Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/372db10a-91a0-3eda-863f-2b8a140c263e.roa
File:                     372db10a-91a0-3eda-863f-2b8a140c263e.roa (raw, json)
Hash identifier:          iHO9JahEI2ekuONf2So19xUuTi3BcbU7+Vbo6X61h14=
Subject key identifier:   32:BD:8C:CF:EA:CB:70:B6:A3:5B:C9:D5:FA:76:9A:54:99:2A:3E:8E
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285849F17FFB0518A8A23BBBBE8680
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/372db10a-91a0-3eda-863f-2b8a140c263e.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     397223
IP address blocks:        156.154.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:fb:05:18:a8:a2:3b:bb:be:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=15581ed8-049e-4ae5-bf50-7042be854b1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:17:e0:e2:7e:6d:70:5d:93:70:bd:76:dd:ff:
                    37:2a:1f:eb:35:55:19:5f:86:56:d1:27:2c:93:d1:
                    d5:fd:67:a4:c3:fc:79:9d:7f:6e:40:56:86:1c:a5:
                    44:48:8b:59:6e:5b:cf:75:b4:58:ff:f6:0a:29:e2:
                    79:e8:87:12:fc:a0:fe:17:ff:a7:83:ed:8f:13:87:
                    db:98:53:0b:02:e6:9c:04:4d:11:1a:34:55:8f:1e:
                    85:99:1e:a1:92:7e:41:7d:1b:e1:f3:9d:18:2b:17:
                    69:a4:78:90:8a:73:d6:08:4d:78:33:c6:88:90:dc:
                    6f:8f:e0:5e:1b:c5:6a:db:ab:90:71:a1:6a:60:d7:
                    44:37:c6:1d:b1:84:42:71:81:b2:ef:94:9e:0f:6c:
                    3d:05:98:03:7a:71:e4:18:f6:24:c2:e1:0a:f5:77:
                    c4:96:bb:6b:4b:34:4a:81:b8:7d:9d:3b:26:52:60:
                    d5:11:33:88:b4:a6:d4:3e:78:43:47:6a:5a:8d:5a:
                    39:90:e9:fa:24:1e:1a:95:15:f0:44:ca:76:bb:b3:
                    54:56:b0:0b:34:67:d0:f2:d9:af:39:ae:10:9e:c6:
                    fb:b3:60:fc:c5:48:d3:be:43:7f:d4:42:84:55:95:
                    95:18:7e:0a:9d:be:dd:a3:3e:15:3d:7f:d5:db:84:
                    ec:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:BD:8C:CF:EA:CB:70:B6:A3:5B:C9:D5:FA:76:9A:54:99:2A:3E:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/372db10a-91a0-3eda-863f-2b8a140c263e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:f9:d5:d9:ba:9f:c7:7c:47:c8:8d:5e:ea:b1:74:39:de:7f:
         9f:3c:89:2a:54:04:db:e5:10:48:09:60:76:83:ed:36:85:11:
         30:8a:e7:41:43:7e:de:ce:0b:65:98:30:2d:fa:02:28:a7:c7:
         ca:5b:31:a6:6e:5b:2a:58:8c:c0:67:59:bf:fc:9a:f6:2f:75:
         d6:0a:93:2a:4b:8c:8d:41:4f:aa:48:c1:d1:da:3e:18:f4:b7:
         83:e0:90:38:de:32:77:87:f2:8f:49:68:68:e7:b6:c5:49:c9:
         f2:89:a7:ae:68:77:4a:3d:78:5a:22:03:29:f2:4f:06:64:d7:
         a7:52:5a:eb:17:fb:f7:d0:ae:23:d5:60:dc:ba:70:7c:43:4b:
         d2:23:09:23:15:05:6e:47:ee:d5:98:0e:a8:8f:66:bc:bd:2b:
         2d:62:2f:1f:59:91:28:f5:54:16:c1:5f:0d:23:e8:08:bf:5c:
         85:c1:78:2f:78:d1:7b:18:13:fb:dd:4c:5d:23:f0:e2:40:96:
         29:22:d6:fa:bc:3f:8b:25:2b:d5:c2:56:fa:b6:e0:66:db:a1:
         7d:eb:c3:68:f0:75:6d:fd:bf:ea:74:33:22:09:32:6e:27:5e:
         ba:c5:1c:5d:b1:02:bf:eb:35:18:69:12:42:09:93:ba:5c:5c:
         8e:0e:65:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:12:34 2025 by rpki-client