Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/21f56346-df4a-3f21-acd5-5dfa00260009.roa
File:                     21f56346-df4a-3f21-acd5-5dfa00260009.roa (raw, json)
Hash identifier:          kyDJSuEIusCQ9h2aFEdirkYq+73D7QDt4b6GnZTez+E=
Subject key identifier:   BC:5E:35:C1:13:B9:1D:9E:C9:4C:33:53:E8:B2:7A:06:D5:4B:F3:3D
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285849F17FF36A69093C3BE701A300
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/21f56346-df4a-3f21-acd5-5dfa00260009.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     397224
IP address blocks:        156.154.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:f3:6a:69:09:3c:3b:e7:01:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=6e3338de-9323-4943-9ded-d18fb563a859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:89:96:ce:a6:e4:e1:86:8c:8c:fc:60:89:e9:
                    d2:7c:3d:d0:01:de:fa:da:34:02:0d:19:1b:03:c9:
                    d7:e2:90:d3:29:4b:3e:3b:15:99:d4:9c:54:5c:c3:
                    1b:ed:31:02:7b:8e:5e:9c:7b:5c:64:fe:9e:88:56:
                    5d:20:a5:d7:5f:7b:1c:9e:51:21:62:8e:cc:3e:98:
                    e6:4a:86:24:e0:0a:1d:35:1a:4a:83:95:5f:75:c1:
                    ed:35:2c:f9:0a:e3:03:86:35:d2:d8:7c:40:3c:80:
                    74:a1:0c:b6:19:de:a6:34:d2:3b:ca:ab:da:a4:a6:
                    e6:7b:fd:4c:ae:8b:bf:27:dd:e4:c8:ba:03:0b:2d:
                    21:f7:13:83:f4:68:36:fe:cb:10:cd:d5:9a:1b:d6:
                    df:4a:e2:9c:86:10:e8:0c:78:0d:ef:b0:08:8d:9d:
                    31:09:e3:b9:e9:4a:c7:8d:c0:08:2d:05:27:3e:4d:
                    16:13:e1:d0:3a:28:9b:8b:16:24:36:1f:97:a4:38:
                    e8:c1:c1:93:2b:84:4c:6c:da:db:97:7c:e5:22:ba:
                    fe:be:84:0f:52:05:cb:ce:e1:00:00:6f:a1:2d:97:
                    67:0a:2e:e5:bd:9c:ee:69:5e:cc:a7:48:18:67:fd:
                    ff:46:4f:2d:72:bd:22:af:e4:e7:ee:00:09:32:ba:
                    ca:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:5E:35:C1:13:B9:1D:9E:C9:4C:33:53:E8:B2:7A:06:D5:4B:F3:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/21f56346-df4a-3f21-acd5-5dfa00260009.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:09:0d:ef:1d:e0:b7:a2:dc:bc:e0:2f:c2:25:9c:02:49:98:
         9c:f4:7a:5e:8e:79:8b:e4:21:2b:b0:c1:5e:b6:6c:8e:a0:8d:
         ca:f1:a0:1b:a2:e1:4f:d1:0b:9b:ac:94:3c:f2:ae:0f:0c:3c:
         80:67:e8:ed:6e:d4:c6:ac:54:fe:4b:a0:dd:4b:89:d2:8e:52:
         66:cb:62:ae:f9:be:fd:81:9d:4b:b0:b7:52:4a:39:97:72:af:
         0c:8c:5d:bf:25:9d:d0:16:3a:ec:38:b4:af:ad:df:8f:ae:78:
         d9:92:98:51:42:89:8d:ed:0e:85:86:02:a7:b4:94:7d:88:ba:
         98:5d:d6:40:e2:17:bf:2e:7c:3a:f6:49:f3:e0:ee:68:e5:6c:
         3b:d3:1b:a3:b4:99:48:3a:32:7a:09:1a:97:36:44:cf:d1:91:
         28:3e:1b:57:e6:1b:54:cf:66:ec:e0:b5:d0:83:c9:e4:88:72:
         85:46:5d:69:74:ca:90:50:ff:8e:39:32:26:ff:0e:f8:c5:07:
         06:7d:ea:c7:80:8f:c6:e0:6d:52:14:d0:d5:80:e8:bc:e9:33:
         9b:5e:ed:a8:e6:bf:59:53:87:16:35:d0:08:2c:86:c8:a5:32:
         9c:8d:4a:60:76:52:98:df:dc:f9:cc:08:e0:df:e9:5b:cf:11:
         27:1e:49:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:14:21 2025 by rpki-client