Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/532aff02-3185-3f42-9f16-57020c9bbd70.roa
File:                     532aff02-3185-3f42-9f16-57020c9bbd70.roa (raw, json)
Hash identifier:          /wqlZHTLNt/cvt6kXF4onP9nVJLvSGLR/dxySBzRj04=
Subject key identifier:   F8:D4:99:F5:FC:95:54:8E:F8:86:0C:5D:F9:DD:F9:12:B9:03:F0:0F
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858499C59FFEE8CA0EFCA6C88FA00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/532aff02-3185-3f42-9f16-57020c9bbd70.roa
Signing time:             Tue 22 Apr 2025 13:01:00 +0000
ROA not before:           Tue 22 Apr 2025 13:01:00 +0000
ROA not after:            Mon 21 Jul 2025 13:01:00 +0000
asID:                     397232
IP address blocks:        156.154.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9c:59:ff:ee:8c:a0:ef:ca:6c:88:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 22 13:01:00 2025 GMT
            Not After : Jul 21 13:01:00 2025 GMT
        Subject: CN=187d6f27-88ca-4016-b94f-f16a819e0fac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fe:5a:e7:6f:9c:e8:ee:b2:90:f8:85:f7:b0:
                    1e:1f:9e:e4:8a:cb:5f:16:24:58:9b:f6:a9:15:c2:
                    0e:bb:4f:69:5e:7c:39:3e:c3:bc:f5:c7:18:b5:0b:
                    22:78:8b:e7:c3:f0:e3:d9:12:58:27:f8:7f:f0:ab:
                    24:f5:b4:de:b3:0e:e9:8e:44:a4:1a:c1:30:5f:74:
                    9f:7e:75:aa:c0:6c:e0:5f:a7:6f:21:d1:e0:dd:21:
                    76:ca:4e:32:1a:cb:0a:d8:6b:8d:9d:84:b2:01:89:
                    45:7d:e8:c4:59:2c:c3:c6:cc:c9:6d:06:3d:7d:a3:
                    5e:dc:f0:7f:f2:dc:a2:21:2d:5e:d6:72:79:59:4b:
                    a6:36:f2:12:3d:49:35:fd:95:30:ad:57:bb:8b:ae:
                    8d:7c:c7:fa:72:e8:fc:cd:64:2a:c0:d9:cf:3f:66:
                    da:ba:a6:51:37:eb:34:8c:de:2c:48:24:33:5f:47:
                    f7:4a:2d:dd:5d:e9:d7:39:62:eb:af:70:d7:d8:07:
                    97:ca:ac:1c:27:18:1e:ae:eb:f0:6a:62:16:cf:ad:
                    30:08:b1:4c:39:4b:9b:ef:3a:90:ce:79:bb:0c:49:
                    ee:d3:6d:55:31:35:1d:09:c7:39:d6:65:e1:ca:85:
                    e1:8f:8d:9c:ab:fd:f2:08:45:92:e4:e4:cc:4e:51:
                    d3:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:D4:99:F5:FC:95:54:8E:F8:86:0C:5D:F9:DD:F9:12:B9:03:F0:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/532aff02-3185-3f42-9f16-57020c9bbd70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:36:6f:07:35:60:ee:b3:1f:26:7b:e4:3b:e3:cd:cf:af:d2:
         bf:05:9a:8f:01:ff:94:a3:d8:7b:29:da:4d:21:6f:b4:0c:e2:
         af:42:4c:af:b1:f1:aa:90:0c:43:cb:87:87:de:90:60:04:b2:
         a2:f8:39:b5:e7:cb:d6:b8:6f:ba:b0:38:7e:39:f2:a1:63:8f:
         62:8e:9e:ad:7e:41:28:a6:31:9a:22:7a:26:37:b0:b4:0f:40:
         de:10:f2:3f:d9:aa:8e:a4:98:c2:69:af:bd:ef:e5:79:f8:1b:
         dd:63:00:b3:28:4e:9b:c9:b6:30:3b:b4:c9:1a:3a:68:4e:9d:
         e4:53:81:ad:b0:56:b6:80:e4:71:c1:c9:eb:bd:07:45:54:e1:
         36:15:a1:ba:c1:11:32:b5:27:69:80:0c:d7:07:69:68:b1:f9:
         1a:f0:c5:a4:90:86:2d:fa:05:5d:09:45:fb:62:99:25:81:19:
         01:9b:33:a9:6f:da:9b:ad:3c:d8:48:0e:15:b4:43:df:da:03:
         05:1d:84:d7:2d:e8:e5:30:74:e9:7d:e9:2b:c8:0c:69:9a:c4:
         12:8e:f8:4a:2c:73:52:86:fb:ba:c5:01:e7:ab:64:b1:ee:01:
         3a:29:63:ef:24:d8:a2:06:80:24:40:09:40:75:70:cf:4e:a5:
         e7:53:30:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:07:13 2025 by rpki-client