Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9ca7c0a2-8323-348e-a74f-00007d00bfae.roa
File:                     9ca7c0a2-8323-348e-a74f-00007d00bfae.roa (raw, json)
Hash identifier:          LjDA9/HARL9/Lr26b2zG/1gxMphh0Xvb7thZZHuOIPY=
Subject key identifier:   3B:FF:09:26:B8:D7:5B:73:10:E1:D1:4B:FC:0F:24:06:87:60:D7:97
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858499C5A02A71DA7A62AD8887B20
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9ca7c0a2-8323-348e-a74f-00007d00bfae.roa
Signing time:             Tue 22 Apr 2025 13:01:00 +0000
ROA not before:           Tue 22 Apr 2025 13:01:00 +0000
ROA not after:            Mon 21 Jul 2025 13:01:00 +0000
asID:                     397217
IP address blocks:        156.154.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9c:5a:02:a7:1d:a7:a6:2a:d8:88:7b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 22 13:01:00 2025 GMT
            Not After : Jul 21 13:01:00 2025 GMT
        Subject: CN=c44c988f-4db8-4e18-bf94-63728708f5df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:6e:34:44:d8:ed:4e:b5:dc:d7:ad:2c:40:9a:
                    e4:83:9e:2d:4d:6f:fa:0a:2c:8e:fd:c1:4b:40:14:
                    07:35:31:9f:4a:84:9c:37:ec:c1:2a:41:4c:5c:30:
                    5d:0b:01:2a:8c:34:7b:e0:4d:2d:45:2c:ad:ea:22:
                    bd:cb:91:6a:29:a6:12:63:ee:18:b3:0e:3f:e8:90:
                    8c:52:b9:a0:e8:a8:0e:29:5d:f5:55:80:e7:cd:45:
                    d8:d1:f7:84:6a:e3:33:87:ab:5a:6d:5b:fd:42:11:
                    60:e8:02:b5:f1:c9:f6:ad:be:f4:ca:6a:ef:1d:3c:
                    38:fc:30:48:02:04:92:81:45:57:4e:d5:1f:b5:1e:
                    41:52:6e:94:71:c4:fb:96:2c:12:53:bb:4b:d3:6d:
                    fc:c7:61:58:1f:10:1a:62:58:0a:30:94:ad:8e:e2:
                    e9:af:2d:d8:8c:79:12:b1:26:50:86:40:9e:3d:ca:
                    d2:57:d5:69:92:dc:63:ad:1a:07:f9:40:2f:ff:51:
                    34:4d:1f:71:6f:a8:97:fc:f2:1e:3f:0d:07:32:79:
                    0d:9b:09:bb:29:f8:9d:6d:94:7c:a0:15:42:db:22:
                    79:d2:a7:23:1e:93:a3:51:fc:dc:53:20:43:5c:be:
                    ca:1e:cd:b2:2e:31:81:69:dc:99:0d:52:07:b4:2e:
                    e2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:FF:09:26:B8:D7:5B:73:10:E1:D1:4B:FC:0F:24:06:87:60:D7:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9ca7c0a2-8323-348e-a74f-00007d00bfae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:72:bb:23:55:d9:e6:62:d5:a9:45:2e:31:9e:b7:6c:cc:5e:
         ac:f0:f4:0a:72:11:52:58:d1:9a:3e:e2:e2:6d:41:7d:6a:e3:
         b6:3b:56:d7:f2:95:2b:0b:0e:36:61:53:b7:fd:1f:6f:27:d5:
         b0:a0:a8:94:40:68:4d:09:f6:cc:cd:27:42:07:b7:3f:33:f2:
         78:dc:00:69:e7:eb:a9:24:4d:19:a3:ac:c5:d9:2a:96:ed:92:
         df:d3:6e:90:11:77:4d:4b:4a:8d:e1:a8:0f:89:cf:5d:8e:58:
         37:8a:fe:26:b6:d2:0e:a1:d2:fa:44:2b:73:28:17:29:72:0f:
         75:6f:95:c1:7a:0f:be:aa:aa:e3:cd:b6:8c:09:4c:46:fc:2c:
         ea:fe:52:17:5c:fa:34:a6:6e:e6:fd:4f:ac:9f:dc:31:f5:04:
         6a:97:4d:ab:03:41:d1:d9:4a:27:20:90:fa:f1:0e:0f:cb:e4:
         d3:bd:4b:1b:98:b8:43:7e:34:f2:37:5c:27:22:9a:df:e0:19:
         e1:b8:a8:6a:a1:3f:64:da:a5:a8:69:de:c9:4e:3f:7a:f6:7f:
         2c:fc:9c:1d:3e:75:ac:58:f3:1f:fe:5a:b6:df:9c:1c:28:51:
         d5:6b:da:a0:f6:ba:25:24:18:ff:f5:98:ad:58:67:c3:98:c8:
         19:4f:21:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:03:16 2025 by rpki-client