Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/41370fae-ec3b-3376-85f9-830049c78723.roa
File:                     41370fae-ec3b-3376-85f9-830049c78723.roa (raw, json)
Hash identifier:          mfeJIPsNv4QuY8cyc89EbQJHI8GNc+MGk3PaXxLJA0Q=
Subject key identifier:   DD:FD:8F:9A:A9:3A:80:1F:E8:8D:EB:18:29:B0:02:44:FB:6E:24:91
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A527FB817D305DA821336A980
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/41370fae-ec3b-3376-85f9-830049c78723.roa
Signing time:             Thu 26 Jun 2025 18:54:23 +0000
ROA not before:           Thu 26 Jun 2025 18:54:23 +0000
ROA not after:            Wed 24 Sep 2025 18:54:23 +0000
asID:                     16552
IP address blocks:        156.154.76.0/24 maxlen: 24
                          2610:a1:3028::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:52:7f:b8:17:d3:05:da:82:13:36:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jun 26 18:54:23 2025 GMT
            Not After : Sep 24 18:54:23 2025 GMT
        Subject: CN=78d8e965-5725-4673-9f46-01c58c4263e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d8:b5:d7:f0:4c:88:45:73:e4:9f:77:91:09:
                    f7:05:62:94:57:d0:53:50:fd:b7:53:ab:d1:f9:61:
                    af:55:40:2a:50:98:06:38:ff:db:9b:d2:e8:1f:87:
                    89:47:1c:7a:c7:22:87:f0:6f:5a:5e:7a:8e:18:ee:
                    82:99:0c:1a:1b:f0:f0:9a:05:da:63:67:dc:a5:b6:
                    ba:ed:42:d6:89:16:1b:6a:d8:93:b7:d3:55:58:95:
                    ba:a1:15:37:bc:89:cf:ef:df:9f:43:63:8d:78:c6:
                    66:0c:3d:7c:0f:92:0f:73:74:68:9a:1f:7e:58:30:
                    79:01:9d:95:c7:d0:20:d1:6d:b5:a7:a8:8c:40:c8:
                    a7:f7:d5:c8:e5:4a:77:94:06:7c:61:ed:4c:35:81:
                    05:3f:9e:6c:3a:51:91:bd:7b:80:2d:e5:51:f7:63:
                    4d:30:25:08:1f:69:82:bb:55:ec:5a:f2:a2:89:15:
                    74:c6:3d:d5:8a:1a:2a:eb:92:e5:0a:93:81:9f:f2:
                    2f:b3:41:5b:1c:7d:9e:a2:69:7f:8a:b5:a9:f0:9c:
                    49:5f:3c:32:a4:ce:b1:fc:16:59:82:5b:74:e5:34:
                    62:2f:4f:5a:fa:27:1c:b6:d3:25:80:42:90:94:ea:
                    bd:ab:5a:e5:9f:2a:62:6e:dc:9e:0d:37:ee:ec:e0:
                    a3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:FD:8F:9A:A9:3A:80:1F:E8:8D:EB:18:29:B0:02:44:FB:6E:24:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/41370fae-ec3b-3376-85f9-830049c78723.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.76.0/24
                IPv6:
                  2610:a1:3028::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:51:8f:df:96:97:9b:b7:0f:fd:b5:3a:89:d9:39:b6:9d:8d:
         5b:7b:4d:44:df:15:64:60:81:0a:57:61:29:7b:04:a4:df:77:
         82:7b:3f:0d:e4:ca:0f:08:ad:55:58:c6:fa:2a:c7:a6:23:17:
         3c:dc:c8:82:60:1d:05:ed:65:c2:06:2d:24:32:34:ce:fd:e2:
         50:40:3c:cd:47:01:2c:1a:90:9a:78:ba:a5:33:27:15:c0:36:
         09:2e:d2:0e:3a:9f:5f:0b:8f:1c:72:b1:73:d5:7b:7c:c7:51:
         96:29:5e:2c:7a:7c:d8:6d:c1:ca:8a:af:a5:11:42:1b:f6:a4:
         4f:b6:9c:65:96:e6:2c:04:2d:ac:da:4d:92:f0:88:ba:b6:c9:
         56:fa:03:2e:05:d3:cf:7e:f2:6a:34:73:9c:57:b2:22:f9:4b:
         26:a9:da:8c:53:81:ff:2e:d7:6a:b7:ec:97:31:fc:38:e3:bc:
         72:2d:09:24:7c:47:53:bd:a2:b7:d0:52:2a:41:97:ba:f7:68:
         a4:f3:34:16:30:ce:07:09:17:a6:6e:e4:b2:0e:ed:f1:f1:0d:
         ba:d5:ac:22:68:5b:59:9e:80:12:27:9d:68:cf:cd:ab:94:06:
         bb:dc:be:96:49:ec:a9:e3:96:a8:5c:cd:e4:33:e7:5c:f2:c5:
         84:6c:8a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:31:50 2025 by rpki-client