Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1a622cd1-2bfa-3115-9291-bdeba2c112a2.roa
File:                     1a622cd1-2bfa-3115-9291-bdeba2c112a2.roa (raw, json)
Hash identifier:          4TEsmd8qEhfCiFFMNlPcp2ouXWr3ThVMc38exdOkzto=
Subject key identifier:   F1:09:5D:17:9B:77:DE:1B:A6:72:63:A1:41:F7:F9:43:A0:59:89:ED
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584988CF4D094538AA05483BB040
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1a622cd1-2bfa-3115-9291-bdeba2c112a2.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     397220
IP address blocks:        156.154.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:4d:09:45:38:aa:05:48:3b:b0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=4868c01b-347e-4ab0-8030-9b00bb4a09b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d2:06:c6:3b:31:6a:7d:c9:83:38:51:b8:34:
                    ac:f9:08:e0:be:f2:73:16:bf:ec:18:d4:a2:13:55:
                    bf:d0:f0:b2:8c:4a:9e:eb:14:ee:b0:a8:a2:16:c1:
                    62:8d:37:10:ce:74:c2:1b:03:e2:4d:90:b6:a9:0e:
                    e0:66:db:42:05:1e:b9:68:1c:d5:08:2e:fa:a9:99:
                    5f:e0:94:b7:dc:6c:b8:98:e8:19:3e:a3:f0:0e:23:
                    b3:72:7a:87:00:62:e3:b1:68:7a:b8:5c:10:cf:31:
                    03:92:67:8d:cd:aa:69:35:10:56:63:9e:63:74:9f:
                    39:e3:11:83:8d:e7:1f:f5:1e:87:7f:97:55:73:94:
                    26:b1:93:07:61:f8:7c:5d:1f:ed:e3:03:ba:4b:6a:
                    5a:30:ba:6f:53:98:32:b3:ed:fc:20:ff:29:77:47:
                    c1:94:c6:3f:bf:9e:e3:f6:c4:9e:75:2e:5f:08:15:
                    91:f8:8a:d1:61:d5:ce:c3:d3:dc:63:65:11:b8:a8:
                    3b:16:7f:d3:82:e7:c3:01:c4:79:25:22:13:a2:9c:
                    a8:02:6e:0e:5a:bd:d9:72:41:11:ae:92:7f:20:68:
                    5a:a9:39:c6:62:f5:ac:96:1e:f6:ea:0a:99:eb:1a:
                    ae:de:2f:f0:63:29:a3:4d:65:1f:65:c3:8d:b1:6c:
                    6f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:09:5D:17:9B:77:DE:1B:A6:72:63:A1:41:F7:F9:43:A0:59:89:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1a622cd1-2bfa-3115-9291-bdeba2c112a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:39:0f:26:f8:5d:c4:e1:b4:eb:75:4d:ed:7c:37:c4:d3:c9:
         81:26:f6:3e:e5:d9:14:7a:3e:a3:f4:f5:72:c0:e9:77:e9:29:
         52:a3:8f:3b:2c:c3:38:c5:b7:ca:69:ff:7c:e7:49:fe:ea:ed:
         8c:34:72:46:63:c8:f1:d0:ed:0d:c0:f6:f9:b7:e6:d6:56:2f:
         cb:2c:41:4e:68:26:8d:36:81:55:e7:fe:50:89:86:e1:71:17:
         bd:76:86:f3:2d:18:0b:47:ce:80:d9:e2:a0:14:79:54:a5:54:
         c8:e9:a6:74:03:4f:7f:1e:99:9c:90:99:96:5e:a4:c9:88:5d:
         cd:75:64:be:ee:28:e6:1e:32:c9:95:3e:b5:a0:82:19:e2:7f:
         04:fd:87:fe:74:8d:4c:24:12:0f:cd:86:20:f8:41:fb:92:6a:
         4d:c5:f8:2a:88:ac:79:06:59:c5:70:6d:74:f4:4d:4b:62:c3:
         d8:33:a4:3f:4c:fb:60:ab:39:03:0c:97:1a:ab:bd:62:18:51:
         0b:de:e7:d8:81:48:96:09:9a:d5:fd:43:60:30:3e:ba:ce:c3:
         84:f8:80:38:2a:99:7b:13:3f:f9:02:36:0a:66:9e:98:d2:82:
         5f:3f:e2:75:75:8c:18:3e:21:b4:dd:62:fd:f7:d5:2c:51:fb:
         90:06:e1:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:57:42 2025 by rpki-client