Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ee8d6c10-8177-3b42-b8f4-ca127cdd39bc.roa
File:                     ee8d6c10-8177-3b42-b8f4-ca127cdd39bc.roa (raw, json)
Hash identifier:          /eTUvNq0di7IeMt6dMh9ybNjNB8hgqWmKIu1O5ZqqxQ=
Subject key identifier:   FA:0E:7C:03:95:E6:14:4C:DF:40:D2:E1:7D:72:B1:BC:85:6A:66:8A
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858479D76D37B49FB0812B9F9B100
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ee8d6c10-8177-3b42-b8f4-ca127cdd39bc.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     397213
IP address blocks:        156.154.71.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:d3:7b:49:fb:08:12:b9:f9:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=f7ad2595-a63b-4b6a-adc7-74bbb65e8257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d2:9f:af:f6:cc:48:8f:08:0a:98:b8:ba:2c:
                    d2:3b:a1:3b:53:77:79:cf:a5:67:41:55:e5:2f:da:
                    aa:c4:0a:1d:70:b5:23:27:1c:01:83:51:7d:68:c3:
                    c6:35:42:87:43:af:fa:df:2d:27:f7:45:28:c2:9e:
                    46:cc:65:3b:0a:1e:5a:3d:4b:f3:2f:42:61:4c:b6:
                    68:c8:d6:eb:7f:94:90:21:9e:e1:a7:b5:2c:a6:b9:
                    01:ba:5c:17:9b:bf:37:29:e7:e9:40:fb:ba:8d:22:
                    49:5b:cc:2b:04:42:97:36:4b:4a:bd:1d:e6:84:05:
                    d3:9e:e2:1c:99:ef:4f:99:f9:7c:c8:35:2f:33:73:
                    bc:bb:83:23:9d:5d:2b:c7:6c:88:71:07:2c:58:dd:
                    5e:ce:a3:0b:d1:62:5e:eb:d4:30:0f:f6:f9:d4:28:
                    d0:01:17:6a:73:a8:e3:89:1d:0e:1a:32:c4:b7:1e:
                    6e:1b:b1:f4:0c:13:58:b6:63:98:43:ad:76:46:68:
                    a7:1a:02:5f:18:9c:d4:ab:54:85:ce:61:75:b1:2c:
                    ff:87:68:0e:c5:92:09:b4:e6:bb:4c:f7:0e:24:e8:
                    a4:cf:f5:97:15:19:22:56:15:88:1d:2c:4e:04:57:
                    22:04:20:c6:12:73:e3:a8:c4:bd:e1:4e:b3:47:d7:
                    16:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:0E:7C:03:95:E6:14:4C:DF:40:D2:E1:7D:72:B1:BC:85:6A:66:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ee8d6c10-8177-3b42-b8f4-ca127cdd39bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:c9:8a:bc:76:c5:67:f5:06:d7:9f:8d:33:3c:d4:42:92:b6:
         87:98:23:fc:42:1a:25:4a:7d:bd:31:11:69:c8:59:7d:ba:84:
         50:02:5b:f6:82:f7:1d:96:77:19:e8:b3:a2:5d:c9:0d:42:fb:
         72:1e:2b:8b:7e:c9:c2:f2:46:e8:32:be:62:81:78:20:5b:84:
         50:15:78:fa:6b:3e:37:71:5c:50:28:63:c6:40:fe:ea:2e:2c:
         ad:1c:97:88:bf:c1:28:b6:47:ba:ca:14:e6:e4:14:25:25:0a:
         56:de:9a:d5:da:4f:43:61:7c:2d:00:4b:eb:81:35:99:0f:68:
         a9:dc:ce:aa:f4:c9:f9:15:ba:e7:4f:14:ea:c0:0e:7a:10:90:
         96:f0:bc:35:41:e3:10:11:ce:b6:b5:13:da:f6:11:1b:ec:8f:
         47:e1:9a:09:d0:b0:4f:f4:11:75:87:75:e4:d6:d5:3f:c0:75:
         c7:50:3d:aa:66:35:60:94:36:b6:13:b8:3f:8a:08:69:72:19:
         82:a3:15:a1:fc:f4:21:e1:db:66:44:c8:8f:d0:87:83:2d:19:
         d9:8e:b5:de:f2:37:42:d2:04:fe:58:da:d3:9f:75:8c:5b:fa:
         10:ba:c0:2b:fb:88:e7:b1:ce:f5:60:a2:69:f4:f3:f8:a0:cb:
         59:10:0d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:31:09 2024 by rpki-client on console-ams.rpki-client.org