Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/574afb26-8914-373c-a537-5f1a8d2215ce.roa
File:                     574afb26-8914-373c-a537-5f1a8d2215ce.roa (raw, json)
Hash identifier:          9Jfwn8Aty9Min1sP5U6AaGGDwebehTnZ5MBYFqIvKW0=
Subject key identifier:   B2:B9:69:80:07:9B:3E:9D:66:9E:20:46:59:EE:B7:16:79:86:6C:D6
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858499C5A0CE8853C42938AE7EE40
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/574afb26-8914-373c-a537-5f1a8d2215ce.roa
Signing time:             Tue 22 Apr 2025 13:01:00 +0000
ROA not before:           Tue 22 Apr 2025 13:01:00 +0000
ROA not after:            Mon 21 Jul 2025 13:01:00 +0000
asID:                     397238
IP address blocks:        156.154.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9c:5a:0c:e8:85:3c:42:93:8a:e7:ee:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 22 13:01:00 2025 GMT
            Not After : Jul 21 13:01:00 2025 GMT
        Subject: CN=ecdbaa18-a74b-4214-8f01-1f7bcaa38064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d9:88:c8:21:61:52:4a:ca:49:41:40:98:d2:
                    f4:3d:6b:4b:6e:ba:8a:38:8d:96:63:6a:38:fc:42:
                    7d:62:da:aa:97:56:9f:89:bf:8f:79:8f:f0:57:a5:
                    15:d6:48:e0:96:32:24:ba:71:6c:96:cb:8f:52:51:
                    24:c2:c0:61:6f:ab:bc:cd:4a:52:35:a6:27:5b:7f:
                    1d:f9:13:34:d1:b9:89:79:6d:ce:4c:37:de:cd:5a:
                    69:b4:0b:8b:f5:ec:22:39:f6:98:de:6b:27:42:01:
                    9d:b9:d8:83:aa:1a:ac:aa:d6:43:ac:bf:b0:7c:9d:
                    33:7c:c7:99:b4:4d:7f:0f:fe:db:a1:22:a8:f9:14:
                    c5:af:1a:d3:81:ec:1b:fb:18:b4:ea:82:0f:65:55:
                    ea:b2:3a:76:ab:c8:f8:1b:fe:fc:d5:30:22:03:ec:
                    59:c9:79:c5:03:46:8f:4e:43:13:01:cb:da:3a:c4:
                    f4:db:a0:14:78:04:3e:0a:68:64:26:66:6f:71:42:
                    a7:d6:fc:71:7f:78:e0:59:d3:78:82:63:34:99:ca:
                    b7:9d:81:2e:5f:0f:f9:cf:9b:02:17:26:6c:ca:ab:
                    7d:f4:f8:e3:c2:2c:0e:23:5c:07:14:d8:10:aa:90:
                    ae:85:93:2c:c6:ad:19:52:a2:63:f8:6a:20:ca:14:
                    20:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:B9:69:80:07:9B:3E:9D:66:9E:20:46:59:EE:B7:16:79:86:6C:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/574afb26-8914-373c-a537-5f1a8d2215ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:61:ac:30:75:77:41:a5:b6:c3:a0:d9:a4:84:53:3b:60:b4:
         cc:0c:24:56:c0:47:ba:68:87:99:dd:6b:e9:cf:84:80:c8:ad:
         ad:04:20:2a:07:6e:e8:b8:3a:d6:d9:75:30:6f:ca:5d:a3:27:
         8c:25:b1:1c:74:31:fc:2e:f1:4a:34:c0:a0:17:1f:ff:95:9c:
         91:e8:8c:e7:3a:5b:ef:b0:c3:33:ed:32:0c:61:b1:c0:30:b0:
         d7:f8:4a:e0:3f:3f:ae:ac:ec:5c:e6:da:85:a6:1d:da:cd:8b:
         77:1a:e4:f4:fa:67:fd:1a:3a:5e:34:90:43:78:9b:d1:26:3c:
         e5:72:6c:ac:43:65:b4:4f:13:47:64:5b:3a:14:1f:c5:8d:3c:
         0d:4c:75:51:75:b3:5c:62:a5:f8:a9:d4:d7:b8:36:ee:b8:8c:
         87:06:22:33:62:5d:d9:f0:dc:5b:c7:14:6e:8c:bd:ab:a3:dd:
         dc:e4:07:a1:43:c0:4d:b9:07:b5:7d:36:7a:77:d1:c0:61:02:
         04:5f:70:83:a0:f1:01:72:54:51:aa:78:38:42:f4:de:3f:24:
         42:13:aa:1f:6e:e0:7c:bf:bc:78:94:f8:61:67:85:5d:51:a6:
         d8:72:a0:70:4d:24:69:f7:a2:6e:8c:7e:93:3e:9b:15:88:cd:
         db:5c:b1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:24:36 2025 by rpki-client