Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f3b1c337-d3d1-3299-a075-1393289e4d21.roa
File:                     f3b1c337-d3d1-3299-a075-1393289e4d21.roa (raw, json)
Hash identifier:          t/Th4rUCDOZud7vU6RBJou5P2JubQcA5maOxU4JF6xY=
Subject key identifier:   5A:E9:1F:73:F8:94:24:83:17:96:A3:E7:BA:7D:6E:2B:4A:EC:93:88
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285846FCF04B6F0432A0E0A2A73B80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f3b1c337-d3d1-3299-a075-1393289e4d21.roa
Signing time:             Sun 25 Aug 2024 01:00:32 +0000
ROA not before:           Sun 25 Aug 2024 01:00:32 +0000
ROA not after:            Sat 23 Nov 2024 02:00:32 +0000
asID:                     397213
IP address blocks:        156.154.156.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Oct 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:fc:f0:4b:6f:04:32:a0:e0:a2:a7:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 25 01:00:32 2024 GMT
            Not After : Nov 23 02:00:32 2024 GMT
        Subject: CN=2d981fb7-721d-48b9-a8f1-735bfc9d86a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d2:9a:9c:05:5d:44:14:ce:92:8c:3b:85:66:
                    20:01:e1:a2:10:c6:1b:8d:74:d3:1f:d2:79:f8:66:
                    9f:ab:ee:e3:cf:af:1e:ae:23:ab:6d:48:78:45:34:
                    2c:59:9d:13:7b:0b:ad:aa:12:b3:ed:6c:2c:80:39:
                    15:a0:a3:8c:2d:80:8f:c3:80:73:64:d6:b9:80:91:
                    43:9d:8a:92:bc:e5:b6:95:f2:a0:5a:c3:45:0c:f6:
                    06:48:04:8b:4f:e0:6d:01:42:f4:a5:ab:c9:a2:0b:
                    b0:32:45:9f:c4:58:80:6b:f8:88:04:35:f9:a2:04:
                    a0:d2:78:39:b4:7b:77:7b:70:a6:35:9f:bf:4a:2e:
                    22:3c:e5:a1:3d:b4:05:38:62:ef:27:df:e6:47:99:
                    8c:47:a3:b0:f7:aa:5d:89:65:0b:fc:74:a7:cb:e1:
                    68:fb:22:66:fc:34:81:42:a8:cb:4f:76:b1:5f:a2:
                    d0:c3:52:64:05:7f:e6:a0:c2:54:c6:09:cc:d3:3e:
                    f1:f3:2b:82:a4:2a:b0:34:6b:9f:73:f9:d6:96:5d:
                    a1:79:cc:fa:3f:e7:80:d6:07:05:a5:f6:ef:8a:2c:
                    eb:75:e0:4c:0e:ec:9c:0c:21:fc:b5:e8:4b:08:72:
                    ec:a4:5b:65:cd:1a:2b:d3:c6:d7:9b:20:3b:a1:0c:
                    e4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:E9:1F:73:F8:94:24:83:17:96:A3:E7:BA:7D:6E:2B:4A:EC:93:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f3b1c337-d3d1-3299-a075-1393289e4d21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:16:44:3a:c6:e0:32:18:a9:00:6f:26:85:46:90:cc:67:a6:
         b1:f9:c9:f0:4b:5f:17:cf:82:dd:2d:b5:8a:2f:37:58:ce:82:
         4e:f5:2e:c1:e6:47:ee:a6:9f:16:32:9d:e5:87:5b:b1:c8:50:
         6a:29:d4:09:58:41:bf:0e:0a:02:dd:91:51:d3:f8:73:36:38:
         4a:02:f6:b6:d8:7b:9d:05:a2:22:23:5d:92:5e:2a:bf:c1:53:
         5f:a7:e7:42:ae:fe:78:20:0b:14:ff:50:b2:e8:02:09:32:80:
         22:a5:89:09:de:65:46:7f:34:29:04:38:20:c9:ea:0d:3f:a4:
         61:0e:63:59:37:0c:cc:cd:31:45:a2:d6:cb:22:91:1f:b7:c2:
         2b:ba:b5:ef:d0:d7:3f:24:43:8b:c8:f1:1e:e3:dd:0a:15:53:
         c7:af:53:88:e9:c9:a0:27:57:85:e3:c9:28:71:11:f7:88:9c:
         f3:0d:56:2b:cb:b5:1e:2a:93:b5:2f:5b:6e:36:ae:bc:33:dc:
         c5:53:55:f6:53:e5:e1:ea:fd:9f:cd:ab:ec:3a:57:76:32:b2:
         07:c2:45:f2:9c:49:90:5d:d7:8e:02:05:6e:29:77:7f:e8:6a:
         91:02:44:cb:f8:6f:67:21:8f:aa:5e:e1:e1:cd:f8:c1:ed:27:
         1d:d6:ec:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 18:47:39 2024 by rpki-client on console-fra.rpki-client.org