Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/70ffc9cd-c3df-339c-a03e-3bb3ee122156.roa
File:                     70ffc9cd-c3df-339c-a03e-3bb3ee122156.roa (raw, json)
Hash identifier:          +uhy2tu37E9uMjDnEtjQm/Uf/8uIqmFneIWUtjvbzE4=
Subject key identifier:   5D:55:11:9E:30:5A:4B:DE:AC:81:C3:C2:50:DC:F0:5B:46:6E:B1:CC
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285849B05DD57D37D97E9A2683DBC0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/70ffc9cd-c3df-339c-a03e-3bb3ee122156.roa
Signing time:             Tue 29 Apr 2025 17:05:09 +0000
ROA not before:           Tue 29 Apr 2025 17:05:09 +0000
ROA not after:            Mon 28 Jul 2025 17:05:09 +0000
asID:                     16552
IP address blocks:        156.154.37.0/24 maxlen: 24
                          2610:a1:3010::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b0:5d:d5:7d:37:d9:7e:9a:26:83:db:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 29 17:05:09 2025 GMT
            Not After : Jul 28 17:05:09 2025 GMT
        Subject: CN=7575db03-016f-4474-a09b-465335a5bb39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:8e:28:61:ec:f6:38:ce:4d:72:6e:75:c7:d0:
                    fb:1a:5b:00:75:9d:b2:1f:80:3d:e4:c1:ce:a9:5c:
                    ec:a3:1c:56:9d:77:be:51:24:d1:7f:ce:3f:25:91:
                    eb:aa:2c:ba:4f:d2:1e:8c:de:d4:6f:8f:9a:6b:84:
                    6e:72:7f:d4:8d:94:ab:c3:75:28:9f:4a:b5:6f:59:
                    a8:22:5d:37:2f:81:d8:8f:ff:63:39:e9:a4:c6:a4:
                    0b:c9:17:02:9d:e2:8b:fb:d3:7a:38:a3:a0:39:d8:
                    bd:2f:84:c2:03:98:32:65:da:0f:1b:21:5e:c3:b9:
                    f8:80:8d:c4:2c:2b:1c:e5:38:b2:6c:43:ad:ad:47:
                    e9:eb:3e:5d:f6:f4:c3:e1:c1:2d:31:2e:57:f7:75:
                    d3:21:41:bd:b6:8c:38:ae:76:d9:04:68:1c:84:52:
                    16:c5:43:84:7b:09:6b:c9:fd:17:75:97:49:1e:dd:
                    92:9d:19:bd:d5:96:ca:ea:96:a6:89:8d:06:53:4a:
                    70:00:05:11:a4:be:19:6f:df:c7:15:ab:6d:af:9c:
                    44:78:cd:56:6c:54:f9:ef:02:0f:27:42:a4:30:75:
                    28:b6:80:7d:57:9a:25:c3:b3:6f:62:85:6e:7b:4c:
                    5d:77:d0:de:f8:da:97:d0:7c:87:4d:a9:7a:89:59:
                    2d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:55:11:9E:30:5A:4B:DE:AC:81:C3:C2:50:DC:F0:5B:46:6E:B1:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/70ffc9cd-c3df-339c-a03e-3bb3ee122156.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.37.0/24
                IPv6:
                  2610:a1:3010::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:7d:e2:73:71:81:7c:45:cd:da:f2:1b:34:6b:53:2d:1c:f8:
         7f:ff:e5:8d:7f:0e:3d:43:12:5f:ab:b2:5d:53:35:c7:fa:b5:
         3d:16:f7:99:5f:13:82:15:bd:58:fa:d3:79:a3:bf:d3:f4:56:
         49:d5:72:a5:87:d0:78:d0:b5:a9:04:e1:49:0e:90:51:6f:ca:
         88:cd:ae:f4:66:18:45:50:90:ef:c4:5c:68:83:9f:21:91:fa:
         20:00:71:e2:bd:76:09:99:f3:ec:21:b3:cd:ed:04:86:57:8f:
         af:d1:71:dc:df:77:0c:07:ef:97:39:c1:4c:15:82:5b:3e:aa:
         72:5a:02:aa:15:92:0c:c0:24:96:7a:9d:bb:9d:4c:c0:fb:5e:
         86:f3:be:ef:e0:68:29:97:56:19:ca:62:f7:7d:91:db:41:de:
         ad:b0:d1:4a:14:9f:9b:3d:ca:c7:cf:9d:44:e0:d7:c0:37:39:
         f9:66:89:c1:70:4e:47:f9:5e:fb:2c:04:91:00:c2:d0:4b:b9:
         89:cd:fd:0f:f7:35:97:8b:4e:39:af:dd:30:80:b9:20:36:30:
         20:71:7b:de:65:13:13:40:f5:7d:a7:72:31:c1:63:ed:d5:f5:
         2b:06:c2:82:b8:c7:11:ce:59:53:56:b0:8f:2f:1f:de:8e:f2:
         ca:ff:aa:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 14:33:59 2025 by rpki-client