Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/04b145cc-8683-3c5a-8981-4ecedc6ebf7b.roa
File:                     04b145cc-8683-3c5a-8981-4ecedc6ebf7b.roa (raw, json)
Hash identifier:          VRA/0HeqtkTAnVfibSqxGuTGpUwl8aBIQAhaVoj/K6o=
Subject key identifier:   30:79:02:F9:3C:54:4C:79:8E:21:8D:26:BE:92:33:B5:91:19:D8:0B
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584988CF5EEB58C1296ED296DB00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/04b145cc-8683-3c5a-8981-4ecedc6ebf7b.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     397233
IP address blocks:        156.154.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:5e:eb:58:c1:29:6e:d2:96:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=21796d65-8efd-4fad-8b31-c592561461dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:77:66:8a:de:a7:81:9c:0d:fa:6d:46:fa:5c:
                    12:92:32:5f:73:2c:ed:37:03:62:84:ae:88:d5:02:
                    93:27:fe:04:d1:09:e6:c4:0a:a5:a5:3a:65:70:49:
                    e0:66:a1:ca:cb:6c:1f:ee:ef:a7:02:7f:ac:c0:78:
                    44:37:5b:35:75:ab:3b:b2:36:99:7d:6f:1d:ab:de:
                    68:be:51:5b:77:1a:13:97:db:be:4c:33:e9:50:22:
                    c2:a1:33:66:a4:ba:32:c0:fe:cb:18:b1:b3:41:84:
                    74:52:3d:91:c1:cc:4c:2e:a0:00:d7:60:0d:72:c2:
                    68:36:c9:e7:76:c6:7a:01:c8:c4:d0:38:0a:9c:19:
                    8c:c1:a0:5a:7b:50:38:ac:76:b2:46:32:05:c2:df:
                    97:3d:09:93:34:19:46:02:f9:36:0c:61:35:96:4e:
                    85:05:ee:ca:20:70:d4:f4:cc:2f:22:21:b2:20:0b:
                    a6:15:43:c2:95:d2:4d:32:5c:d4:2c:ae:6a:6a:84:
                    4d:52:fc:3e:a2:b6:13:7e:6f:fa:0e:cb:c5:8f:35:
                    5d:91:fd:54:35:15:94:6e:15:18:e1:62:cb:bb:f7:
                    ab:fc:93:ef:33:7b:9b:e9:08:ad:30:24:c7:76:be:
                    01:23:64:85:81:e8:f4:26:34:99:67:5a:bd:ff:60:
                    fe:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:79:02:F9:3C:54:4C:79:8E:21:8D:26:BE:92:33:B5:91:19:D8:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/04b145cc-8683-3c5a-8981-4ecedc6ebf7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:3a:68:40:2c:ab:77:7b:86:08:a5:36:40:aa:65:98:53:1b:
         c9:24:9d:ab:85:68:d8:76:c7:18:86:36:53:09:2c:f4:db:2a:
         92:9a:8d:4d:65:e7:0d:16:76:88:09:f5:8b:c2:38:28:97:05:
         01:ea:5e:39:89:71:b6:a0:63:d3:d7:04:a6:63:ac:af:b6:e9:
         e9:7b:bd:04:3f:c3:7d:e3:b5:c7:1f:1b:54:bc:69:25:0d:dc:
         08:b4:8d:9e:03:01:c0:bf:e0:16:dd:73:c0:ef:a3:f3:0a:21:
         30:79:4b:6b:2f:15:c5:e3:62:3c:59:d2:94:eb:03:a9:46:d2:
         ee:11:3d:94:00:f3:23:45:37:be:1c:20:4b:94:43:c0:d2:48:
         b6:eb:95:bc:b5:7f:b2:41:66:32:1d:13:9f:74:d1:50:cb:68:
         7e:8d:61:7a:98:a7:32:8b:a4:77:8d:c7:e1:65:cd:b9:aa:4c:
         75:d1:a6:f2:98:9a:99:f6:e6:11:41:57:de:49:68:04:d8:5e:
         6b:37:2c:86:38:cb:8a:57:38:11:ec:e5:57:69:3f:a4:53:64:
         13:a8:d5:bf:2d:ea:4f:7a:d3:73:df:cb:34:18:83:1f:96:05:
         18:c8:f5:2c:3d:69:02:94:21:d6:97:eb:06:97:6b:cc:23:69:
         f6:e4:33:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 13:18:25 2025 by rpki-client