Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/afa08cb7-18bd-3588-93e4-99c1991e74cd.roa
File:                     afa08cb7-18bd-3588-93e4-99c1991e74cd.roa (raw, json)
Hash identifier:          B9W0w6aq3Tu/YHLxj2WrTsHpbVg5k0dvOAVC9e++J1I=
Subject key identifier:   DF:51:74:43:13:23:55:28:89:EC:5E:F7:63:8B:57:63:67:61:88:9C
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584988CF59DD52384C4DC1B78140
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/afa08cb7-18bd-3588-93e4-99c1991e74cd.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     397237
IP address blocks:        156.154.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:59:dd:52:38:4c:4d:c1:b7:81:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=91faf2fd-edbf-4af1-a395-263b7f8040f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:6f:f3:1a:dd:11:66:d7:ee:ac:6e:17:a1:37:
                    9b:92:a7:7b:50:48:b8:89:d3:55:25:55:42:d3:5a:
                    bd:f2:56:7d:be:cb:84:91:3d:c9:e9:b7:8b:a1:e0:
                    1a:f7:31:a1:af:90:d3:12:9f:f9:34:8b:f0:29:58:
                    1b:32:46:03:d7:99:93:af:fd:92:cf:64:37:f1:ab:
                    55:d0:62:37:2b:97:1c:47:ec:ca:92:6f:42:2a:84:
                    78:a9:ed:b9:27:d9:1e:06:f4:76:c5:d7:74:f3:ab:
                    f5:d6:29:eb:c0:88:09:1a:b9:2d:d7:81:bb:cd:5e:
                    ce:6f:f4:14:da:5f:ab:aa:5d:37:2e:36:e6:92:9b:
                    a6:3d:a8:dd:d2:f6:6c:cd:9c:0f:53:49:0b:bd:32:
                    c4:4f:aa:8e:3d:3f:f5:09:89:66:0f:9d:46:9a:ce:
                    25:94:85:e6:70:fe:b2:1b:07:2d:d5:e6:dc:ab:fe:
                    a5:86:97:8c:cb:eb:fc:5f:de:e4:8d:87:55:3c:a1:
                    7b:44:87:01:e2:48:f8:9e:1e:60:62:1d:70:b5:2b:
                    a7:07:ec:47:cb:d2:bd:ad:ec:e7:f5:48:aa:8c:c0:
                    52:71:4c:fa:95:32:21:c3:16:f6:2d:09:4b:4f:3b:
                    25:1a:2c:2f:f4:8d:e4:6e:35:ef:44:13:7e:ce:50:
                    48:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:51:74:43:13:23:55:28:89:EC:5E:F7:63:8B:57:63:67:61:88:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/afa08cb7-18bd-3588-93e4-99c1991e74cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:69:17:bb:f7:03:c7:3e:73:dc:41:2a:1f:e1:a9:a3:be:d1:
         f2:05:10:e8:7c:6d:98:3f:0b:2c:c0:01:f2:01:0f:a3:fd:05:
         ab:05:93:2a:6b:f4:5e:69:10:b9:da:db:f1:88:50:d4:52:59:
         56:12:4a:39:b7:7c:2c:1b:0e:78:4a:f2:5a:f0:df:34:45:c8:
         38:78:31:6b:d5:53:16:13:4c:74:d6:fe:d3:3e:e6:d2:8b:09:
         4d:38:cd:7a:43:22:2d:e4:f1:51:ba:16:35:e3:49:25:18:fa:
         20:16:76:15:5d:fc:a7:6c:22:94:b9:72:e4:5e:79:d7:62:1c:
         c9:76:60:63:f6:38:9a:7c:bb:3a:68:43:bd:be:c2:ee:b3:ba:
         cb:85:12:2d:3a:64:e3:45:57:5b:e5:32:53:15:9d:5a:22:d9:
         71:56:c6:49:4b:fa:09:0e:dd:78:a9:31:e2:b0:b3:89:9f:d9:
         7f:2a:f7:ec:ea:67:8b:8d:1d:54:3d:2f:0e:95:19:36:bd:78:
         b4:1d:4b:12:18:90:19:eb:10:a7:c8:45:52:d3:91:e9:d9:66:
         25:1a:09:7b:e3:de:f7:ec:a8:5e:fd:04:91:69:fa:0d:15:55:
         81:8b:3e:f4:2c:16:6a:8d:69:a1:97:31:3d:e0:cb:79:44:7d:
         df:ea:3d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:01:20 2025 by rpki-client