Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e146a3db-f9ad-3629-9415-e319c1497685.roa
File:                     e146a3db-f9ad-3629-9415-e319c1497685.roa (raw, json)
Hash identifier:          pjMmtT/WNtPW6MYBSPrPJLKmeLRps8jqRrictk4tP4A=
Subject key identifier:   5A:34:0A:E0:85:AF:FD:3A:9C:0C:FB:1F:DA:0A:81:2C:95:3F:4E:72
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858499C59EBDA5992EE1181FAD100
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e146a3db-f9ad-3629-9415-e319c1497685.roa
Signing time:             Tue 22 Apr 2025 13:01:00 +0000
ROA not before:           Tue 22 Apr 2025 13:01:00 +0000
ROA not after:            Mon 21 Jul 2025 13:01:00 +0000
asID:                     397235
IP address blocks:        156.154.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9c:59:eb:da:59:92:ee:11:81:fa:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 22 13:01:00 2025 GMT
            Not After : Jul 21 13:01:00 2025 GMT
        Subject: CN=bf8289a9-2e88-45f3-a535-8caa8cb52bf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:25:24:c6:56:d9:3a:4b:9c:44:74:a8:b0:a1:
                    63:f4:39:a6:1a:ea:e0:04:c8:1e:76:cf:a8:27:5e:
                    98:fc:b2:10:7a:06:a8:e4:eb:8d:bc:92:8e:45:dc:
                    8b:a4:31:6b:46:23:10:d9:04:58:0c:cd:9c:15:a3:
                    48:bf:3d:1a:d1:c1:04:2b:eb:e0:f8:c5:23:9b:44:
                    20:69:3e:59:45:03:18:7e:44:20:82:56:ed:11:98:
                    13:0c:9f:31:cb:af:d8:3e:25:30:b9:0d:6e:41:18:
                    1f:0e:f0:4b:4a:1b:18:ea:03:43:60:66:a9:00:b2:
                    e1:3a:47:31:23:65:cd:98:d7:27:84:25:3a:70:67:
                    77:62:8d:0f:a3:dc:37:f2:41:b9:09:c2:2a:9a:83:
                    fe:f4:39:e2:28:18:8e:4e:34:d7:67:f6:f6:f7:0f:
                    ea:f6:73:7f:b2:84:1f:4a:9b:55:60:37:c8:2f:ef:
                    89:d6:b8:ad:08:ac:24:97:7d:64:99:51:86:c4:a5:
                    f6:78:a7:20:42:64:54:1e:7c:33:61:3a:f4:e6:88:
                    db:84:39:53:7b:f6:65:a7:97:ee:c9:2c:29:aa:97:
                    b1:18:75:db:3f:18:4e:4b:c8:0b:b3:28:9b:53:fc:
                    55:fc:80:e1:7c:a9:a3:b8:53:ea:f8:23:ed:a2:a4:
                    63:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:34:0A:E0:85:AF:FD:3A:9C:0C:FB:1F:DA:0A:81:2C:95:3F:4E:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e146a3db-f9ad-3629-9415-e319c1497685.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:57:07:3b:7a:64:72:4f:4b:a0:1f:90:fa:e7:9a:34:c7:9c:
         cf:35:12:f2:8b:42:68:a2:98:71:21:ac:3f:5d:4c:41:d1:5e:
         f6:f3:bb:8e:af:08:d5:27:4b:38:d4:b8:6d:65:57:a3:03:11:
         88:c5:27:7e:d4:24:d6:ed:79:c5:32:fd:87:4a:df:2f:b7:f4:
         32:a1:e0:ae:25:c1:f7:46:93:7d:f7:61:39:af:8f:47:81:32:
         a5:d6:ec:a9:72:e6:20:9a:f4:d9:bd:87:89:2f:a2:49:2a:d7:
         32:75:da:d5:b7:b7:36:eb:51:9f:62:7d:5a:37:b2:9b:de:bc:
         17:4a:98:4c:42:fc:b9:3e:94:dd:f8:a6:2b:95:27:1b:65:67:
         63:63:a0:00:8d:6e:bc:5d:d8:3e:e5:93:53:35:98:3f:d3:70:
         f0:4b:19:92:0c:e8:aa:a1:3a:38:93:9b:5a:a2:58:f3:68:6f:
         5c:f9:88:e6:ed:d9:31:e6:71:86:f0:bd:64:00:d9:e8:12:50:
         4b:d9:73:1d:66:c2:05:9e:de:c7:f9:0e:37:1d:fc:d6:54:f3:
         f9:3d:05:e6:30:16:d2:ee:56:83:b8:7c:39:20:2a:ba:f6:dd:
         90:47:ee:cf:9d:dd:e0:ad:ea:71:69:15:98:c7:ea:82:6f:ff:
         45:f4:e3:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:35:24 2025 by rpki-client