Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/11380dc8-9e2b-3aab-990f-98e199f34ffd.roa
File:                     11380dc8-9e2b-3aab-990f-98e199f34ffd.roa (raw, json)
Hash identifier:          n5QjLle65T54VVi11GB9aVwAT4kywMuE73ICj4p53Z4=
Subject key identifier:   78:5F:B1:14:53:D1:45:44:FC:BD:05:CC:32:14:A2:F2:BA:59:48:43
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858499C59EF37BA28F589CA1BE1C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/11380dc8-9e2b-3aab-990f-98e199f34ffd.roa
Signing time:             Tue 22 Apr 2025 13:01:00 +0000
ROA not before:           Tue 22 Apr 2025 13:01:00 +0000
ROA not after:            Mon 21 Jul 2025 13:01:00 +0000
asID:                     397219
IP address blocks:        156.154.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9c:59:ef:37:ba:28:f5:89:ca:1b:e1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 22 13:01:00 2025 GMT
            Not After : Jul 21 13:01:00 2025 GMT
        Subject: CN=a803d395-d548-4d73-82f5-87644a4af665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:46:cf:d7:c2:13:96:b2:45:81:a9:29:f2:80:
                    c4:77:5b:b5:e9:dd:89:2e:6c:dd:cd:24:f9:48:fe:
                    bb:53:77:27:98:0a:2b:4d:20:49:6d:a7:2a:c0:22:
                    77:b2:c5:98:4b:55:33:03:b9:11:71:c5:fb:45:8c:
                    b8:cb:ca:87:35:4d:67:8f:a0:a3:0a:66:2c:12:59:
                    36:15:49:a2:14:44:86:21:82:ba:9c:24:0f:45:a4:
                    b8:bd:a4:41:34:e1:3e:dd:06:08:66:7c:1d:29:6a:
                    38:d0:84:30:e5:1d:99:21:da:7c:9d:76:0f:72:0e:
                    cb:71:68:78:ff:32:6a:2e:ae:10:c7:f4:19:e4:f6:
                    86:59:21:06:70:c7:bd:35:6c:3b:76:ea:79:87:5c:
                    47:4a:e6:62:5a:0f:8d:14:38:63:96:45:26:f0:81:
                    05:94:b5:5a:e2:5c:58:1c:6d:aa:18:ad:e1:6a:7e:
                    4f:19:b5:93:93:91:d0:08:35:f1:2d:c8:8e:b2:84:
                    ac:18:f6:31:ba:9d:95:84:7a:19:cf:40:9b:f8:cc:
                    1a:c2:27:0b:65:76:5d:f5:21:ce:71:bf:28:2b:9c:
                    a2:19:3f:c4:fb:2b:5b:c9:f5:a4:29:c4:5a:46:d9:
                    a7:36:2a:2a:04:81:7c:49:c9:ae:60:89:f2:ac:64:
                    1d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:5F:B1:14:53:D1:45:44:FC:BD:05:CC:32:14:A2:F2:BA:59:48:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/11380dc8-9e2b-3aab-990f-98e199f34ffd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:56:66:86:2c:ca:db:48:37:dd:f7:a2:0a:11:55:fc:7e:03:
         1f:18:20:5a:7f:dc:8f:5e:2f:ee:cd:40:e5:54:c2:32:8f:79:
         f1:d0:b7:30:b4:ae:b5:71:17:1e:e4:5f:5a:d9:de:9a:2c:8b:
         63:98:6e:40:cb:6b:f4:28:11:87:06:11:66:3b:36:10:a5:8d:
         a4:87:b8:49:ad:85:6e:a6:e3:99:09:0b:c1:9b:45:9b:23:23:
         f8:79:7a:50:f1:86:12:1e:dc:4f:08:29:14:1e:d2:e7:90:b7:
         b7:28:02:d0:f5:f2:1f:39:24:f7:87:6d:0b:c3:ae:54:44:78:
         3a:7a:fb:fb:55:82:0c:08:01:d2:b4:12:75:b4:0c:49:88:82:
         ea:e6:56:aa:1e:a4:a5:c3:46:9a:b0:e9:3d:ee:36:2a:82:54:
         52:06:a0:c9:09:e1:f9:62:cc:38:14:83:65:f9:15:f5:37:4f:
         e8:ec:1b:26:3b:65:62:70:9e:4e:eb:27:4f:86:17:e3:d6:92:
         11:73:2b:e2:9c:cc:cd:75:65:cf:8d:4e:95:4f:29:51:e6:cc:
         49:8b:0f:9a:84:f9:55:3e:21:bf:ed:0d:74:a9:0d:6c:b8:43:
         58:f9:78:79:f0:5b:b8:07:01:f0:b6:8b:76:38:e7:24:f8:3f:
         4d:72:53:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:01:57 2025 by rpki-client