Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/91a498f4-bbb0-36aa-a747-4549b1f801a9.roa
File:                     91a498f4-bbb0-36aa-a747-4549b1f801a9.roa (raw, json)
Hash identifier:          eWFceySWtDqXVWA+/0uPBVXnh9xwmoVx8/OXHpegFdA=
Subject key identifier:   8C:43:C6:15:50:9B:78:C3:B6:FE:A2:3E:0A:18:6F:18:84:38:39:24
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584988CF50E1329BB2BD43A45D80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/91a498f4-bbb0-36aa-a747-4549b1f801a9.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     397217
IP address blocks:        156.154.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:50:e1:32:9b:b2:bd:43:a4:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=15e329f1-f14a-4d53-a8f4-77c8d192538c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:9a:63:38:ff:b5:a6:fc:ba:d9:99:59:47:fb:
                    49:8b:b9:3f:b6:4e:44:03:0a:f0:2f:de:f5:e6:bf:
                    c5:19:f2:71:99:09:0a:4b:95:65:5a:01:3a:4c:24:
                    8f:26:85:52:40:6b:20:71:8b:dd:9e:bb:96:76:2f:
                    0e:10:03:de:11:8f:0f:f6:84:05:ad:dc:09:a9:d8:
                    de:36:4e:7b:7d:65:84:5e:d7:d1:68:10:48:e4:26:
                    22:a9:ef:8b:00:c6:dc:05:67:cd:f3:0d:26:28:d0:
                    63:c2:ca:0d:dd:d1:10:bf:20:a6:71:59:2c:e4:62:
                    b8:38:67:fc:0b:9d:73:f3:d5:45:56:38:8d:ef:34:
                    3c:88:e5:3b:85:6f:a9:f4:82:bb:46:b9:8a:3f:35:
                    11:5a:04:39:9b:46:34:44:34:ed:08:a0:33:b2:46:
                    d6:2a:6c:c1:5f:f0:a3:d5:e3:28:b0:6d:99:3f:c4:
                    f8:4e:a3:58:e8:54:bb:1d:f6:6d:1f:ab:9d:f0:2d:
                    c5:ce:f4:6c:08:7f:a0:cf:d3:7e:dc:cc:d3:79:3a:
                    58:83:81:1e:60:41:38:47:b0:f2:55:ee:32:5c:65:
                    f0:59:aa:19:63:84:b6:c2:82:d1:12:6d:32:09:5f:
                    88:96:d4:27:5e:b9:35:2b:fd:21:cc:9b:62:76:44:
                    58:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:43:C6:15:50:9B:78:C3:B6:FE:A2:3E:0A:18:6F:18:84:38:39:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/91a498f4-bbb0-36aa-a747-4549b1f801a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:42:58:a8:f1:c9:1e:c9:44:82:e2:4f:70:d8:c6:1e:5c:4a:
         e8:97:10:8b:a2:72:9b:f6:86:96:08:ab:bb:5b:58:1e:2c:43:
         80:1e:db:f3:6b:9c:9f:ef:c9:35:53:98:b3:f4:65:bd:8e:d4:
         30:51:c0:0c:2f:89:ba:1a:3b:17:b5:98:3e:36:77:78:8f:58:
         9c:59:be:53:56:8b:11:ab:fe:f3:07:3f:14:b8:4d:62:c9:e6:
         ec:7b:eb:bc:4d:a5:f5:3b:8c:c8:69:bc:9b:33:f6:79:ac:0a:
         a5:11:ca:61:53:c9:f7:2b:02:2a:b8:d2:77:a0:1f:3e:0e:1c:
         09:aa:c6:0d:bd:a2:09:c0:54:3c:ba:fd:d5:a8:a5:d4:ec:69:
         01:95:2a:a5:f1:be:88:fc:fa:45:bf:2a:d2:40:07:e9:4f:66:
         bd:64:e0:56:27:59:8b:3c:86:a4:4c:fb:e0:ac:4e:33:99:a9:
         eb:c2:3e:8f:ca:1d:27:a5:e1:c7:7f:56:74:c2:19:f1:ba:82:
         89:8e:51:9f:72:81:b7:65:10:b4:8f:90:d6:ac:51:3d:4f:2d:
         5f:d4:ba:51:67:fd:ba:1a:f6:af:71:f8:e0:61:77:96:0c:7b:
         f1:cb:42:22:80:70:a6:ff:8b:75:f9:06:20:1a:30:60:2b:df:
         a9:e6:fc:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:46:39 2025 by rpki-client