Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/12df2d77-daed-3a22-ac0a-b806dcc414d8.roa
File:                     12df2d77-daed-3a22-ac0a-b806dcc414d8.roa (raw, json)
Hash identifier:          aKimMg2sFBpFOPqXzoOBTaYBr5utqGrRaCIrfNrWwVc=
Subject key identifier:   49:49:E7:BB:7E:BA:EC:DF:ED:05:E4:B3:8C:2A:DD:32:CA:E1:47:A1
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285849F17FE501EC3A2E1D72F4D590
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/12df2d77-daed-3a22-ac0a-b806dcc414d8.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     397214
IP address blocks:        156.154.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:e5:01:ec:3a:2e:1d:72:f4:d5:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=5dd748e9-88ab-494a-b2b9-0068a545657f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:9a:bc:e8:29:50:45:5e:26:40:22:de:ec:69:
                    63:45:66:80:ff:0c:6b:57:5c:77:89:c0:59:f2:24:
                    a0:a8:bf:93:17:29:d1:08:13:f8:be:55:8a:54:95:
                    bd:d5:a1:5b:32:d2:d0:eb:59:ba:ca:cf:12:7d:bf:
                    ae:62:a3:77:7f:2a:28:05:b5:90:ba:4e:34:42:f1:
                    18:ad:7b:2d:4b:c5:43:e6:07:eb:9e:ce:0b:bd:b0:
                    d0:08:f0:df:6a:31:df:83:ae:98:78:53:d3:a8:d1:
                    5a:41:5f:3d:d2:e0:0f:07:c3:3a:70:30:63:94:19:
                    ac:93:ab:ff:c4:9b:86:f4:dd:44:23:1e:2b:1b:4f:
                    2e:69:12:58:23:3b:9b:cc:2d:c5:78:a3:38:84:db:
                    c7:62:68:ad:b0:48:35:1d:10:87:c9:be:0c:39:3a:
                    3b:f0:68:ca:52:b1:94:78:05:1b:9c:d4:d5:80:4c:
                    32:1d:b2:37:60:03:f7:80:13:db:b6:fe:e8:eb:bd:
                    aa:11:2a:2d:3b:c2:4b:61:8a:f6:61:ea:6f:b2:1b:
                    b1:ad:08:61:96:ac:ac:f8:7b:44:04:18:0a:a9:0f:
                    4c:34:5f:dd:15:84:8e:e2:af:7a:cd:5b:57:2d:d9:
                    bf:c4:83:81:80:2d:5e:10:06:b4:66:dd:97:87:28:
                    b6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:49:E7:BB:7E:BA:EC:DF:ED:05:E4:B3:8C:2A:DD:32:CA:E1:47:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/12df2d77-daed-3a22-ac0a-b806dcc414d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:c0:fc:11:42:b7:34:da:a8:f5:ec:b3:29:51:ba:8e:4b:e9:
         9c:07:50:b3:a2:0e:fa:6a:17:f8:4a:b4:a8:69:cf:e0:a6:71:
         76:5c:9a:d2:56:e4:af:57:ca:0f:53:54:a9:76:8a:ae:2c:5d:
         0e:7a:17:90:7b:9c:19:a0:69:4d:55:44:2b:7a:f7:c1:c7:b8:
         6c:ae:de:83:8c:f9:16:71:d8:b6:87:a7:8b:7a:b2:da:ad:d2:
         1d:1c:70:bf:e9:a8:42:32:5c:9a:12:f9:a4:e0:d2:97:71:84:
         14:1b:eb:14:98:d5:61:5f:12:6a:e1:b0:28:6f:6e:a2:75:b0:
         16:38:e7:0d:4b:1f:c4:17:cb:b6:b3:9a:27:4e:79:fb:bc:d7:
         74:76:ff:c6:0e:20:20:3c:64:bf:96:78:67:e0:ce:f4:3f:01:
         47:34:96:0d:77:82:86:ee:9f:df:97:89:9f:8b:3a:6e:7e:ea:
         8c:13:7e:9f:a7:8b:e8:0e:2f:27:f8:05:db:70:3a:3e:30:84:
         20:e9:15:f1:f3:dd:aa:73:9b:03:95:62:bb:b2:19:15:8a:13:
         aa:e9:a2:09:bb:0d:27:0b:f3:4c:c8:59:fb:bb:70:b4:7f:97:
         a4:3b:c4:45:6b:47:29:e2:bb:c0:d2:4a:7c:94:63:9b:75:4c:
         96:f8:3e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:09:27 2025 by rpki-client