Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b40d2979-541b-36d4-8a65-3a8d7f2e7eed.roa
File:                     b40d2979-541b-36d4-8a65-3a8d7f2e7eed.roa (raw, json)
Hash identifier:          f3XZcHYI6BVRJufoFmTCV4Q/6rUEOEZi1/BQnaGnCHg=
Subject key identifier:   87:E7:F3:4E:8E:ED:43:86:1F:0B:B9:F2:3A:62:8B:8C:37:FC:C1:8A
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858499C59F10259298D2E34DF5D00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b40d2979-541b-36d4-8a65-3a8d7f2e7eed.roa
Signing time:             Tue 22 Apr 2025 13:01:00 +0000
ROA not before:           Tue 22 Apr 2025 13:01:00 +0000
ROA not after:            Mon 21 Jul 2025 13:01:00 +0000
asID:                     397214
IP address blocks:        156.154.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9c:59:f1:02:59:29:8d:2e:34:df:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 22 13:01:00 2025 GMT
            Not After : Jul 21 13:01:00 2025 GMT
        Subject: CN=e9704721-00d5-486a-9f4a-c3ec691b6c86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:56:b1:1e:86:0f:1b:52:1f:aa:ff:3d:4b:15:
                    33:9d:22:ae:bb:f4:2e:d9:43:65:f6:5c:d7:fa:28:
                    9d:b9:75:35:3d:0c:a8:f5:07:de:84:77:68:11:03:
                    65:22:76:52:a3:30:a5:28:69:d9:5b:b6:bc:09:51:
                    24:57:c5:14:47:12:2e:35:c5:c6:04:0a:a5:24:51:
                    02:46:2f:b3:d3:a9:30:64:66:dd:2b:7f:62:8d:73:
                    a3:07:2d:ba:2c:73:48:82:a9:a3:5f:ab:b7:72:21:
                    fc:6c:79:08:bf:82:ec:a7:c2:92:c3:c4:58:7e:5f:
                    16:2a:ad:82:10:c0:5c:58:27:91:f7:11:80:91:1a:
                    63:ed:a4:14:0f:1e:1f:5e:62:ea:dd:66:e7:e6:83:
                    01:9a:60:20:64:fd:fc:73:ea:ac:04:40:2f:6a:b3:
                    b6:e0:95:c6:1c:98:68:b7:24:3e:c9:28:f3:2b:9f:
                    8c:61:6c:b1:ca:9f:05:ec:4b:85:fb:6d:f4:da:0c:
                    6f:b2:11:db:26:5a:b1:30:d0:93:6f:d1:ee:2d:10:
                    4b:20:40:a5:78:a6:31:c2:99:aa:64:99:ae:4c:25:
                    4a:c7:f4:4d:0f:53:51:d2:ad:f0:25:9d:d5:78:82:
                    4f:b2:e4:98:8c:d9:0e:ed:ad:0f:57:4d:0e:66:ea:
                    8a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:E7:F3:4E:8E:ED:43:86:1F:0B:B9:F2:3A:62:8B:8C:37:FC:C1:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b40d2979-541b-36d4-8a65-3a8d7f2e7eed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:55:77:3b:6e:23:cc:43:1e:57:c8:1f:1d:59:e0:c4:e0:2d:
         00:06:dd:89:8a:af:7f:19:da:ee:1a:23:37:58:8d:c9:81:4a:
         54:eb:72:48:5b:26:f4:c9:ad:6a:16:9e:68:ee:91:28:96:af:
         dc:1c:16:70:da:0b:78:4e:c7:5a:74:a8:00:da:be:48:28:02:
         57:84:0d:f7:c6:72:aa:03:15:14:fb:76:74:81:46:b1:a0:77:
         65:f9:be:7d:c8:b2:5c:53:9e:e6:4b:b1:ca:db:a1:72:c3:72:
         81:ba:c1:27:ea:5c:00:51:1e:e5:64:d0:b8:5b:40:e3:69:8a:
         69:b6:bc:1e:3a:8e:99:9a:7a:b5:41:51:f0:90:3a:db:30:24:
         d6:2d:10:c3:1b:45:2c:e0:6d:e8:8e:83:32:c5:fd:e3:38:f5:
         9c:22:4e:1a:5f:90:c8:bb:36:e3:1a:1b:c6:38:96:de:63:80:
         12:cc:71:cd:ea:e6:b3:f6:fe:ba:2d:8f:15:b7:84:b2:65:7e:
         31:ef:9f:fc:74:a4:5a:d6:23:8e:6d:f8:ef:71:4e:eb:9a:83:
         49:40:f6:5d:e5:99:2f:55:7d:d8:41:d7:c6:d8:b5:46:86:86:
         13:ab:ba:c5:0b:c4:59:08:eb:13:20:4f:38:e0:fd:f5:37:66:
         8a:f2:eb:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 03:39:29 2025 by rpki-client