Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cfee5152-2cd6-3296-9389-bc1797bc8593.roa
File:                     cfee5152-2cd6-3296-9389-bc1797bc8593.roa (raw, json)
Hash identifier:          /vdVjh+FvkMIu4UobbSSCGLHZv5heMyQts1kO+5xK5g=
Subject key identifier:   8A:88:9B:94:4F:6C:39:74:21:F4:12:C4:4D:07:29:91:00:47:D5:EF
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858499C59EB2C52AE6DAF16A013C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cfee5152-2cd6-3296-9389-bc1797bc8593.roa
Signing time:             Tue 22 Apr 2025 13:01:00 +0000
ROA not before:           Tue 22 Apr 2025 13:01:00 +0000
ROA not after:            Mon 21 Jul 2025 13:01:00 +0000
asID:                     397226
IP address blocks:        156.154.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9c:59:eb:2c:52:ae:6d:af:16:a0:13:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 22 13:01:00 2025 GMT
            Not After : Jul 21 13:01:00 2025 GMT
        Subject: CN=9cf3b31a-b820-4c1f-99aa-4084c71637bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a6:f6:46:44:f1:ca:e7:37:3d:54:0c:ac:e4:
                    67:df:08:a4:b0:40:94:92:a3:b4:22:9b:c5:49:7a:
                    c3:fc:c3:97:6a:10:0f:6b:c3:8c:1a:c7:38:a9:c2:
                    90:2b:6b:d4:2b:4c:4c:78:5e:1d:4a:c9:90:a2:73:
                    94:ea:57:6a:84:87:cf:dd:df:f8:43:58:5a:28:79:
                    5d:65:2a:17:1c:a1:f6:da:6f:d7:6e:56:45:8c:e7:
                    97:2c:5a:56:00:eb:32:db:b8:1f:31:04:59:a1:6e:
                    47:81:7d:53:00:0f:4a:dd:58:4b:65:53:07:8d:9b:
                    e9:e3:27:55:df:e9:72:05:49:1a:21:35:62:e7:1d:
                    ce:c6:ae:2d:c4:d8:f2:c8:28:f5:10:1c:ef:ab:38:
                    a7:74:4d:fd:55:b3:53:dc:f4:39:3e:c8:75:19:65:
                    08:70:30:40:ad:41:f4:93:5d:b3:7e:44:ba:29:aa:
                    1e:cb:ca:92:4c:f1:77:4e:43:1d:7f:38:b3:ac:9a:
                    7b:6c:83:3f:84:8a:22:1d:48:7a:13:30:ca:b9:14:
                    19:db:ed:c9:9f:44:7b:c8:4c:ac:04:17:bb:87:c0:
                    a8:88:4f:ff:80:49:a9:16:21:f2:f3:bd:1c:56:2b:
                    61:31:dc:01:17:6f:f2:ee:4e:54:a0:41:86:21:8c:
                    83:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:88:9B:94:4F:6C:39:74:21:F4:12:C4:4D:07:29:91:00:47:D5:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cfee5152-2cd6-3296-9389-bc1797bc8593.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:37:cd:97:43:3c:47:56:9c:e4:4e:ce:ad:c6:17:ad:6f:f2:
         3f:15:9d:c0:41:5b:7c:91:5a:ff:82:d8:8b:b9:d6:29:c6:cc:
         92:f1:44:5d:27:79:01:16:46:e4:d5:7a:ec:9e:75:47:97:91:
         d2:e8:dc:96:75:d5:2a:95:06:68:ce:6a:ea:74:8f:f2:f6:fc:
         27:85:c3:9d:79:51:9a:ed:3a:47:9f:4f:59:40:6b:cd:6f:44:
         75:83:82:5d:8c:91:03:92:de:ff:4c:61:ac:0d:8f:84:9c:b9:
         46:21:65:1f:0f:74:32:da:bc:2f:67:cd:1a:2a:6a:95:29:cd:
         cd:01:03:93:f0:27:56:f6:a9:89:72:9e:81:41:84:f1:dd:c3:
         2b:81:b0:ce:a5:7e:1b:f1:ff:5f:95:94:ba:82:54:d1:52:02:
         0f:b8:77:38:80:71:47:20:4d:cf:bf:7f:50:dd:72:f8:de:c7:
         7d:53:b9:89:e2:4e:cd:38:32:a1:66:ca:50:c6:3c:79:3d:fa:
         c2:8e:3e:0f:b0:94:d8:b5:c2:7f:eb:65:49:57:cf:31:7f:87:
         da:bc:ef:27:83:d2:e1:81:1d:e9:40:bb:b2:02:0c:cd:68:f3:
         b7:dd:20:32:4e:1d:d2:33:bf:1b:9d:27:0e:0f:38:9e:61:0d:
         76:d9:50:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:57:20 2025 by rpki-client