Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3a0f1521-f8bd-3f7b-9f17-5a289b876e2b.roa
File:                     3a0f1521-f8bd-3f7b-9f17-5a289b876e2b.roa (raw, json)
Hash identifier:          1Vv+gMpb/AvQonDo3gHqPJ+lcTFKnrDm4CPo2DCpzDs=
Subject key identifier:   53:C4:87:D3:E6:9B:0A:A2:5C:F1:34:A3:98:F3:3D:DD:26:8A:8D:D5
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858499C59EAA55D090249865D1A80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3a0f1521-f8bd-3f7b-9f17-5a289b876e2b.roa
Signing time:             Tue 22 Apr 2025 13:01:00 +0000
ROA not before:           Tue 22 Apr 2025 13:01:00 +0000
ROA not after:            Mon 21 Jul 2025 13:01:00 +0000
asID:                     397219
IP address blocks:        156.154.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9c:59:ea:a5:5d:09:02:49:86:5d:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 22 13:01:00 2025 GMT
            Not After : Jul 21 13:01:00 2025 GMT
        Subject: CN=7545fc1f-e271-4513-979d-aa65a8f51ca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:33:83:7b:c0:48:92:9a:63:e3:1c:7f:ad:24:
                    af:32:25:88:bb:4b:40:09:de:30:a2:b6:01:f4:1c:
                    cb:94:9f:ee:a1:96:bf:e9:5b:58:c0:18:27:53:a8:
                    02:ca:c8:95:18:51:2e:f2:7f:dd:3c:d0:5e:ca:f3:
                    2b:02:a7:38:3f:a0:23:0d:85:0a:fe:15:09:d9:ad:
                    86:62:5c:a9:1a:a6:c5:28:a5:67:58:6f:0a:53:e1:
                    b8:6d:26:49:cd:9b:67:60:19:f7:23:02:db:14:9b:
                    80:64:67:61:21:bc:fb:15:60:2b:2f:49:49:7e:c8:
                    3b:70:23:22:55:07:16:be:85:9a:29:0f:09:d6:e4:
                    87:05:08:f1:f1:c4:9b:48:b5:72:42:92:7b:00:25:
                    47:7e:a3:29:c5:19:d7:c3:10:2d:05:b0:36:e5:1d:
                    d8:db:de:f5:12:ad:74:bf:36:ce:6f:68:4d:8c:f8:
                    03:78:3a:1b:45:ab:f1:b9:11:2c:dd:a4:25:cc:c8:
                    6a:49:af:67:bc:c1:0a:9a:4e:77:ff:bb:95:c0:df:
                    f6:9a:44:2b:31:a1:ce:46:af:45:de:58:76:eb:55:
                    24:81:42:2f:e1:59:7f:06:9d:f0:39:84:f6:af:3e:
                    c8:5e:4d:d0:54:cd:79:5c:8e:d3:f7:0f:48:91:ff:
                    9a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:C4:87:D3:E6:9B:0A:A2:5C:F1:34:A3:98:F3:3D:DD:26:8A:8D:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3a0f1521-f8bd-3f7b-9f17-5a289b876e2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:c1:7f:12:bf:5b:91:bd:eb:64:79:2c:4f:c4:2e:7f:28:85:
         a1:89:0b:4f:82:b6:32:db:57:17:b7:be:5c:65:af:3c:6b:31:
         b0:a0:72:fb:f1:7f:a7:9f:e9:f8:f2:f4:90:6a:47:29:ab:ee:
         61:a6:c5:32:61:39:c3:47:fb:2f:5c:a5:a8:b8:76:b8:e6:bd:
         77:fb:33:37:dc:c0:44:ab:23:4e:e9:07:e9:3e:32:9e:df:35:
         b9:6b:e6:f7:b6:09:05:ec:4a:01:7d:bc:19:46:b3:0c:97:98:
         24:f6:04:ce:21:53:4e:58:2e:d1:06:ad:7f:28:af:4b:c3:63:
         16:83:33:f1:a2:90:7c:d5:91:a0:26:5e:45:45:75:a0:c5:2e:
         d0:e3:8a:ca:a4:55:e3:50:b2:26:71:cf:5c:e1:81:6e:62:69:
         5f:25:36:77:c9:e4:0d:be:f5:fe:6c:27:4e:a7:87:76:ed:34:
         fc:39:26:8f:7f:44:6c:6d:64:66:da:47:64:22:e4:a9:b2:2e:
         17:cb:0d:8c:97:32:12:1c:ec:a1:10:0a:5f:66:7f:bc:5e:8e:
         a6:6d:45:1e:ab:97:fa:84:f7:be:0a:82:18:54:dd:c0:22:63:
         53:f6:ea:6b:fe:85:b1:ce:ea:39:c7:fb:94:e1:d5:72:5a:e0:
         6c:e8:e9:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:54:08 2025 by rpki-client