Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/07a4d280-1ea4-3f08-b03b-15184f283a6f.roa
File:                     07a4d280-1ea4-3f08-b03b-15184f283a6f.roa (raw, json)
Hash identifier:          xJHccALnHVQREKejJNtMeOvRpgs/6o5ofXyRhK8fjfU=
Subject key identifier:   2D:34:A5:CC:47:0F:71:4E:AC:6E:3C:83:0E:72:BD:EC:C3:C8:EE:EA
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A1F904C9F3CD9EC2168B0B680
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/07a4d280-1ea4-3f08-b03b-15184f283a6f.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     399157
IP address blocks:        156.154.176.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:4c:9f:3c:d9:ec:21:68:b0:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=4ccaa8ec-53d7-4974-8722-29157f4622bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:46:c5:60:6a:bd:15:90:26:b8:44:a0:eb:2d:
                    50:23:01:ae:35:a9:df:b4:07:a1:25:92:57:c4:f8:
                    9b:3f:b5:97:25:30:3c:3d:a5:4e:e2:a8:86:13:db:
                    3d:c6:4a:6e:98:45:9d:db:7e:48:ab:b2:54:f7:d7:
                    8f:a7:71:3c:87:ed:64:d7:09:f0:0f:f4:c8:4a:3e:
                    ef:33:68:62:db:cb:de:55:d6:91:27:1b:bf:b3:9f:
                    e3:4c:13:b7:c6:29:30:3e:54:9a:84:53:c7:f6:eb:
                    37:2c:6c:88:e6:cd:f3:76:56:1c:8e:54:6b:0c:b0:
                    69:00:aa:df:db:9e:36:b2:99:e2:58:86:4d:ab:a0:
                    91:c6:43:7b:dd:9d:4f:e1:29:de:9e:67:f1:e8:dd:
                    d4:a1:8b:2c:6f:f6:8b:22:2b:6e:79:a6:7c:04:71:
                    50:e0:1d:44:3c:16:00:66:fe:58:9b:3d:6f:49:eb:
                    89:07:ac:34:5f:ee:51:e6:b6:66:88:ad:dc:e4:21:
                    cf:53:00:e7:91:e5:f1:b7:a4:6d:fc:42:09:d2:43:
                    6a:7a:5e:ba:3a:e1:02:c0:03:82:c8:b0:fa:f9:a3:
                    8c:44:31:0d:d9:08:19:9b:25:7e:92:38:e4:09:2d:
                    21:72:b3:02:68:2a:1a:50:a6:0f:bb:b8:78:75:b3:
                    77:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:34:A5:CC:47:0F:71:4E:AC:6E:3C:83:0E:72:BD:EC:C3:C8:EE:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/07a4d280-1ea4-3f08-b03b-15184f283a6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.176.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:67:f8:08:16:bd:33:2e:c7:26:6d:a4:40:dc:71:4b:34:00:
         ec:76:72:d4:b1:7e:b6:cd:8a:33:45:95:2c:74:9a:41:40:55:
         38:e4:30:cf:29:31:a7:aa:98:a8:b6:fa:41:8a:43:f5:0f:aa:
         6e:a4:a0:2e:c8:75:b5:26:2b:0d:a8:3f:32:6a:dd:b1:ad:d7:
         8a:d9:7c:85:61:ac:a5:8f:20:fd:ac:b5:a8:b8:b1:87:92:aa:
         bd:aa:51:9f:94:1d:14:13:f0:70:99:08:2d:b6:7c:f6:2f:3b:
         64:db:26:bf:f3:88:92:4e:8b:24:b6:99:1e:d4:98:10:8e:a4:
         b4:4a:83:58:5e:41:31:54:f0:07:2e:a8:e0:69:94:93:31:c0:
         63:59:9a:d4:cc:ad:94:bb:f3:49:b8:84:c1:57:8a:cb:e0:3e:
         a4:fb:a9:01:ee:c0:8a:b4:2d:47:ea:dd:b5:be:53:65:d6:94:
         1a:b9:4d:29:6c:a4:e8:b5:67:11:4e:92:c3:66:9b:a6:77:d4:
         5e:c6:59:b3:45:f5:37:dc:22:24:ba:b9:89:8f:d3:7a:70:9e:
         46:1d:67:27:79:11:ac:64:61:a6:fb:2f:0e:b0:c3:8e:f8:04:
         74:6a:2b:3c:02:8b:d9:53:6a:3e:2f:ee:71:43:26:8b:d0:1f:
         19:b5:86:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:12:42 2025 by rpki-client