Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6adc5485-9117-3f5e-8d16-9b056914ce42.roa
File:                     6adc5485-9117-3f5e-8d16-9b056914ce42.roa (raw, json)
Hash identifier:          hZO/BtRj9Wb2qIiXxDo/DvL7I3khMu+Qjsg2LdXK1JQ=
Subject key identifier:   3B:73:7A:E9:92:74:A4:77:A8:06:CC:F8:CC:87:2E:78:56:A3:18:14
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584988CF62741CBC9D37E6793800
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6adc5485-9117-3f5e-8d16-9b056914ce42.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     397228
IP address blocks:        156.154.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:62:74:1c:bc:9d:37:e6:79:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=0ba756f6-8ab1-4c1f-a654-2cb83cafc3b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:35:74:81:1f:e1:7e:68:9b:a2:89:01:1a:f4:
                    fa:f5:6d:4f:db:82:38:df:d8:ff:98:d6:f8:de:6f:
                    d9:09:d3:52:39:98:16:d1:4d:36:50:7b:ac:c0:af:
                    20:25:6e:7f:5f:4b:94:4a:01:e8:64:61:91:14:84:
                    41:10:98:7d:5a:da:2c:30:ca:f3:43:46:80:33:31:
                    ca:8c:32:5a:19:da:ee:ea:cd:57:cc:b2:e8:34:40:
                    e6:dc:ff:6f:88:c9:17:3c:05:6b:f6:80:9d:9a:9c:
                    aa:f6:6f:e4:7e:ef:8d:a2:c1:71:2e:58:79:28:00:
                    34:6c:9a:55:fe:d9:8f:7f:0d:4c:39:c4:eb:50:71:
                    95:83:23:99:40:7b:04:57:fb:ad:97:cb:91:6a:43:
                    0e:95:f2:a7:88:80:03:4d:bb:f3:4b:25:64:93:d2:
                    28:72:9d:33:05:ba:29:df:67:26:39:e7:a6:ee:a1:
                    e6:a0:34:47:63:40:e1:71:9b:23:64:c5:d2:07:8e:
                    c8:e5:34:96:88:02:25:1b:1b:13:d5:64:7c:f6:00:
                    a7:71:08:b7:4a:a6:c2:76:a2:1c:22:01:07:21:42:
                    17:41:79:0e:25:0c:8b:9c:d4:9a:bb:ad:8f:16:ee:
                    14:99:20:c9:f0:d4:8b:6b:b3:c8:a4:38:09:f9:dd:
                    d3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:73:7A:E9:92:74:A4:77:A8:06:CC:F8:CC:87:2E:78:56:A3:18:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6adc5485-9117-3f5e-8d16-9b056914ce42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:c2:18:b9:c7:ff:e3:0f:1a:ec:ef:dd:cb:54:91:65:55:ea:
         75:df:7e:ac:88:b9:37:97:09:e7:6d:83:94:4b:df:7b:0c:29:
         6a:c8:04:e8:65:64:82:81:4d:8a:a4:67:a7:3c:1f:f6:40:6f:
         4a:ca:ba:4c:5d:56:9c:ff:a2:18:01:2e:ae:05:de:5a:5c:63:
         bd:25:c7:6e:8a:7e:9d:e1:b3:59:43:b1:a2:e2:99:40:38:32:
         a0:cc:44:71:6c:70:20:b9:52:3a:3a:f7:e4:da:d2:2a:d4:d3:
         e6:28:e3:fa:58:c1:d9:de:e0:64:9e:2b:84:2e:38:b3:6f:9c:
         36:df:b3:2e:a2:d5:48:d3:3e:cf:26:6a:1d:15:2f:37:93:0a:
         69:df:92:88:a6:96:15:43:9d:c5:52:22:de:92:94:ad:a6:f3:
         15:52:f3:79:8d:f1:43:2a:17:cb:f3:38:d5:a8:9b:b4:c1:a9:
         1e:21:4a:84:d9:39:e0:5e:7a:c7:e7:a5:0b:d6:94:7d:eb:92:
         fa:ab:06:d8:2b:18:71:4b:98:03:d7:41:e6:7e:ce:92:d6:5b:
         58:86:97:63:29:13:f5:dc:1f:c5:47:8a:b1:47:6a:34:21:57:
         0f:ed:44:4d:b5:28:f9:b2:d0:b1:68:8b:c5:29:5a:a4:df:e3:
         6c:4f:e5:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:27:59 2025 by rpki-client