Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/356d2633-4906-3015-a77c-067a5ba0d7c8.roa
File:                     356d2633-4906-3015-a77c-067a5ba0d7c8.roa (raw, json)
Hash identifier:          JjcxDzgXvzwehMAK7LUkGZ2LBdT3Hir4EbCdkhxxLrs=
Subject key identifier:   68:4A:F8:D9:7A:37:43:F2:B5:84:77:8C:65:EC:EE:19:FC:E3:F9:CE
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584988CF501B4EC5323E06A038C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/356d2633-4906-3015-a77c-067a5ba0d7c8.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     397237
IP address blocks:        156.154.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:50:1b:4e:c5:32:3e:06:a0:38:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=e4032626-f00f-4c17-bbb5-9ebff4f235b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e6:c9:9a:d1:e0:16:94:cb:96:e0:b0:13:58:
                    6e:97:4c:98:8b:c4:44:dc:f0:e1:c0:81:21:21:8e:
                    c9:62:4c:27:ed:19:f6:80:d8:8b:86:28:9a:8a:54:
                    97:f8:9c:6a:2a:37:23:31:46:93:bc:85:cf:89:18:
                    4b:30:32:9f:c1:d4:25:15:cd:5f:56:29:8e:19:05:
                    b6:5a:5c:0d:f7:35:5f:1b:6d:b5:ea:49:32:79:af:
                    46:94:ff:9c:41:68:51:e2:0d:74:6e:d7:82:94:9e:
                    8b:dc:da:23:90:fb:78:68:ab:16:ea:9d:7f:65:e5:
                    be:09:91:9c:51:40:cd:27:18:59:a6:e5:fa:d9:68:
                    aa:7d:a5:f9:d8:7a:2d:02:eb:4c:f1:60:98:c9:7c:
                    bd:6a:1c:49:64:a4:f2:b8:44:25:e9:58:95:98:2f:
                    ed:e7:25:aa:41:23:14:30:37:75:bb:39:e7:b5:53:
                    a3:f3:7e:b8:1d:6f:60:03:26:5d:fc:f7:20:c1:45:
                    7e:67:8d:0c:70:fa:84:19:8e:86:20:3a:c9:86:64:
                    6f:1c:bb:83:4e:dc:db:9b:7e:57:ad:88:ec:aa:00:
                    c2:aa:39:1d:af:f4:6c:2b:7c:c4:0c:9c:04:f6:80:
                    0c:89:3b:c0:8b:1c:d6:6a:bc:42:0b:46:9e:9f:40:
                    f9:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:4A:F8:D9:7A:37:43:F2:B5:84:77:8C:65:EC:EE:19:FC:E3:F9:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/356d2633-4906-3015-a77c-067a5ba0d7c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:3b:78:c5:ba:ab:9e:32:9b:1c:66:60:d0:11:63:9d:32:22:
         1b:f1:ea:20:f9:ec:fc:ee:5e:55:df:85:86:59:ff:df:c4:58:
         a3:9b:5e:91:d7:d1:3a:0b:78:0d:59:51:8f:aa:65:22:b3:5e:
         67:c6:fc:fc:78:c6:e8:17:4a:49:5c:cd:5c:b2:1a:39:e7:fd:
         cd:5c:9b:80:a5:44:27:df:09:4c:fe:e1:bf:3a:4b:d7:3b:59:
         d3:63:45:96:18:d6:c2:c2:f0:87:9e:95:33:3b:dc:dc:10:97:
         ee:77:11:0c:04:18:b3:b9:c6:79:9c:69:0d:4f:ab:96:b7:f6:
         9a:b9:60:f0:d5:24:f2:81:3b:60:16:c1:f7:40:51:65:3d:37:
         45:ad:97:a1:8c:07:e0:07:6e:51:1b:6f:30:d8:5c:df:4b:0a:
         c2:e9:f8:fe:92:e4:df:3e:79:42:a6:c7:0a:88:27:0e:65:b0:
         7a:da:af:60:3b:db:c8:ea:39:90:ae:e1:c5:17:4e:3d:b3:4a:
         c3:a4:78:8e:f9:1a:79:e4:c9:bc:29:b4:68:f6:c4:a8:08:3b:
         6e:b8:0c:fc:aa:16:0e:03:cf:94:f2:07:53:a3:0e:96:dd:d0:
         bc:d5:39:63:a2:ba:ed:48:82:5c:f2:f1:04:3f:9d:a9:fb:b5:
         d4:2d:09:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:26:07 2025 by rpki-client