Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ee6c610a-4152-3814-9c79-38de3a5e38f7.roa
File:                     ee6c610a-4152-3814-9c79-38de3a5e38f7.roa (raw, json)
Hash identifier:          /R7sH/O3KOw0RpNHEiWi+9CwvV1owt6zNQ+KVk8MVzo=
Subject key identifier:   EA:B2:5C:DC:54:1E:E5:DB:29:4D:98:4B:57:34:8B:1B:8A:4F:AD:B8
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285846FCF04D883B21799D9A1BDF00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ee6c610a-4152-3814-9c79-38de3a5e38f7.roa
Signing time:             Sun 25 Aug 2024 01:00:32 +0000
ROA not before:           Sun 25 Aug 2024 01:00:32 +0000
ROA not after:            Sat 23 Nov 2024 02:00:32 +0000
asID:                     19905
IP address blocks:        156.154.158.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Oct 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:fc:f0:4d:88:3b:21:79:9d:9a:1b:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 25 01:00:32 2024 GMT
            Not After : Nov 23 02:00:32 2024 GMT
        Subject: CN=30e5d2fb-fdd7-440a-9f38-d3aaca1a4045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3d:1f:ed:18:ce:03:2d:2e:e7:a2:ec:b4:6b:
                    fe:f5:6c:b0:d6:07:71:30:e7:b6:85:cf:02:ad:eb:
                    eb:8a:e0:f1:55:59:a7:9c:87:9a:14:8c:3c:d6:49:
                    a5:26:de:74:a9:fc:3e:93:21:c5:77:25:4c:45:ed:
                    67:5c:57:91:5a:d3:cc:4c:4c:e6:23:20:a1:52:9c:
                    cb:4e:09:8c:ae:e1:d7:ba:7c:eb:10:fb:78:ee:97:
                    2c:c4:1a:28:82:cd:de:ba:c5:ce:fd:90:33:8d:c1:
                    d6:f9:78:94:6d:55:de:a8:84:7a:54:38:35:48:da:
                    91:f7:e1:8f:f4:ca:f5:cf:36:3e:9c:d5:ee:2c:2d:
                    53:4c:cc:de:06:83:c8:14:a3:27:5d:78:8c:38:96:
                    9a:88:4a:aa:a0:0d:15:07:2c:c8:8e:ff:e5:96:41:
                    c4:b2:a5:22:c3:33:cd:db:cd:40:34:52:94:3d:a3:
                    a3:3d:b4:7c:c4:9a:06:f8:11:73:1d:95:5d:4b:cb:
                    c7:26:00:98:24:e0:2a:f1:1a:7b:11:fe:b6:be:c3:
                    12:d5:34:ec:25:73:f7:20:8d:61:e5:cd:29:95:0d:
                    a0:92:09:bf:32:d9:ae:b1:a3:79:6d:24:69:7f:24:
                    76:7f:a9:6c:51:51:1a:cd:e8:9d:07:b9:c8:76:11:
                    56:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:B2:5C:DC:54:1E:E5:DB:29:4D:98:4B:57:34:8B:1B:8A:4F:AD:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ee6c610a-4152-3814-9c79-38de3a5e38f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:65:9b:35:d2:03:33:9e:ca:b5:c3:ff:67:7b:a7:85:d2:3d:
         d0:41:52:d3:49:2d:8f:c8:11:28:e6:d9:fc:ed:06:ac:77:3d:
         d0:8a:79:ed:91:6f:fc:41:62:04:a8:ed:c6:c9:e4:12:7a:bd:
         b7:57:68:ea:4a:ed:a7:71:b3:54:d8:23:4a:18:8d:d0:ad:33:
         04:a4:07:d9:c2:89:6a:ec:56:10:c1:73:1b:cd:12:ff:91:bd:
         10:2f:59:ad:12:43:1b:cb:7a:7f:94:b8:df:81:2f:9d:10:ca:
         b9:6e:e2:e8:ed:87:37:8a:8c:a4:7a:ce:ba:6f:31:5a:bc:04:
         d2:fc:67:a1:c0:b1:f6:6d:75:1d:ea:88:5f:c5:b4:ef:ef:b6:
         2f:4b:ab:5f:a1:ca:56:b3:0b:1b:5c:f0:d8:ba:e1:4b:55:10:
         51:ca:98:75:12:c6:6f:f5:f5:91:09:ea:05:6b:fa:ef:df:c3:
         7b:bf:3d:d0:75:cd:f2:1e:69:eb:8e:42:6d:da:e4:0f:3b:a8:
         1f:e1:70:be:42:0e:44:f6:18:06:cd:0f:e5:40:72:e9:00:f7:
         3f:ce:07:03:e8:f4:cf:0c:60:ae:61:5d:0a:a5:66:db:b4:09:
         93:b9:e4:9a:56:79:b7:95:3a:e6:b9:7f:7d:11:53:7b:ab:5f:
         25:1f:39:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 18 02:14:28 2024 by rpki-client on console-fra.rpki-client.org