Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/00f7d2d5-01eb-304e-b0a0-e570b948a09b.roa
File:                     00f7d2d5-01eb-304e-b0a0-e570b948a09b.roa (raw, json)
Hash identifier:          QXJdpwJodznL3mkn1Qolb0KeKQMaiT46k7aEmooBwFc=
Subject key identifier:   AF:BB:86:22:02:32:DA:6D:BC:58:66:DB:76:85:4A:0D:DB:84:F8:74
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285849F17FEC336FA56B305943F650
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/00f7d2d5-01eb-304e-b0a0-e570b948a09b.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     397237
IP address blocks:        156.154.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:ec:33:6f:a5:6b:30:59:43:f6:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=bea24988-ea62-4b4f-9c93-6820c790d5bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2d:9c:a1:d6:47:fd:6e:54:f3:b3:3c:7d:c4:
                    43:7a:15:a7:86:f5:80:1a:e7:ea:bb:70:2a:bb:56:
                    ec:c6:fa:65:ec:8b:c0:38:84:ef:e6:37:9d:81:ad:
                    51:62:22:a3:8f:9e:13:db:93:a9:67:01:3f:65:6c:
                    a0:ef:56:30:5a:7c:b3:59:00:b2:41:b1:e2:c4:9b:
                    6b:a1:0b:3d:d0:72:37:3e:08:38:98:8a:75:ce:dd:
                    f7:c1:96:44:cc:8d:ad:ae:be:52:3d:a2:4d:39:ee:
                    32:f0:17:15:95:0f:f8:11:b1:6f:b8:7d:b6:04:5e:
                    c7:c4:ae:db:d1:49:23:3e:11:44:9e:4d:7b:3e:b2:
                    77:d5:86:91:34:41:75:79:2a:b4:e7:5e:50:b3:93:
                    40:7b:fd:08:51:a3:1b:d0:14:e6:9a:b2:61:f7:f1:
                    e8:52:d0:75:fd:9d:a1:85:5b:b8:7e:92:ec:f0:56:
                    d5:95:86:e2:0f:1d:4b:d5:6d:a2:ad:80:5a:e2:a1:
                    b0:5a:1d:f2:28:8d:44:72:5f:3a:44:ef:9d:53:de:
                    f4:66:35:05:62:f1:41:f9:13:bc:6c:57:60:5b:fa:
                    0c:46:ab:8d:ae:e7:ad:d0:25:d1:5e:2c:f8:12:e0:
                    bf:b6:46:4d:d3:87:68:27:4e:54:bc:2b:d5:5a:9b:
                    70:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:BB:86:22:02:32:DA:6D:BC:58:66:DB:76:85:4A:0D:DB:84:F8:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/00f7d2d5-01eb-304e-b0a0-e570b948a09b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:5a:66:e1:5c:0c:07:eb:fc:fd:6f:ef:5c:e3:75:05:9c:19:
         01:9a:2b:88:6b:d0:a2:ed:63:b7:fe:5d:29:63:f9:27:cd:96:
         ab:77:d1:74:a6:c9:e4:a3:96:59:24:b3:1a:63:76:27:28:c6:
         3b:22:d3:a5:55:45:ac:0c:36:a6:47:ef:0a:b7:f2:1b:32:b6:
         dc:ac:dc:9b:9e:68:5b:a0:2e:4e:9e:4e:dd:45:fe:e8:7e:f8:
         44:af:4f:ba:36:47:84:a5:c2:a8:22:97:4d:8c:2b:c3:b0:d9:
         4e:73:88:0f:6b:ad:df:41:c5:d7:78:5d:ab:dd:87:19:fb:ad:
         a6:ed:f1:2b:81:2d:7f:8d:8f:3e:b0:23:34:24:90:3b:69:f8:
         a0:de:8b:30:a0:83:2f:d6:98:cf:1d:54:22:88:e5:49:46:86:
         3b:d6:3c:ae:cb:6e:3c:f2:51:cb:e5:c1:f2:04:9b:4a:a3:b7:
         b7:f0:d1:3d:fb:cb:c9:51:34:72:01:ea:ce:1e:ef:91:6e:98:
         f9:19:8d:0a:fd:1e:34:b4:a6:d5:76:35:c5:62:a0:35:c2:34:
         09:ba:88:aa:fd:c8:a2:e2:41:9a:b2:8c:f9:2d:ae:04:ff:c5:
         3e:28:3a:c5:8d:3b:be:da:fb:9f:ce:48:01:2c:12:92:7e:2e:
         0d:df:92:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:01:28 2025 by rpki-client