Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/945a8344-cf1b-3f13-97bb-4bed01309193.roa
File:                     945a8344-cf1b-3f13-97bb-4bed01309193.roa (raw, json)
Hash identifier:          eO4xACt1fui/CVoTlRt+/5+e/EL/74nv1WQLBqzRiAs=
Subject key identifier:   09:39:42:EE:39:0D:07:46:B1:B3:A0:37:07:65:F7:DF:F0:DA:C7:62
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858496FAF1DD115FF07A043FDAF00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/945a8344-cf1b-3f13-97bb-4bed01309193.roa
Signing time:             Sun 06 Apr 2025 13:01:01 +0000
ROA not before:           Sun 06 Apr 2025 13:01:01 +0000
ROA not after:            Sat 05 Jul 2025 13:01:01 +0000
asID:                     397223
IP address blocks:        156.154.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6f:af:1d:d1:15:ff:07:a0:43:fd:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr  6 13:01:01 2025 GMT
            Not After : Jul  5 13:01:01 2025 GMT
        Subject: CN=be2d1363-f0d8-4943-8f36-296466d0decb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:9e:e5:97:9c:b1:38:b1:87:d2:ae:f8:d6:08:
                    7c:8f:94:2e:a6:1e:d0:19:86:e4:d6:cc:8a:10:09:
                    6f:01:79:35:c8:db:75:0f:53:bd:21:54:82:b5:c3:
                    48:2f:84:ca:80:65:ec:17:0e:bc:5d:69:5b:f8:a8:
                    08:35:e9:14:34:36:b9:91:b0:44:a1:c3:82:20:8d:
                    62:12:76:e8:3d:50:04:76:cd:60:63:49:c9:8c:b3:
                    08:91:50:2f:19:83:cb:2f:4f:10:e6:84:4d:f4:1f:
                    4a:bf:0c:27:ea:ce:2c:2d:d8:6c:b6:da:52:36:f9:
                    24:b8:e1:b1:f6:ca:40:bb:a0:c8:6f:e9:88:8a:40:
                    0f:05:97:b0:37:06:65:75:69:27:8f:9f:92:c8:da:
                    3c:43:52:be:f2:6d:34:e7:e5:bb:a1:ee:ff:9a:0f:
                    06:be:cb:7c:b0:54:34:78:67:b4:3b:8e:a1:44:0e:
                    26:e9:8b:e0:bc:fa:27:76:83:87:28:34:b2:04:af:
                    b1:da:0e:71:ef:67:fb:f1:69:9d:c1:54:d5:ac:fb:
                    e6:f9:35:25:2a:a3:7e:9e:a3:7e:1f:92:bb:bb:e9:
                    e6:d2:e4:9f:0c:6e:4e:12:e2:45:77:a2:f2:89:5c:
                    a7:f3:31:cb:ce:ee:40:30:8c:04:d4:bb:a4:3a:cf:
                    cb:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:39:42:EE:39:0D:07:46:B1:B3:A0:37:07:65:F7:DF:F0:DA:C7:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/945a8344-cf1b-3f13-97bb-4bed01309193.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:b0:50:5a:45:33:31:27:1e:33:c6:e2:e7:d8:c6:d6:70:8c:
         32:79:8f:59:36:77:81:c6:20:85:6b:78:6c:c0:51:96:c7:1d:
         b1:2d:6e:59:b7:b3:9d:b8:10:aa:97:20:40:cd:34:91:61:99:
         1b:db:6c:3f:08:b2:b3:92:0a:5a:03:3d:0a:75:08:03:45:93:
         f5:bb:53:4b:7d:ba:a6:97:af:b6:1d:2c:bc:1c:7a:89:24:9a:
         60:a5:59:53:1d:6d:f6:e4:38:0f:89:f6:f6:af:44:4c:e4:10:
         7f:89:85:2d:61:8b:38:f3:ec:7a:6e:fd:fc:77:0e:d4:7d:eb:
         c6:d3:74:25:4a:16:49:07:2b:8d:e0:49:e1:46:e4:74:0c:39:
         6e:b0:a6:b9:1b:02:38:df:ac:b6:a8:ec:a4:4d:ff:bc:15:6b:
         52:ed:f3:39:6a:b9:17:37:d2:b4:db:cb:ef:e9:1f:43:48:ff:
         34:57:c6:5a:4b:1a:c4:20:0d:32:6b:2c:08:11:e9:bf:ae:a8:
         30:86:39:c5:e8:66:ef:99:e9:51:8b:40:dc:b9:b7:34:24:8b:
         59:36:c5:7a:ec:f8:04:e5:6e:3b:4e:96:2d:49:ea:24:b3:61:
         c1:90:fd:e5:99:b1:4a:7d:99:53:d9:d3:91:42:39:02:d5:ce:
         90:b9:54:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:23:38 2025 by rpki-client