Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/053ebe11-3407-328a-92ce-ef71ca0876fc.roa
File:                     053ebe11-3407-328a-92ce-ef71ca0876fc.roa (raw, json)
Hash identifier:          sJqBOWswv7UVtOEURWgwaT2DNElkJZVpbW8eqaAX7NQ=
Subject key identifier:   3C:95:72:0C:29:9D:23:C8:12:DD:E2:86:08:C6:20:F5:9A:EC:92:41
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285849BF3F5B3E2176DA58F804B700
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/053ebe11-3407-328a-92ce-ef71ca0876fc.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     12008
IP address blocks:        156.154.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:5b:3e:21:76:da:58:f8:04:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=df7c2a50-9f9a-4428-98f2-c357600dc0ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f5:28:c3:1c:d4:e3:86:4b:f0:c1:da:bc:ca:
                    ec:1d:57:88:87:b9:4a:db:69:80:52:ad:e3:9d:a0:
                    f5:c3:b4:aa:21:f2:4e:52:e1:87:72:d4:3c:5f:28:
                    4e:0c:82:23:25:cf:88:df:a7:35:4b:2d:41:7f:7e:
                    c9:24:27:6d:f1:93:08:27:56:13:ee:e1:18:1d:c9:
                    c4:c6:9a:f5:a6:91:c5:90:9a:7a:07:17:69:09:c0:
                    98:8e:88:02:e0:68:9b:9b:ce:ce:69:92:cb:0a:75:
                    32:3d:1d:b0:9b:d6:cd:c8:64:d2:48:9e:48:36:0a:
                    f9:2b:d2:ba:02:52:5c:2d:66:f3:04:1f:83:1a:cb:
                    87:79:17:30:7f:ea:d5:35:10:08:45:08:23:32:79:
                    18:ce:64:5a:ab:68:ed:13:f2:fd:ef:95:d2:86:18:
                    d5:e5:a6:1a:4b:fe:87:4a:3e:a5:84:2b:df:64:0c:
                    e7:c7:ab:08:d2:fb:d0:fb:c4:e9:99:cd:99:c3:5a:
                    5a:fa:42:17:bc:1c:c5:cd:d8:50:33:60:dd:71:ba:
                    a8:6b:31:7b:97:4c:2b:4f:74:c7:81:92:c8:28:a5:
                    9a:26:81:f6:ea:9e:b8:1b:ff:50:9b:2e:ac:42:94:
                    47:9a:ec:8b:80:35:14:1c:d6:78:1c:d3:6c:df:40:
                    8c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:95:72:0C:29:9D:23:C8:12:DD:E2:86:08:C6:20:F5:9A:EC:92:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/053ebe11-3407-328a-92ce-ef71ca0876fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:dc:e8:f7:07:63:7b:78:04:6d:a3:e3:85:7d:76:28:48:e1:
         89:d6:cf:13:ab:d9:cf:d8:2b:88:cc:3e:cf:61:ab:ec:38:8f:
         fe:9d:32:50:2a:59:67:f3:ef:af:76:08:68:dd:b6:ae:40:06:
         93:b0:a2:ee:95:c0:8b:d8:f0:27:f5:24:cc:78:ab:00:38:14:
         79:d0:fc:3a:d7:a2:59:21:60:6f:b7:06:93:df:b4:e7:00:57:
         35:d0:dd:0a:65:d7:4a:e6:53:55:ae:04:ea:99:b6:a4:3e:66:
         3e:76:ca:d0:10:f3:b0:ca:9b:2f:61:db:f0:7e:81:6c:9e:d3:
         93:17:6b:40:31:44:27:17:cb:72:f3:4f:21:da:cf:69:da:06:
         3e:49:99:3b:02:f4:36:af:fc:3b:d2:71:ff:96:63:0c:d4:81:
         4a:fb:a9:90:ac:2b:f4:ed:4d:b7:df:1c:cd:f8:e6:ec:35:30:
         f7:a4:50:8f:7b:08:1b:31:e4:85:82:70:a7:a9:75:f9:43:bb:
         63:0c:2c:21:d4:12:45:bb:aa:d1:2b:24:e8:1d:ac:7d:cd:45:
         f5:ab:8e:c5:85:5f:bc:01:d4:81:c6:be:db:72:a4:b7:c4:1b:
         fc:5e:6c:f4:ac:f6:8f:75:03:4f:0e:65:94:94:0f:45:8a:26:
         14:88:af:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 01:22:46 2025 by rpki-client