Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8600a6b6-d584-3478-847b-f3010f754ac3.roa
File:                     8600a6b6-d584-3478-847b-f3010f754ac3.roa (raw, json)
Hash identifier:          9DDV1QW1M6YP0UYv+sHZSe9wFNFOPueq0vjq+Dg24/o=
Subject key identifier:   93:46:58:AE:53:18:8C:6A:4F:EF:90:CB:8A:0F:AA:D0:8C:1E:E0:36
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285849F17FF658207763B32F6B6A00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8600a6b6-d584-3478-847b-f3010f754ac3.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     397241
IP address blocks:        156.154.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:f6:58:20:77:63:b3:2f:6b:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=2289fe9f-654e-4dca-9fc0-646384c1d6d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:db:85:f8:02:94:ba:cc:ce:be:86:a1:46:9a:
                    d9:ca:d5:18:68:c8:2d:e6:0d:03:56:6a:5c:33:ae:
                    a0:bd:92:47:93:86:26:f2:6e:bc:ae:ed:8b:9e:5c:
                    a6:df:ac:25:90:68:90:b5:d4:24:02:81:3d:6d:0b:
                    65:4f:ef:61:a0:c1:87:39:98:7c:ad:80:cf:6e:02:
                    a6:49:e3:d2:45:e9:00:81:72:8f:20:a9:76:c9:f8:
                    55:f0:6c:2d:c0:cb:0d:db:39:f7:20:cf:9c:6f:0a:
                    43:18:b7:e2:d4:36:54:3f:f9:b0:07:56:13:ee:c2:
                    3c:a1:92:03:86:a1:52:91:d6:df:c2:f2:93:e1:be:
                    98:f2:bb:5f:ab:98:6b:8b:cd:ec:92:f4:20:be:e8:
                    b9:b1:01:a3:af:6c:24:a9:b3:ca:c3:66:3d:f3:44:
                    46:c5:b5:ef:ee:ba:5d:64:47:31:99:c4:6a:fb:7d:
                    27:56:f8:3f:5a:d4:9e:e3:4a:5d:58:9e:5e:48:91:
                    b6:cc:ab:00:96:1c:b9:4a:35:be:38:44:0c:82:ba:
                    a6:9b:e4:72:6e:74:5f:d0:44:91:15:dd:0d:89:3d:
                    f4:56:f1:b2:7f:94:70:6b:e5:13:99:88:38:f9:43:
                    62:d8:68:03:32:3b:e6:34:48:1c:13:31:31:fc:66:
                    9a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:46:58:AE:53:18:8C:6A:4F:EF:90:CB:8A:0F:AA:D0:8C:1E:E0:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8600a6b6-d584-3478-847b-f3010f754ac3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:d9:f0:a6:a3:32:c1:0c:63:f1:b4:0d:05:e5:d5:ba:09:2c:
         05:72:ac:01:c4:d0:db:98:b3:76:35:35:8e:36:d2:d1:d4:33:
         6f:f8:d3:a6:84:78:00:98:39:a8:09:66:a2:64:59:29:63:e1:
         bc:15:1e:a6:44:e3:93:6e:25:d6:a3:80:20:9b:3f:0c:0f:ec:
         e2:44:f3:e9:ac:dc:d6:58:2e:4c:f7:4b:e9:6e:91:8c:fc:a4:
         42:81:07:80:75:84:c8:ab:fc:89:6c:1b:09:73:f2:18:44:1b:
         61:29:4a:db:f0:5c:11:bd:dd:6a:6e:4b:8b:f8:3a:45:ae:ed:
         01:93:94:08:19:f8:7c:08:a9:fd:6d:62:4b:93:23:19:c1:52:
         5d:de:2f:56:21:ed:5a:6b:9c:64:a6:01:42:85:97:6d:5b:97:
         d7:e5:1e:92:9b:1f:a9:87:67:2f:5c:5d:a5:38:e6:21:5b:0d:
         1e:3f:af:53:e0:b2:91:28:74:a9:18:7e:ab:ef:2c:c1:27:26:
         aa:f8:d5:ce:e7:80:0c:b3:f5:7d:8d:02:7c:b3:ca:cf:06:fd:
         62:5a:ff:38:a0:9e:ad:19:bb:ba:5f:2e:a1:08:57:7b:6b:b1:
         e4:b7:7a:c4:69:53:c1:66:4a:f2:66:8d:50:1d:f0:2e:c7:c7:
         31:e3:fd:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:34:02 2025 by rpki-client