Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ec6ea4ef-1bea-3720-b519-0e517bfa49bd.roa
File:                     ec6ea4ef-1bea-3720-b519-0e517bfa49bd.roa (raw, json)
Hash identifier:          2jIfWgwnfCafeNShfT450gWmdqfmFburAcJbmLE3GIE=
Subject key identifier:   01:B2:E6:80:1C:0F:F9:88:74:ED:7F:C6:A0:C6:B1:EF:E6:7A:EF:61
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584988CF53B00C3AE8578446BC00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ec6ea4ef-1bea-3720-b519-0e517bfa49bd.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     397232
IP address blocks:        156.154.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:53:b0:0c:3a:e8:57:84:46:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=fea51025-e16f-4afd-8c52-3d354313bb43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:6e:ca:54:8a:95:04:53:e5:98:ab:cf:78:6c:
                    5b:16:40:b4:e7:b7:d7:dd:9d:c9:64:cf:06:ce:2c:
                    20:07:d5:e7:be:46:94:b0:70:36:bb:26:18:9d:b6:
                    61:39:04:35:81:ac:24:88:ef:87:df:95:b2:ea:ac:
                    78:10:56:df:dd:45:23:14:c6:0e:ac:d9:80:c8:38:
                    83:b1:bf:68:9c:db:45:a0:1a:3b:a6:fc:cf:2c:62:
                    b5:f4:71:5b:d6:b5:39:48:7e:c4:8e:6b:9c:41:41:
                    50:58:6a:aa:a6:31:62:9d:7e:f7:50:61:43:e4:18:
                    e2:43:92:64:1d:2f:a0:34:4a:a1:67:10:49:7f:3b:
                    c5:e3:ad:e5:a0:28:4e:67:09:27:88:aa:2d:47:9f:
                    53:19:25:34:0e:7b:cb:54:63:81:e5:ba:a9:2e:f3:
                    db:3c:b0:28:d1:40:f1:df:9e:3e:c7:ee:17:89:97:
                    59:90:b2:65:67:66:39:bb:82:c6:8e:06:b2:cd:ae:
                    c7:9c:57:e0:56:1a:bc:16:f3:d5:c1:ac:53:99:5f:
                    7f:54:a4:a6:57:bd:4e:38:4e:05:a4:3b:8d:9e:cd:
                    b7:e3:5f:ea:8a:14:7e:0b:52:93:08:27:35:53:f9:
                    9d:3c:bb:74:8d:c4:ee:bf:2a:d1:fb:2e:73:59:37:
                    92:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B2:E6:80:1C:0F:F9:88:74:ED:7F:C6:A0:C6:B1:EF:E6:7A:EF:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ec6ea4ef-1bea-3720-b519-0e517bfa49bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:67:87:9d:fe:41:68:85:f4:c7:6e:36:2f:f0:58:38:12:8f:
         6f:ac:f5:8b:ef:c3:0a:cf:74:2f:c1:50:dd:47:15:2b:92:cb:
         7f:0f:c9:5c:6e:3d:dc:d8:02:b9:a8:e4:35:7c:26:ef:b3:9b:
         7b:24:bd:8f:20:ef:c5:fa:31:3c:00:cd:4a:8c:15:fd:57:42:
         8b:47:11:fc:9d:0c:b2:73:0f:42:32:04:c2:51:5b:e6:77:42:
         b0:f7:11:13:71:2f:16:97:18:c1:f4:e8:08:a7:c7:29:8b:46:
         90:19:bf:0c:9e:8d:1d:31:42:07:f6:b3:5d:e1:27:bc:d7:bc:
         95:35:cb:84:28:22:d6:9a:10:e6:5f:8e:d1:34:a3:9b:aa:1f:
         23:82:c3:1b:61:93:6a:a0:f0:3a:35:15:30:1b:37:86:06:e6:
         af:00:a5:f9:29:e9:c9:a4:6c:4f:c0:26:e3:d7:74:d9:92:38:
         8c:01:24:8c:05:85:13:a7:75:be:04:00:c3:a4:1a:5d:83:04:
         4a:28:e4:da:cf:5d:6b:53:17:16:ad:81:ae:a5:ce:1b:e2:bd:
         cd:22:63:8e:75:a5:3c:89:d3:d5:db:0a:d0:32:fb:47:45:f8:
         52:d2:9d:a1:41:12:57:80:e0:04:64:df:2f:a9:0e:76:26:37:
         86:1e:ea:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:47:02 2025 by rpki-client