Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a0194ca9-c36c-39d0-a9b7-9ad1cefc1bf8.roa
File:                     a0194ca9-c36c-39d0-a9b7-9ad1cefc1bf8.roa (raw, json)
Hash identifier:          tt8IX3uk4acyHhDEYUvll6Lhz7Qgi+FNtjn89bjAn0Y=
Subject key identifier:   70:75:89:E4:40:3E:3E:7D:77:19:68:46:2F:54:07:87:F5:9E:0D:14
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584988CF3DD362831639DD9F7600
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a0194ca9-c36c-39d0-a9b7-9ad1cefc1bf8.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     397231
IP address blocks:        156.154.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:3d:d3:62:83:16:39:dd:9f:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=eb2554df-17c2-40f9-8fb0-1558103ad47a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ab:89:43:78:0b:b0:45:56:7a:c1:4d:7f:f3:
                    fd:9a:5d:4c:bb:1c:90:50:4d:7e:60:a8:70:1c:10:
                    60:49:7c:26:c2:eb:a2:09:46:c1:5c:e4:57:44:a2:
                    e4:82:8d:59:59:f0:ce:ba:63:60:9c:10:c3:d8:7f:
                    27:6c:ad:79:ba:db:ee:4c:4c:0b:15:32:42:5e:6e:
                    f7:97:1a:33:b4:88:5a:2d:ad:74:b9:01:f6:4e:05:
                    16:66:36:3d:7c:ce:77:8e:20:bf:e4:e4:3e:d2:64:
                    8f:24:bc:a5:44:74:f4:8f:6d:d3:c4:91:ce:23:ed:
                    b9:10:35:f6:ca:4a:41:fa:2d:3f:1f:45:f0:58:c3:
                    b1:59:00:6d:dd:ef:67:60:94:ba:0d:7a:36:4e:28:
                    4e:43:24:8c:40:e8:a5:1c:c3:0c:9f:c9:02:4e:a3:
                    d8:e7:17:51:68:20:32:05:61:9b:fc:f8:b9:a2:51:
                    23:00:98:9a:cb:1a:06:a8:0b:2f:b2:4e:c9:83:17:
                    fe:13:94:b6:16:d1:b9:5b:00:47:d2:5b:07:0c:62:
                    75:29:a2:22:3a:57:e5:b5:28:34:16:9f:08:63:f3:
                    50:e7:cb:f4:68:0d:73:a9:a2:d2:d6:f4:64:28:18:
                    65:4a:1c:eb:8c:97:86:ad:4a:66:d9:ad:4b:20:4e:
                    9e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:75:89:E4:40:3E:3E:7D:77:19:68:46:2F:54:07:87:F5:9E:0D:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a0194ca9-c36c-39d0-a9b7-9ad1cefc1bf8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:08:2f:a1:4e:46:bf:c2:b7:c1:3a:fe:46:7c:c2:02:05:4e:
         fd:47:9f:fb:d3:0e:de:40:80:62:f1:d2:a3:f2:29:c5:ed:05:
         ca:50:e2:ae:9b:4c:ea:f1:17:29:56:fd:05:01:7f:48:3d:1d:
         f9:e8:9b:21:83:0c:e8:06:b0:fe:1f:c8:48:ac:e7:23:ec:1e:
         11:e2:5c:77:9b:ff:08:b3:dc:4a:c9:c7:a9:cd:cb:98:ed:07:
         73:58:0e:63:c5:ef:f8:3c:6a:f9:3d:fc:8e:11:d9:1a:40:df:
         02:5f:74:bb:dc:7f:db:0f:ae:e5:79:d3:a7:11:42:f4:61:f5:
         12:f0:52:2b:2e:b1:62:8e:77:de:69:16:a5:96:bf:ca:81:73:
         29:5e:e4:30:02:c2:6c:e8:9e:1d:24:3a:39:b3:08:79:72:8c:
         b7:2e:20:08:05:bc:64:fb:11:a1:c5:ca:45:78:99:2f:dd:4b:
         05:8c:1b:02:7e:49:ad:b6:9d:4c:cf:cb:8c:a6:ad:6b:0a:a3:
         56:1a:d6:c0:b1:28:5b:20:3e:34:70:bb:2c:d5:e0:6a:60:de:
         d4:93:2a:3a:6b:c1:da:21:89:3c:a4:a2:c4:b0:00:9f:13:99:
         07:ca:2e:d1:9f:f7:e9:18:dd:31:f3:ca:5b:2e:77:eb:c0:6c:
         0e:14:da:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:15:10 2025 by rpki-client