Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/64605441-5dec-3ca2-a5f0-25eebc94efcc.roa
File:                     64605441-5dec-3ca2-a5f0-25eebc94efcc.roa (raw, json)
Hash identifier:          EIbypLHdYx92aQzoJoVfjm3Sr+VqFMbKhCteASGOTe0=
Subject key identifier:   61:20:2A:DB:E2:08:0A:EC:AF:31:8D:C4:A0:BA:A0:1A:91:4A:4C:E8
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858494B64260640F36FE0E147D740
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/64605441-5dec-3ca2-a5f0-25eebc94efcc.roa
Signing time:             Mon 24 Mar 2025 13:00:53 +0000
ROA not before:           Mon 24 Mar 2025 13:00:53 +0000
ROA not after:            Sun 22 Jun 2025 13:00:53 +0000
asID:                     397228
IP address blocks:        156.154.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4b:64:26:06:40:f3:6f:e0:e1:47:d7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar 24 13:00:53 2025 GMT
            Not After : Jun 22 13:00:53 2025 GMT
        Subject: CN=cffb8442-76fd-43fe-bbf1-b3dc72131a0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:29:9f:4d:07:ca:2a:cf:62:79:5c:2e:e3:74:
                    4e:e2:53:bd:99:11:83:b5:7c:5d:bd:3f:db:d1:18:
                    de:62:70:7a:b4:f8:58:80:7b:d8:d9:35:85:b9:86:
                    79:44:43:f6:2b:49:60:fa:4a:b4:b1:fa:53:22:3b:
                    1f:93:7f:c8:b2:db:9b:f7:af:09:49:41:89:74:91:
                    2f:88:c7:bd:69:07:cf:23:52:fe:b4:ef:6a:ac:ad:
                    c4:26:d8:0c:4f:64:96:ff:21:49:e1:f8:a1:31:2d:
                    59:a1:fa:c6:63:71:bb:f7:73:ea:ce:8a:c9:f5:9a:
                    bc:49:35:3a:91:32:7e:d4:99:92:44:5c:48:d3:45:
                    65:72:12:55:f5:33:7a:75:d6:b8:e9:d5:75:0a:4b:
                    ac:f6:0d:1c:a2:2e:d8:08:91:ac:14:9f:6f:84:86:
                    ac:63:d7:25:a4:f9:7e:32:6a:0d:95:98:6c:d3:57:
                    a8:2a:68:a9:51:05:51:e8:12:af:d5:de:12:22:f7:
                    b4:4b:e4:4a:c2:67:ee:38:8a:73:6e:e5:15:c9:ce:
                    7b:91:6c:82:45:91:ba:6e:6d:0f:15:77:39:e9:33:
                    5c:d5:f3:29:0b:c2:70:44:2e:bb:04:59:8d:e1:71:
                    df:1f:c4:92:61:63:86:30:e0:8a:4a:9f:a7:6d:d9:
                    bc:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:20:2A:DB:E2:08:0A:EC:AF:31:8D:C4:A0:BA:A0:1A:91:4A:4C:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/64605441-5dec-3ca2-a5f0-25eebc94efcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:61:b3:f0:61:dd:09:1a:3e:4a:db:ee:77:50:0c:82:60:ab:
         06:a9:4d:47:c3:01:dd:43:7b:8c:63:16:f1:75:01:d8:dc:59:
         9c:fd:88:4b:e4:bd:fc:65:d1:13:94:0e:14:6b:99:84:53:24:
         eb:c2:af:61:46:0b:cd:f8:97:a9:f7:74:4a:18:b7:62:35:a3:
         85:e7:3c:49:b5:bc:76:0a:5a:08:e7:93:a2:ee:0b:97:d1:90:
         04:69:93:68:25:b1:43:c4:5c:fa:7b:ef:08:fc:3f:1a:6c:f7:
         1e:bf:21:26:f1:f6:58:f3:d5:92:a1:77:b1:e6:e0:ff:45:3f:
         53:86:97:ab:7f:91:7f:19:6b:fb:18:09:1f:f2:df:37:ec:34:
         76:56:a2:55:7e:c4:ce:9f:9a:75:04:66:de:e4:10:a9:a9:db:
         09:28:4a:6a:9e:89:76:ba:c3:d2:20:19:3a:f9:2c:2e:9b:c2:
         52:76:34:b1:95:d9:86:f2:af:e5:b0:3e:45:b2:db:9d:fa:34:
         b3:b5:32:d3:fb:8a:92:b6:a4:52:29:45:0f:65:48:59:10:85:
         22:d8:d2:ab:e8:2c:41:fa:d8:d2:11:3c:c1:ea:e9:b4:29:c2:
         10:4e:70:ae:0c:aa:76:e8:e0:bd:87:0d:7f:27:2a:d6:39:45:
         57:94:e4:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:05:59 2025 by rpki-client