Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4e8f4d6d-9d3f-3cb6-abe4-c5e9a1498904.roa
File:                     4e8f4d6d-9d3f-3cb6-abe4-c5e9a1498904.roa (raw, json)
Hash identifier:          0D48bZ+q0mTPLgfI4TBQG+XeddTK6n5MGCDkeALYSGw=
Subject key identifier:   84:17:08:85:24:5F:CB:F9:92:F2:86:9E:61:63:00:9E:B0:FD:0E:0F
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285849F17FF906FCE800913CE81500
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4e8f4d6d-9d3f-3cb6-abe4-c5e9a1498904.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     397224
IP address blocks:        156.154.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:f9:06:fc:e8:00:91:3c:e8:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=395e8fdb-0b65-43e5-b770-28b3fdd5c2e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:03:1a:e5:f0:d6:06:af:cd:44:86:0c:0a:8a:
                    32:c0:02:97:db:28:9c:f1:85:e7:49:45:21:db:6d:
                    1c:dc:55:7d:6d:98:c8:a4:97:c8:06:57:f0:4a:54:
                    c6:53:c4:cd:86:44:10:e6:df:4d:d7:00:df:49:36:
                    08:ce:15:72:ef:85:ec:bd:4c:bc:48:0e:c4:a6:62:
                    7d:9e:22:e1:d4:e8:49:5f:75:35:b3:a3:c6:ee:13:
                    0f:2d:f0:8c:71:6e:07:ee:b2:99:a5:56:a6:01:3b:
                    6c:48:87:5e:33:c5:f4:59:93:b4:ed:db:2e:27:f8:
                    3b:7c:55:9f:d1:47:27:8c:48:bc:c7:79:97:73:e8:
                    81:ef:75:7d:ae:ad:56:ba:1d:04:86:40:00:83:61:
                    11:27:a0:b0:d4:10:85:67:45:b9:69:34:34:36:9c:
                    99:48:2e:cc:db:5f:81:df:45:5f:0a:d2:69:30:aa:
                    9e:5d:cc:84:74:49:8d:b7:42:38:cd:93:2f:13:df:
                    79:ab:cd:fa:8a:25:5a:6b:8f:93:ef:b0:40:19:22:
                    06:ac:99:d1:4b:7a:84:13:10:2c:db:b1:75:3a:ed:
                    be:59:17:d8:b9:e7:e6:e2:5e:bd:a4:d4:d4:4d:5d:
                    47:4f:b6:35:ce:40:cc:b2:bf:99:d6:9a:73:2c:f9:
                    74:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:17:08:85:24:5F:CB:F9:92:F2:86:9E:61:63:00:9E:B0:FD:0E:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4e8f4d6d-9d3f-3cb6-abe4-c5e9a1498904.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:3c:9a:44:85:0e:71:b9:52:2c:4b:e8:01:6c:b9:dc:f0:79:
         77:67:29:74:ca:a3:bd:f9:8e:10:9d:6e:8e:ca:80:60:08:c2:
         65:81:94:bf:f6:50:2c:b9:91:b2:53:d7:ac:ba:d4:e7:ac:38:
         5f:63:10:28:1d:5b:97:42:bc:0d:94:db:1e:a2:8a:dc:16:17:
         e6:9c:a8:87:d3:9a:52:b3:c6:19:bf:9e:6b:fe:d2:d5:bc:42:
         30:68:00:c3:62:c8:f2:36:f8:51:08:6a:9b:61:8f:cb:f7:c1:
         5e:38:b7:a1:b6:13:47:f2:e9:c5:eb:5e:fe:42:06:de:66:6d:
         84:ac:49:4e:51:94:2f:10:a4:1c:60:f0:9d:b7:e9:7d:44:f7:
         d8:7e:69:f2:86:9b:a1:2b:9b:3a:f1:b3:cc:8b:03:b4:f8:68:
         c7:bc:8c:97:a4:87:95:8c:ee:aa:f4:8d:67:60:88:54:c7:00:
         b9:97:86:ac:e8:c6:af:bb:ac:9c:ce:6a:a4:bf:64:5a:56:e9:
         18:a7:a3:b0:0f:83:d9:10:0c:cd:68:a5:c6:88:c3:24:39:fc:
         37:ef:d2:5e:8f:64:af:0b:07:42:d9:a6:83:c4:15:6b:f8:6c:
         30:25:5a:da:66:22:a6:3b:98:33:eb:14:08:f3:e1:d1:d4:8e:
         0a:de:96:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:08:28 2025 by rpki-client