Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f534fe61-2777-31d9-9fe9-c229f5352ae7.roa
File:                     f534fe61-2777-31d9-9fe9-c229f5352ae7.roa (raw, json)
Hash identifier:          dbl/+cz4WSIF30rUVPlpzBM0lZ/3yYLIpXtqx0CD5Sg=
Subject key identifier:   14:8C:BE:08:88:1A:1F:BC:31:1D:E3:53:D6:30:CF:C5:7A:D5:83:DD
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858476C9C88553D1CDD4A0F677D80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f534fe61-2777-31d9-9fe9-c229f5352ae7.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     399153
IP address blocks:        156.154.150.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9c:88:55:3d:1c:dd:4a:0f:67:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=7c4e8ef1-2f8e-4858-8514-bb155e2299da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:47:ac:18:af:a8:3a:26:fb:54:76:87:cb:e6:
                    92:a2:fb:75:72:f8:55:f4:48:8e:ad:2b:ff:70:af:
                    aa:cf:4e:5c:e8:a3:c1:b1:6f:a4:78:a2:ac:4d:02:
                    43:ad:3b:16:1a:9f:1a:44:32:da:57:ad:65:3b:9e:
                    6a:82:41:1a:e5:e7:32:50:6b:a3:d0:99:7e:95:1d:
                    10:b5:f9:2d:5d:07:93:f7:b4:26:b4:db:3f:3f:7c:
                    5c:7c:09:4e:1e:02:28:1f:97:9d:af:3a:be:d4:46:
                    97:17:70:de:30:9d:91:ea:cf:1a:65:c2:f4:54:66:
                    71:b1:7b:19:3f:ef:8c:b6:2a:18:5e:5b:04:0a:fc:
                    c9:c2:71:c0:17:6e:46:44:35:78:94:3c:bf:9e:eb:
                    20:1e:08:33:27:a6:a2:6d:3f:a2:7e:2c:90:8a:8c:
                    6e:cb:d1:3d:48:51:8e:0f:7a:3d:a9:37:73:bb:3e:
                    76:e8:73:5e:44:16:ea:bf:5e:97:4a:be:6b:e6:49:
                    ca:c2:7a:31:58:5f:73:b5:3a:23:d3:44:b0:15:fd:
                    ad:92:f5:62:d7:df:ed:99:85:11:68:fb:93:48:31:
                    a8:31:b7:95:61:8e:26:f2:43:2a:b9:ee:0f:2f:4b:
                    ea:3a:03:c4:68:fe:8b:27:6c:a5:b6:c8:2a:bc:45:
                    34:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:8C:BE:08:88:1A:1F:BC:31:1D:E3:53:D6:30:CF:C5:7A:D5:83:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f534fe61-2777-31d9-9fe9-c229f5352ae7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.150.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:f9:08:56:ba:a4:37:f7:c7:3a:08:98:57:09:7a:cd:25:45:
         da:a7:82:d4:4c:ed:9b:ad:20:fc:cc:0d:08:d1:9f:b8:de:9a:
         00:e5:09:cc:d4:de:30:c5:35:0f:57:de:0f:24:db:bb:c2:5d:
         b5:d8:d1:40:9b:2a:e3:f6:4a:a5:3a:71:64:56:69:35:c6:ee:
         a7:6d:8f:d0:18:fe:39:fd:10:45:b0:0c:e7:79:a3:08:b9:93:
         a6:a9:72:ba:d7:50:96:cf:70:d3:7e:2d:1a:6d:86:7d:8b:c4:
         5d:8f:f2:55:c5:e3:6d:93:50:8e:e1:d3:e7:42:33:25:0c:5b:
         01:12:44:ea:b5:4c:e7:40:84:dc:7e:6e:9d:95:df:93:2b:c1:
         b6:fe:66:c6:58:53:80:01:a4:02:40:99:e2:24:80:5c:a3:fc:
         6b:56:e4:f1:e5:11:1d:84:f4:0e:e9:4a:ef:9d:85:70:9f:b9:
         63:a9:92:73:fb:a2:20:67:b4:dc:14:f1:ce:9c:90:a9:2b:a5:
         30:46:48:94:cb:48:11:96:ec:c3:29:70:0d:ba:e4:7f:28:91:
         82:bd:2e:64:71:81:99:f1:58:f7:ee:04:e9:5c:6d:d1:f0:e5:
         c7:b2:91:2d:9e:27:38:c1:9d:e7:0c:70:89:c4:0d:4a:e0:ae:
         ea:37:f4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:06:58 2024 by rpki-client on console-ams.rpki-client.org