Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fdf696c4-d4b8-3ffc-a8dd-2c2b27ba7b64.roa
File:                     fdf696c4-d4b8-3ffc-a8dd-2c2b27ba7b64.roa (raw, json)
Hash identifier:          l7p2WGCnzTxIfOW7Nf5SqCBC2crD6PTe/f+KKFDVSOQ=
Subject key identifier:   3C:6A:B4:FC:2B:50:F3:F1:02:E4:BD:86:5B:AA:B7:13:1F:D7:D2:FA
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285844FE2AB430CBC563EB2DD4D540
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fdf696c4-d4b8-3ffc-a8dd-2c2b27ba7b64.roa
Signing time:             Sat 24 Feb 2024 02:00:26 +0000
ROA not before:           Sat 24 Feb 2024 02:00:26 +0000
ROA not after:            Fri 24 May 2024 01:00:26 +0000
asID:                     397243
IP address blocks:        156.154.55.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fe:2a:b4:30:cb:c5:63:eb:2d:d4:d5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Feb 24 02:00:26 2024 GMT
            Not After : May 24 01:00:26 2024 GMT
        Subject: CN=ffc1805a-2231-4d25-8384-c61a087d24d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:65:ab:69:b0:f5:ed:08:6d:ef:19:21:68:da:
                    e9:93:80:5f:f8:3c:1b:c5:1b:ac:df:18:01:b4:6e:
                    47:49:d5:b4:e3:43:7c:32:f0:10:37:40:8a:1a:21:
                    16:ae:15:af:03:ee:43:0c:7b:61:85:0d:04:3b:41:
                    fc:14:d8:10:fa:27:7a:52:8c:f2:a0:e5:d5:ea:0e:
                    04:a0:3c:4f:c9:21:b3:d3:2c:0f:5b:97:0f:43:27:
                    28:8f:85:68:87:97:98:d8:37:56:f6:ac:b1:71:06:
                    7f:19:4e:48:a8:c5:40:d7:bb:31:7d:28:94:de:a9:
                    15:aa:28:49:1f:4d:10:d2:97:51:6e:1e:4c:86:d6:
                    7f:b0:6c:fc:de:08:c5:34:71:d1:5c:4f:e5:97:4d:
                    fc:b8:80:07:bf:a1:3d:7d:02:ab:cf:e3:a6:fb:8b:
                    2b:bc:b0:20:1d:d2:eb:bd:64:ee:c4:09:04:0e:57:
                    93:84:c2:0e:e3:ad:85:5e:c1:16:08:1c:07:79:44:
                    6d:59:e5:cd:19:60:cf:65:30:92:c8:b6:da:11:51:
                    5d:13:26:fb:ba:c3:5e:3a:07:f0:20:e8:bf:fa:13:
                    98:42:6e:64:99:0a:ac:60:46:57:a4:db:08:d7:05:
                    ca:f8:aa:84:d6:eb:3e:66:4b:a4:f9:6c:a6:91:7a:
                    c2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:6A:B4:FC:2B:50:F3:F1:02:E4:BD:86:5B:AA:B7:13:1F:D7:D2:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fdf696c4-d4b8-3ffc-a8dd-2c2b27ba7b64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:55:93:ad:30:c5:e1:ae:55:18:e6:3a:b3:78:b5:7a:7d:d4:
         48:3f:a5:a0:f0:41:b7:24:e2:25:d6:df:85:c4:7b:c1:01:e1:
         ee:2a:b9:52:f9:33:f3:08:c3:18:79:b6:8f:99:52:6c:50:35:
         c7:e3:57:11:bd:61:12:42:55:f4:b3:30:b5:b6:a1:3f:82:ff:
         11:a8:9c:37:2e:73:42:12:9a:54:01:c6:4b:cb:9a:80:4e:32:
         bf:4c:f2:48:7c:ef:4f:89:29:54:e9:32:d0:4b:e4:55:8a:7e:
         eb:19:19:e9:5e:73:82:e5:8b:47:b0:98:39:62:8b:65:e5:da:
         da:51:9c:e9:2b:68:19:6c:3d:1c:7d:3b:9c:08:0a:5d:d2:00:
         58:bf:8e:c6:d1:a3:49:3c:aa:13:04:5d:f4:4e:82:bd:89:a5:
         b2:46:dc:cd:c8:a6:6c:bc:38:d0:74:b2:d0:12:a4:f7:b9:9a:
         72:2a:56:d7:bc:e4:ed:42:00:c9:0b:e0:76:dc:ff:e6:16:c8:
         c7:aa:7f:7e:a9:f2:ce:88:3b:53:8a:3e:f6:92:f1:46:d4:97:
         ed:d2:91:15:87:b2:b4:9e:f1:bb:7c:2f:13:ed:4e:5e:71:3a:
         9d:05:56:4a:f5:6e:24:c8:d7:09:17:c7:b6:c2:e2:99:2c:ad:
         24:f5:31:87
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWET+KrQwy8Vj6y3U1UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI0MDIyNDAyMDAyNloXDTI0MDUyNDAxMDAyNlowLzEtMCsGA1UEAxMk
ZmZjMTgwNWEtMjIzMS00ZDI1LTgzODQtYzYxYTA4N2QyNGQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWWrabD17Qht7xkhaNrpk4Bf+DwbxRus3xgB
tG5HSdW040N8MvAQN0CKGiEWrhWvA+5DDHthhQ0EO0H8FNgQ+id6UozyoOXV6g4E
oDxPySGz0ywPW5cPQycoj4Voh5eY2DdW9qyxcQZ/GU5IqMVA17sxfSiU3qkVqihJ
H00Q0pdRbh5MhtZ/sGz83gjFNHHRXE/ll038uIAHv6E9fQKrz+Om+4srvLAgHdLr
vWTuxAkEDleThMIO462FXsEWCBwHeURtWeXNGWDPZTCSyLbaEVFdEyb7usNeOgfw
IOi/+hOYQm5kmQqsYEZXpNsI1wXK+KqE1us+Zkuk+WymkXrCCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDxqtPwrUPPxAuS9hluqtxMf19L6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZmRmNjk2YzQtZDRiOC0z
ZmZjLWE4ZGQtMmMyYjI3YmE3YjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJo3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGxVk60wxeGuVRjmOrN4tXp91Eg/paDwQbck4iXW34XEe8EB4e4quVL5
M/MIwxh5to+ZUmxQNcfjVxG9YRJCVfSzMLW2oT+C/xGonDcuc0ISmlQBxkvLmoBO
Mr9M8kh870+JKVTpMtBL5FWKfusZGelec4Lli0ewmDlii2Xl2tpRnOkraBlsPRx9
O5wICl3SAFi/jsbRo0k8qhMEXfROgr2JpbJG3M3Ipmy8ONB0stASpPe5mnIqVte8
5O1CAMkL4Hbc/+YWyMeqf36p8s6IO1OKPvaS8UbUl+3SkRWHsrSe8bt8LxPtTl5x
Op0FVkr1biTI1wkXx7bC4pksrST1MYc=
-----END CERTIFICATE-----
Generated at Thu May 2 08:56:32 2024 by rpki-client on console-fra.rpki-client.org