Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f7c8f829-5e73-37eb-b9a9-ca5dfefb0f34.roa
File:                     f7c8f829-5e73-37eb-b9a9-ca5dfefb0f34.roa (raw, json)
Hash identifier:          WUsRUmHxkquFTlOjFmBRPborHmEm9TvVhEcEl3JW1l8=
Subject key identifier:   76:45:01:C1:3A:49:63:3E:A1:69:49:F5:29:93:8A:4E:8B:62:1D:16
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847DDCA2560FB0E73BEFA83F500
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f7c8f829-5e73-37eb-b9a9-ca5dfefb0f34.roa
Signing time:             Wed 13 Nov 2024 14:00:39 +0000
ROA not before:           Wed 13 Nov 2024 14:00:39 +0000
ROA not after:            Tue 11 Feb 2025 14:00:39 +0000
asID:                     397220
IP address blocks:        156.154.64.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dd:ca:25:60:fb:0e:73:be:fa:83:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Nov 13 14:00:39 2024 GMT
            Not After : Feb 11 14:00:39 2025 GMT
        Subject: CN=ccef109b-be9e-429c-ae35-759f81f054f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:bb:01:c2:32:ca:60:16:9f:1f:cf:67:eb:4f:
                    fe:7c:3c:da:33:96:4e:ae:30:47:c1:59:97:2f:22:
                    78:7c:ee:88:4d:ad:95:b3:5e:b5:4e:08:f2:5b:8f:
                    aa:0b:e8:ba:50:7a:40:5c:00:38:56:b9:42:96:a1:
                    7c:28:99:0b:27:30:19:0c:6e:af:c8:7d:18:c3:98:
                    c9:b8:14:30:1f:83:66:a2:02:7c:f4:01:73:80:a2:
                    fd:48:62:38:f4:17:98:c1:2c:10:e0:48:d7:c6:f3:
                    03:b1:2b:cc:7e:03:33:7d:9a:f5:10:66:57:a6:1e:
                    50:5c:c9:41:8c:7f:2c:de:1d:1f:3e:d5:f9:4a:db:
                    a0:07:45:7d:7a:9e:d9:4b:57:40:ac:a3:cc:a8:d3:
                    5d:58:d3:79:84:f5:2f:94:94:56:04:c8:3e:12:dc:
                    4b:de:e0:a8:be:7a:b8:a1:98:35:55:b0:17:89:3c:
                    4b:97:60:aa:18:d6:e5:65:37:24:12:8a:91:30:d8:
                    4b:2c:ac:c5:0b:5b:97:b2:72:11:69:99:f4:4b:fe:
                    15:f5:72:03:88:9c:3b:8b:6f:9c:8e:67:ea:9c:87:
                    a6:4f:0a:6a:e5:b8:b4:bf:4d:ea:07:69:5f:33:a1:
                    5f:76:d3:6c:d3:3f:82:db:66:45:50:3f:71:0f:bd:
                    3d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:45:01:C1:3A:49:63:3E:A1:69:49:F5:29:93:8A:4E:8B:62:1D:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f7c8f829-5e73-37eb-b9a9-ca5dfefb0f34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:82:f0:71:c7:48:53:02:39:6f:3b:c9:b1:d1:eb:22:36:4a:
         3a:da:43:7b:87:3e:84:55:59:b9:84:f6:72:8a:40:1f:8c:e7:
         e5:c0:1a:9e:93:29:d0:53:9b:45:85:80:07:5a:7d:29:c7:fe:
         27:f6:01:27:97:f4:07:e8:54:e9:59:c2:bc:43:7e:cc:2a:86:
         20:62:38:19:c0:fc:9b:b2:ee:eb:2b:62:ce:0e:cb:8a:77:ff:
         3e:ed:c0:e0:0a:f8:b2:f2:cc:94:b0:94:80:e7:ea:73:4d:c5:
         a2:a4:70:39:9e:ec:f9:3f:c8:ba:b2:2a:ad:9f:b8:54:77:d5:
         ca:e8:6d:36:d1:2d:4d:7e:8e:60:96:0f:24:3a:44:9a:ff:3c:
         80:30:15:04:7e:56:79:e3:32:a4:d3:98:dc:5c:28:2c:a1:19:
         62:94:97:c6:00:9c:26:ef:0f:1e:3f:5c:e9:8b:b9:4d:1f:78:
         38:f5:44:a4:a9:38:58:e0:8f:6f:b6:c3:96:78:ca:91:45:4c:
         2c:95:81:2c:ae:02:5f:90:09:86:49:ba:b9:03:5d:0f:03:c2:
         53:f9:cd:a4:de:a0:ad:bf:06:5c:8b:a2:35:13:e2:5c:80:7b:
         60:59:34:6a:93:8b:15:07:44:16:83:7d:18:cd:a3:ff:2b:f8:
         a2:49:41:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:19:10 2024 by rpki-client on console-fra.rpki-client.org