:33:28:72:8b:0b:
         31:f6:23:3c:dd:cc:ea:6e:ea:5c:4b:0c:a5:02:99:d3:fe:92:
         9e:6b:d6:d1:c7:55:7a:7e:14:39:11:61:05:58:d8:d2:79:fc:
         bf:5e:b6:8b:34:30:7e:68:68:9e:09:20:19:49:0b:de:cc:88:
         e5:19:2c:37:8b:15:8f:70:10:36:da:99:f4:e4:28:11:a1:72:
         74:24:a7:43:cd:58:44:31:a2:d1:7a:5b:44:cd:09:09:2f:a3:
         21:19:5c:ea:e0:9b:e7:a5:be:ee:72:c0:94:4a:44:b3:58:29:
         2b:d7:ac:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:31:06 2024 by rpki-client on console-ams.rpki-client.org