Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/39265921-faf7-3cee-a42c-b987f90b9e05.roa
File:                     39265921-faf7-3cee-a42c-b987f90b9e05.roa (raw, json)
Hash identifier:          SJH9j6X1PAKIcLMkV2jhMJ6Z5mW7mZCN8xv7phrSJ8E=
Subject key identifier:   67:F5:A7:B6:32:14:EB:9F:AC:92:F8:BB:C0:26:E2:22:0B:6F:0D:84
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584988CF62F1DF0B76FBBC07C800
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/39265921-faf7-3cee-a42c-b987f90b9e05.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     397236
IP address blocks:        156.154.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:62:f1:df:0b:76:fb:bc:07:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=05d2b089-5638-48f5-bd9a-e48e9f32deee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b1:b1:84:0d:e1:95:bc:39:63:05:cc:81:0e:
                    9b:4b:03:22:34:ab:ad:eb:d4:f3:54:3f:4b:52:ff:
                    c8:d6:8b:cb:bc:66:fa:4b:4e:b3:e8:b2:34:4c:e4:
                    4e:d8:8c:e4:99:05:5f:bb:b3:89:b8:1c:26:ae:1e:
                    57:cf:cc:bb:33:4a:0e:f0:d0:bf:56:0e:0e:31:c4:
                    2e:91:a3:a2:6d:a2:3e:83:7d:c1:39:e2:b6:c1:d7:
                    bb:a0:23:aa:77:d2:02:b4:2d:ac:97:a4:f7:11:ef:
                    2a:19:cc:ac:fc:81:a4:19:a0:f7:de:14:62:82:06:
                    00:5e:b2:6e:54:4a:c7:58:04:0c:cc:0f:41:27:5f:
                    27:2f:51:17:f8:4e:f3:f5:7a:b5:f0:52:25:c2:a4:
                    53:73:73:dc:68:2b:26:e0:5f:70:7f:b9:52:76:ee:
                    47:ed:26:81:31:91:bd:82:51:f3:46:75:ae:e5:45:
                    47:d3:19:76:db:d4:ea:28:36:ae:49:e9:db:a5:7f:
                    f7:7b:5a:ee:c8:5a:ce:f5:34:71:f3:49:93:c0:37:
                    6e:a2:4b:7f:09:24:52:a3:de:a9:aa:e5:95:46:fb:
                    3f:d8:6f:1b:cb:76:27:1b:94:ed:3c:01:67:3c:05:
                    72:a5:b0:f2:1b:4b:f9:d6:32:0a:e4:d7:c9:83:05:
                    c2:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F5:A7:B6:32:14:EB:9F:AC:92:F8:BB:C0:26:E2:22:0B:6F:0D:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/39265921-faf7-3cee-a42c-b987f90b9e05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:dd:b1:9c:5b:4a:ae:b5:e0:ed:21:d9:d9:2e:ed:02:e5:50:
         17:ea:86:d0:64:6d:8f:2c:e3:c6:97:89:03:f7:5d:96:e7:46:
         74:94:d2:54:57:0c:62:76:de:ee:96:94:38:0e:80:d7:8c:ed:
         ab:fc:2b:55:5b:af:50:66:aa:4f:9b:09:f1:4e:47:3c:b4:78:
         8e:04:76:5c:49:b6:a2:f3:af:10:36:b5:4f:fe:9e:2c:a9:b2:
         67:8b:aa:84:28:a5:55:9f:20:bd:c4:a9:3a:c9:7f:e4:b1:67:
         04:98:b6:ca:5e:2c:bc:23:67:1f:0e:46:c2:7b:ab:5f:e8:d5:
         bb:7f:ed:dd:91:ce:5a:06:9a:e0:b0:35:69:40:ad:78:89:86:
         0b:f7:cd:fd:5f:b9:b8:78:9e:66:0b:6f:b5:75:39:f7:65:d7:
         78:a5:c5:be:78:48:71:2f:a4:f5:ff:0e:a7:08:59:b3:3b:57:
         8d:20:87:09:04:a4:94:e1:c5:76:81:54:6b:08:33:08:aa:e2:
         79:ae:90:b2:68:d3:b2:97:3c:0e:4a:4f:79:9e:84:b3:74:a6:
         21:85:ef:f1:d3:91:2f:a8:7b:cd:0d:43:ac:01:65:96:17:cb:
         09:87:de:cd:c7:d6:9c:0b:1e:fc:c5:ed:ad:73:f7:8c:73:5f:
         bb:5e:34:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 20:36:49 2025 by rpki-client