Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fa0a6780-dbbc-358d-9bad-d800df7a85f3.roa
File:                     fa0a6780-dbbc-358d-9bad-d800df7a85f3.roa (raw, json)
Hash identifier:          9Whm1gvvBUjMcL+ItJ4BuCn/l0PHG1HIvz1Rsv6Kydg=
Subject key identifier:   39:86:00:D9:6B:2F:01:69:AF:0D:85:70:A3:FE:63:68:06:18:CC:45
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584988CF50650A9D4973BDE417E0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fa0a6780-dbbc-358d-9bad-d800df7a85f3.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     397242
IP address blocks:        156.154.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:50:65:0a:9d:49:73:bd:e4:17:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=c51d3a8f-382d-4ef5-8cd7-73c63af3bb56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:3a:86:74:75:6c:c3:da:98:33:9b:8e:f1:eb:
                    61:75:9d:fa:ee:e6:6a:a3:7d:ca:df:15:39:5b:25:
                    b9:fd:62:97:c9:41:b3:e4:a8:b9:0e:a1:6b:08:61:
                    cb:c3:4d:09:24:51:48:9e:6e:f9:e2:5d:29:dc:c4:
                    7a:09:9b:88:ac:d3:eb:23:17:28:07:46:b0:b4:81:
                    bf:2d:0e:1a:26:a2:0e:9a:3b:01:f9:03:f0:16:1a:
                    cb:ad:1f:13:5f:e6:01:7d:32:5d:d5:40:3d:a2:c2:
                    0e:4d:b4:51:a3:72:15:10:6f:fc:8a:8e:50:9a:b9:
                    7d:47:ea:ed:dc:67:ca:1e:fe:6e:0e:3b:0a:c2:c1:
                    6a:6b:a9:1c:47:06:7d:cf:91:e8:30:6b:be:32:7c:
                    a3:4f:c2:6e:80:5d:dc:9a:dc:2a:a9:d6:ac:4a:2b:
                    ba:e6:1c:c6:b1:d0:43:c7:dc:b4:99:c0:e5:1a:dc:
                    53:2b:7f:7a:34:e4:f3:7f:b8:cf:00:f1:80:81:17:
                    13:40:be:91:33:21:91:09:fe:03:4e:d3:a6:dd:73:
                    0c:d2:92:df:a4:83:1f:55:06:ed:ce:be:4a:69:cb:
                    e7:fc:b3:1c:3b:6d:d4:b0:4f:c0:07:a1:68:bd:34:
                    41:5d:45:50:ab:bb:71:75:2a:7b:ca:5f:4b:99:5a:
                    7b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:86:00:D9:6B:2F:01:69:AF:0D:85:70:A3:FE:63:68:06:18:CC:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fa0a6780-dbbc-358d-9bad-d800df7a85f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:dc:d2:c7:53:da:0b:a1:fc:63:78:0e:2e:d4:31:ee:10:dc:
         49:5c:78:3d:88:8b:10:5a:78:15:f9:89:de:6f:c5:92:a3:60:
         6b:f3:82:3d:aa:bb:b3:1f:7e:75:0d:fa:48:1f:56:14:70:8a:
         82:2f:bb:a4:04:9b:74:8e:77:dc:f2:b1:ef:06:f8:2f:2e:42:
         04:be:a3:d9:96:73:42:b7:18:5f:6f:9f:ff:ac:d0:be:a9:43:
         89:d2:44:d0:69:b2:92:f7:34:ac:24:66:a8:cc:d6:47:93:46:
         ad:95:ce:f1:b9:fa:30:8c:cb:e9:e3:42:32:9a:04:32:39:e5:
         a4:b9:ca:c3:b0:da:47:44:da:d1:8c:0b:4e:b5:40:e0:39:e7:
         cd:cf:62:ef:39:89:58:96:5d:77:35:af:24:3e:e4:68:60:78:
         1d:69:8f:88:b1:6d:74:25:95:ac:fd:06:af:31:ea:83:d3:1a:
         d6:32:9c:a0:f0:f7:10:a0:44:6e:be:dd:6e:60:dd:0a:cc:43:
         e5:25:0a:ce:3a:07:1a:d0:4e:2e:32:51:30:fa:11:38:47:87:
         cc:43:83:dd:7a:1e:a3:fe:8c:c8:68:e4:bb:c2:85:88:ef:f4:
         f4:d0:09:65:94:0b:b6:d1:4f:9e:18:2c:59:34:bf:2f:6a:85:
         b1:1c:bd:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:21:08 2025 by rpki-client