Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/01ff253b-2f79-3504-ab30-ecaacaab5441.roa
File:                     01ff253b-2f79-3504-ab30-ecaacaab5441.roa (raw, json)
Hash identifier:          p0UOrXLNzk5RmYbw9v6lm7YYmOjtioq8K/fDPR30tuc=
Subject key identifier:   14:9C:16:6F:56:8A:D6:4C:3E:91:5D:F6:59:09:1A:92:D7:32:31:45
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285849F17FF97FDB5EA2F4BE0C5EC0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/01ff253b-2f79-3504-ab30-ecaacaab5441.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     397232
IP address blocks:        156.154.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:f9:7f:db:5e:a2:f4:be:0c:5e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=83929e6d-adf9-40c2-b5c0-a02a67b75bb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b8:f0:14:8a:b9:03:d7:4c:05:d2:40:09:9b:
                    48:72:1b:57:75:7d:a0:86:ce:33:ee:d8:91:cb:17:
                    4f:f6:0f:f6:06:74:f6:f2:75:a8:98:3a:fe:8b:9e:
                    19:64:e7:51:3e:f1:28:0f:18:78:33:ff:e3:4b:bb:
                    51:a7:47:0d:5a:47:b4:05:0b:52:9a:1b:51:f6:8f:
                    9a:e7:ad:45:ef:b0:3f:8a:9f:4d:d3:60:8b:bf:00:
                    35:1c:3b:36:7a:1f:ce:4f:be:2f:6c:b3:ab:63:c1:
                    ac:5e:28:9b:ed:33:74:05:0d:98:ba:1b:17:c2:c5:
                    ca:62:52:34:82:f8:7f:fa:2a:d5:45:97:73:4a:cb:
                    ae:ad:77:b5:f2:7e:ed:92:73:e2:12:53:60:b9:9d:
                    48:4e:45:10:d0:e3:52:79:7e:68:3b:c2:08:ea:71:
                    5d:15:7b:31:3c:80:7e:23:67:fb:ef:dc:72:50:d0:
                    a0:65:cd:98:d0:82:30:fa:b8:9b:8e:a8:a5:25:6c:
                    58:1e:2a:c6:b0:18:a1:37:ea:a3:a3:9e:51:0a:6c:
                    8a:43:a6:b7:3b:b9:1e:65:b5:50:56:be:3f:fa:2a:
                    c0:64:02:f4:2f:bf:78:b8:81:cc:37:9c:28:d0:9b:
                    b8:14:22:c2:44:53:e0:c5:1f:91:f6:27:28:71:16:
                    75:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:9C:16:6F:56:8A:D6:4C:3E:91:5D:F6:59:09:1A:92:D7:32:31:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/01ff253b-2f79-3504-ab30-ecaacaab5441.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:42:8c:a2:0b:d4:b6:38:81:a8:15:45:ab:0c:7f:e1:6c:57:
         84:38:9c:a1:16:74:f1:24:ad:f2:cf:f7:b8:30:8a:33:9f:d5:
         c2:10:71:05:52:6a:48:78:f7:b0:0e:03:f2:0b:18:9c:f5:8d:
         e8:77:88:f6:3b:98:0d:76:ca:ea:a3:2c:be:55:b6:6c:5b:06:
         83:80:60:b7:91:ed:40:c8:7e:3b:be:fb:ef:7c:b8:2d:e9:6a:
         fb:4d:76:cb:eb:3e:be:11:dd:0e:09:2c:5b:75:39:74:d1:7c:
         68:a5:99:b5:a3:52:07:d9:ea:87:43:0c:6d:91:71:d9:5b:f8:
         3d:16:ed:6f:35:6e:ed:83:50:ca:b5:2f:9c:d7:95:7a:ff:91:
         0f:dd:c6:87:f3:6e:28:40:0c:ec:81:8f:f7:b1:2e:ec:92:ae:
         79:85:4a:af:03:09:e2:52:5f:6e:fb:aa:44:79:39:bf:3c:8d:
         1e:ab:aa:60:a5:c9:e2:32:f7:ec:ed:18:40:fc:53:c0:e3:01:
         4d:89:cb:d9:27:74:e0:d3:b5:b8:a1:b9:8e:fa:b8:90:cd:82:
         d5:54:ae:2c:19:4e:5e:9c:c8:42:a2:9a:0f:bf:41:88:de:b1:
         fd:3f:bb:59:7c:b1:47:ab:fa:47:0b:bf:cd:2c:c5:e2:f6:5f:
         60:e5:52:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 13:54:15 2025 by rpki-client