Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/50d2ace6-1184-303c-b591-cbdc5ad384ed.roa
File:                     50d2ace6-1184-303c-b591-cbdc5ad384ed.roa (raw, json)
Hash identifier:          //egPy4WB+uPWLTQ3KER4yrcD/4gnM4UgSGYYPb+QHY=
Subject key identifier:   52:98:4B:6C:D6:71:78:B3:89:6A:98:81:11:E7:45:DB:44:EE:33:76
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A3B7B30DB10025266B0BAB680
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/50d2ace6-1184-303c-b591-cbdc5ad384ed.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     397233
IP address blocks:        156.154.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7b:30:db:10:02:52:66:b0:ba:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=15a6706f-1717-4189-90b4-4fd334c2974d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:1e:98:15:f6:c8:97:04:e4:2f:bf:21:5b:57:
                    f2:03:4b:dd:ac:43:31:3a:3f:29:d6:3a:6c:fe:62:
                    12:8c:f9:85:fa:50:f7:01:b1:cd:5a:97:c2:ac:ed:
                    7f:bf:92:3c:ea:f4:fc:20:9d:58:5e:03:53:2f:39:
                    ab:f7:b1:2b:85:a5:34:25:2d:7d:d8:d4:8f:51:06:
                    95:e9:9b:0f:d1:98:e2:a6:7e:01:7a:81:6f:29:17:
                    e2:23:a6:ad:e3:8c:54:3e:6b:3b:05:c3:d6:b0:24:
                    de:01:0d:05:56:43:90:59:2d:ac:f8:f3:87:ac:42:
                    2a:a2:a0:ab:ea:11:83:43:6a:6f:43:27:f0:8e:90:
                    58:50:14:a3:71:39:3a:16:bd:70:a9:cf:a8:af:62:
                    7a:63:d1:7b:da:45:ca:d9:02:8e:ee:24:b8:0a:81:
                    76:84:e6:f9:6b:31:54:ab:b4:2a:c7:03:0a:6e:13:
                    b6:bd:53:8a:d3:7b:5d:b2:6a:22:6b:7e:98:8e:fc:
                    a6:72:97:c6:fe:98:54:11:1a:43:dd:22:35:13:7e:
                    76:62:9b:c6:a2:35:d0:fe:13:45:8d:e5:1b:cc:dd:
                    af:0f:ee:eb:1e:1b:05:6b:42:64:f2:b3:66:b8:71:
                    0c:c2:53:cf:18:f4:83:db:5a:a0:01:04:47:ea:f1:
                    d0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:98:4B:6C:D6:71:78:B3:89:6A:98:81:11:E7:45:DB:44:EE:33:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/50d2ace6-1184-303c-b591-cbdc5ad384ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:89:14:a8:cc:7f:7a:66:f2:95:de:d0:8c:ff:f0:5e:cc:a3:
         cc:e3:dd:26:09:0a:a4:57:f0:d5:21:de:47:c2:fe:e6:65:db:
         cf:c7:b3:e4:4e:7d:9e:b0:a9:df:75:ad:4f:0c:a1:8e:a1:09:
         24:f5:55:1e:c7:33:67:0c:92:44:70:d2:e4:80:c4:8f:05:32:
         a2:a0:52:f4:f5:ff:65:d7:ff:d5:93:aa:9b:d3:98:87:2b:f3:
         8a:ff:4a:1d:94:59:68:ac:77:08:c6:43:f7:6b:1c:7d:86:f8:
         c7:fc:20:4d:02:e9:d4:eb:92:3c:b6:84:82:7b:cd:74:23:41:
         66:1c:8d:50:79:74:6e:f3:b4:5b:84:b8:ce:9a:76:51:a3:18:
         b0:c6:3c:95:5d:f1:72:bc:ff:b2:f7:da:b2:71:b1:17:11:64:
         c7:e9:8f:72:70:b8:2a:99:89:cc:3c:29:8c:da:6a:62:f9:c8:
         da:77:be:b2:fa:57:e3:a6:93:80:c1:e8:4c:68:ab:8e:bc:2a:
         b6:91:7e:5f:9b:79:06:fe:63:6e:e5:09:a8:f0:f1:9f:d0:f0:
         b4:64:ec:74:74:07:6a:68:86:6f:8a:7d:ad:e9:1e:cf:1b:13:
         fa:d5:50:ea:fb:33:f6:6a:6b:ec:b7:79:db:a4:30:ea:3b:b9:
         b9:10:77:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 12:39:42 2025 by rpki-client