Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/321fb60d-9686-3132-a037-9e5f9e621a79.roa
File:                     321fb60d-9686-3132-a037-9e5f9e621a79.roa (raw, json)
Hash identifier:          OKUqLYYM0BYtBIQRW1lLWNNdox1RRhe5a3556GHTeMw=
Subject key identifier:   FD:3A:31:A8:A9:3D:AA:D6:73:A4:49:35:08:20:26:6F:AB:8F:B9:1D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858474420C02A7D72B214B8347A40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/321fb60d-9686-3132-a037-9e5f9e621a79.roa
Signing time:             Thu 19 Sep 2024 13:00:42 +0000
ROA not before:           Thu 19 Sep 2024 13:00:42 +0000
ROA not after:            Wed 18 Dec 2024 14:00:42 +0000
asID:                     701
IP address blocks:        216.156.152.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:44:20:c0:2a:7d:72:b2:14:b8:34:7a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 19 13:00:42 2024 GMT
            Not After : Dec 18 14:00:42 2024 GMT
        Subject: CN=5cb7e14d-0e0f-4a6d-ba75-77b13614b3e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f4:15:c8:1a:6d:78:e6:c2:b7:5b:05:54:ed:
                    77:44:14:72:fe:8f:21:4d:0a:02:44:49:d2:4d:92:
                    f1:c7:30:98:bd:5d:16:a3:5f:ab:df:db:16:8e:75:
                    5d:82:4e:81:f4:ea:ae:b0:d9:f7:fc:18:c5:6c:0b:
                    33:99:9f:98:9c:6a:97:72:94:39:dd:95:c6:7b:dc:
                    63:e4:b2:5d:31:5a:22:e7:48:cc:11:eb:8a:69:f0:
                    d0:36:1a:5e:e6:d2:3a:fc:45:c1:ef:94:62:40:65:
                    7d:c2:1c:f4:c7:ed:60:d0:86:ce:8b:9b:48:a1:bb:
                    71:40:2c:2d:15:21:cc:ec:90:b2:bb:c7:47:9b:b7:
                    51:03:e9:7c:33:bf:ad:42:e6:e2:f3:fa:7d:51:da:
                    0b:71:65:80:66:ee:4a:57:e5:82:20:e4:4e:d8:09:
                    90:0c:02:a0:d2:0f:4c:fa:df:d6:04:93:00:da:48:
                    c6:92:92:b9:8b:9e:1c:d1:85:c8:20:ed:60:bc:0d:
                    4a:e5:a2:13:c0:24:0c:33:18:de:00:2d:95:7e:e4:
                    b7:b1:39:4d:85:d2:ec:11:eb:32:9a:35:ad:56:fe:
                    f3:b0:e1:eb:57:ea:16:25:f4:da:77:65:f1:94:a6:
                    cf:f4:d6:96:6b:54:82:b7:52:ab:eb:de:a5:9a:c3:
                    1c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:3A:31:A8:A9:3D:AA:D6:73:A4:49:35:08:20:26:6F:AB:8F:B9:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/321fb60d-9686-3132-a037-9e5f9e621a79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.156.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:c0:fb:bb:65:36:6a:41:0a:72:2d:e7:f6:0c:19:b5:56:76:
         79:78:6d:86:f9:11:8e:ac:e6:17:c9:a8:75:e4:d9:61:83:2c:
         e4:8d:37:1a:51:61:f5:3f:55:80:a9:48:9b:ba:ba:d5:62:7e:
         29:4a:29:c6:11:0d:40:e0:7f:8a:10:72:2e:65:71:5a:74:08:
         7f:49:46:83:03:b8:ea:af:1c:a0:d7:b8:16:b3:2a:8c:e7:f4:
         b3:57:7f:04:79:50:32:2f:3d:06:7d:b4:24:cd:4d:9e:13:7b:
         98:c2:47:b0:e4:bc:b5:ce:07:97:95:47:13:2e:85:b2:67:a7:
         8b:f9:79:dc:63:eb:33:3f:db:f9:db:ba:93:52:d2:ef:6d:e9:
         ad:27:00:c6:bb:61:b2:c4:2c:81:cd:ed:55:d4:0c:f7:ca:ff:
         e1:a9:f3:44:94:66:50:3e:00:40:a7:19:8a:eb:c3:21:54:26:
         ee:18:2b:67:94:cc:7c:ed:74:5f:56:57:df:98:08:2c:c5:42:
         95:c7:10:42:f3:13:ab:43:93:f0:53:2c:a3:aa:ee:83:af:5d:
         25:67:5e:d5:f0:bc:54:36:07:6f:f1:37:8b:73:2c:1f:f9:ae:
         9b:f6:2c:cd:23:9b:b6:8f:85:75:1c:81:bd:a8:53:06:fb:79:
         e5:a3:f7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:23 2024 by rpki-client on console-fra.rpki-client.org