Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/291cd129-010c-3cef-924d-07edcd32bd2a.roa
File:                     291cd129-010c-3cef-924d-07edcd32bd2a.roa (raw, json)
Hash identifier:          4c+K7Tj+jNp/B8q/UuJi7gvJJo22qH5UEab1q1NnxVQ=
Subject key identifier:   C9:A0:9C:B7:24:C8:90:1F:42:8B:2A:D1:DC:1D:F1:2A:F2:ED:BB:F6
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858494B64274F54CD53372B110280
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/291cd129-010c-3cef-924d-07edcd32bd2a.roa
Signing time:             Mon 24 Mar 2025 13:00:53 +0000
ROA not before:           Mon 24 Mar 2025 13:00:53 +0000
ROA not after:            Sun 22 Jun 2025 13:00:53 +0000
asID:                     397218
IP address blocks:        156.154.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4b:64:27:4f:54:cd:53:37:2b:11:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar 24 13:00:53 2025 GMT
            Not After : Jun 22 13:00:53 2025 GMT
        Subject: CN=536f8c83-6e35-436a-bdcf-e49d2936c314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:47:6f:a0:a7:cf:22:97:54:84:ce:4f:f8:f1:
                    7b:bb:26:b0:ce:bd:fa:b9:d5:d9:93:10:13:32:1d:
                    65:1e:05:88:ab:c3:25:d4:f0:8a:15:84:24:6c:ed:
                    5b:af:c7:ce:de:c8:42:c4:19:02:4c:3a:f9:11:2d:
                    a6:ef:66:c6:6c:36:61:61:b0:04:17:f9:e2:52:87:
                    5e:9b:de:c5:c3:4a:25:56:59:13:3c:26:8d:3a:8f:
                    46:47:f7:f7:3a:26:84:1c:17:b2:41:32:c1:9a:a5:
                    12:2f:3c:87:d6:2f:a4:d7:2d:a1:16:99:4c:75:27:
                    3d:3f:ae:e2:22:d5:45:f5:39:9b:6a:a7:c4:f8:da:
                    46:91:e8:b1:fd:f0:6d:26:2a:03:ec:61:a8:90:78:
                    f1:90:a9:02:eb:79:71:b4:94:4d:35:bd:62:f5:32:
                    e3:5f:1a:01:e0:f9:70:40:32:48:b3:0f:8e:1a:8f:
                    e9:3d:16:38:a9:2c:ce:cb:b6:b3:5b:f3:cc:76:76:
                    af:5c:01:af:cc:98:5d:fd:77:e5:1d:46:da:db:b6:
                    1f:4f:0c:b1:cd:5d:39:7a:e7:43:b5:02:97:99:52:
                    3e:4d:d4:d4:80:b7:89:e5:34:ac:96:ff:43:5a:5c:
                    cb:6d:77:57:73:48:3c:30:28:07:87:6f:ae:99:5c:
                    47:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A0:9C:B7:24:C8:90:1F:42:8B:2A:D1:DC:1D:F1:2A:F2:ED:BB:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/291cd129-010c-3cef-924d-07edcd32bd2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:12:8f:1f:e4:14:7c:11:04:c3:39:bf:a5:42:b7:ed:85:58:
         b4:8c:8e:45:42:46:28:b5:e8:26:ed:97:2f:74:2d:18:ea:7b:
         be:a9:89:a8:47:af:df:b5:91:ac:52:3b:5c:93:d7:d3:aa:81:
         d6:d4:35:22:99:f3:6a:eb:37:39:a8:e6:19:f0:9e:87:60:ee:
         b1:1c:14:3a:45:cd:c3:42:40:a0:38:fd:f2:09:4a:99:00:fb:
         5e:93:f5:19:1e:8e:46:91:e5:4b:c2:e8:0f:70:5a:f3:18:07:
         47:f8:bd:82:fc:23:be:7d:6f:27:3f:1b:9a:b8:93:64:10:cd:
         11:0b:c8:51:d8:fb:6f:90:49:54:8e:45:db:9a:16:09:f4:87:
         fd:49:9d:e6:b3:35:15:ba:52:bd:de:cf:6a:f8:f4:10:9e:46:
         c9:8a:62:81:89:d6:da:e8:c0:e2:78:b3:d6:fd:9b:86:94:c3:
         d7:96:49:39:3c:7a:de:00:1c:be:ff:b3:65:43:db:37:6b:46:
         c1:f0:76:8b:66:6b:92:67:1d:d0:82:00:a9:ee:75:43:de:77:
         56:82:67:5f:90:3a:0f:ac:5c:f9:24:46:f6:7d:be:9d:7b:e1:
         f3:b1:cf:5b:ec:85:e5:2c:ce:0d:b4:30:a4:d3:d2:e8:81:7a:
         e6:7e:11:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:05:23 2025 by rpki-client