Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2ede4949-7fb2-3727-8625-c14173803dae.roa
File:                     2ede4949-7fb2-3727-8625-c14173803dae.roa (raw, json)
Hash identifier:          JwcMb+3l2+Dya92cIktDIoPCgb4/3U1N2iq9BIx4AT8=
Subject key identifier:   84:56:89:8B:D9:0E:44:A9:10:A5:D5:39:BD:A9:58:42:E7:2D:FE:45
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858499C5A0AC61F85E97CD0589200
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2ede4949-7fb2-3727-8625-c14173803dae.roa
Signing time:             Tue 22 Apr 2025 13:01:00 +0000
ROA not before:           Tue 22 Apr 2025 13:01:00 +0000
ROA not after:            Mon 21 Jul 2025 13:01:00 +0000
asID:                     397235
IP address blocks:        156.154.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9c:5a:0a:c6:1f:85:e9:7c:d0:58:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 22 13:01:00 2025 GMT
            Not After : Jul 21 13:01:00 2025 GMT
        Subject: CN=7167f58e-8ecb-4458-a1d1-7004a7f12db1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cf:ad:92:62:dc:4f:7e:53:3b:1e:28:46:1e:
                    49:17:35:f1:dc:0f:98:41:c7:36:ea:81:ad:bd:2e:
                    60:27:83:33:5b:48:c1:a8:f0:35:cd:5d:f7:b4:7d:
                    2a:5c:14:5c:94:2b:58:0d:84:64:32:32:c1:b7:c6:
                    46:79:f8:c2:27:37:cf:6f:14:02:c9:9b:e5:d8:34:
                    68:61:0d:50:58:c1:72:14:6b:65:b6:52:1f:64:2b:
                    64:7b:02:be:4f:b2:32:2a:9d:b0:4d:28:fd:29:c2:
                    cd:af:94:fa:52:7f:63:10:fb:df:44:21:6d:41:29:
                    07:07:f1:ed:d8:0b:80:cc:5c:96:7a:25:94:fb:1c:
                    23:bc:97:85:64:96:79:5b:e5:fa:11:fe:6e:28:d0:
                    95:da:b2:2f:06:1d:b1:f6:b7:da:91:d5:50:2b:a3:
                    b0:94:7c:fd:d0:7a:5c:59:16:09:4b:5b:41:2e:fb:
                    95:5a:5c:56:17:32:62:07:a1:18:04:3c:7a:90:1e:
                    9a:1a:7a:09:89:f9:34:c6:3b:b1:f9:52:d0:fe:b0:
                    0d:2b:9d:7f:04:2a:da:eb:65:ee:d2:05:3e:42:d7:
                    f0:9f:e2:30:a3:7d:1b:2f:3d:1f:66:69:a8:ae:51:
                    6d:9f:16:8c:d7:11:ae:59:1f:43:a7:cc:c4:ff:b8:
                    1b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:56:89:8B:D9:0E:44:A9:10:A5:D5:39:BD:A9:58:42:E7:2D:FE:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2ede4949-7fb2-3727-8625-c14173803dae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:cf:d9:76:87:23:a0:f5:86:9b:4e:24:ba:a8:6d:d2:cf:f0:
         74:d5:63:0c:58:bc:d5:40:44:b0:71:c3:3e:03:79:5f:fc:1f:
         69:2d:a6:b1:20:47:00:a4:df:0f:95:1c:04:5a:85:49:ed:33:
         28:5e:fe:7c:1a:4a:f5:af:b5:2d:56:0e:20:63:d6:54:b5:39:
         b3:2c:ed:7e:1f:8e:14:c5:93:34:9d:af:a4:aa:15:37:43:d4:
         ab:dc:24:07:d0:76:4f:e1:00:a2:af:d9:6f:98:e3:3b:1d:40:
         ec:c3:4c:c2:3e:04:40:1f:49:f4:1c:be:79:52:e5:e8:b4:ef:
         0a:3a:55:5d:9a:0b:46:ef:62:a3:87:bb:06:38:0e:d0:57:8f:
         eb:9c:6b:13:4a:35:47:ae:e7:e9:6a:24:bf:db:76:79:4a:aa:
         e6:97:88:69:16:40:f1:40:8b:8d:0e:eb:9d:ac:55:02:bc:df:
         bd:03:f9:5e:4c:5c:4a:cb:dd:19:4d:41:ac:b7:0b:02:46:bf:
         4e:7c:04:5b:14:c7:7b:d2:52:07:7e:d6:9f:cf:99:73:11:e1:
         fc:cc:05:2c:d5:60:71:30:2d:b0:cb:2e:ba:77:ed:a0:49:e5:
         29:67:07:09:34:2c:31:e3:de:ca:7a:cb:62:cc:a1:82:0f:c1:
         88:d1:06:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:03:09 2025 by rpki-client