Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9ad2416f-6539-3ef4-9992-d4de90c820d7.roa
File:                     9ad2416f-6539-3ef4-9992-d4de90c820d7.roa (raw, json)
Hash identifier:          3pq+71dXoiacS4VldeFe4h20DLJvPBz7cif23B3qNjY=
Subject key identifier:   21:0C:90:C9:B5:CF:CF:AB:47:EA:60:E4:53:4C:50:7D:3D:F2:9B:49
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285849F17FF1358C9E6BB948F5FC80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9ad2416f-6539-3ef4-9992-d4de90c820d7.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     397220
IP address blocks:        156.154.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:f1:35:8c:9e:6b:b9:48:f5:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=7287789c-d77c-4763-bc94-1c30bc63d611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7b:f5:a7:29:57:80:0c:61:9d:7c:59:7c:75:
                    87:82:9a:f0:d9:ba:77:a8:34:e5:a8:3a:a7:5f:be:
                    ac:25:8f:bc:cc:2f:68:35:51:17:f6:08:23:95:18:
                    bd:22:1f:38:a6:f4:7e:dc:3c:6f:59:54:68:62:1a:
                    96:bf:1f:ec:93:71:9e:32:c0:26:13:ad:4f:ca:2b:
                    50:eb:05:b5:c8:84:b4:87:06:4c:43:e2:a1:81:70:
                    f3:52:15:34:47:1d:00:d1:7a:96:58:dc:6d:85:91:
                    b6:03:56:1d:ab:e8:c1:f3:70:9e:78:6c:59:c4:46:
                    0d:3c:a1:83:30:4b:17:d3:c2:7e:50:2d:85:46:fe:
                    bf:cc:64:52:21:e5:f3:ec:55:a0:fe:d6:bf:8b:50:
                    20:54:7c:76:04:c1:b9:ca:67:72:c7:01:b6:1f:53:
                    9c:7a:d2:97:4f:61:b0:b1:be:04:f5:bc:e6:db:f5:
                    ea:1e:9e:20:86:b6:8c:42:76:4d:14:0d:77:45:5a:
                    a3:ca:d3:34:ab:56:b1:9f:d6:f5:d2:f3:01:5a:c6:
                    1d:00:0c:a9:30:ae:49:28:e6:5e:26:6b:36:36:66:
                    bf:d4:22:a9:4e:54:62:57:00:9a:4f:34:99:2d:ad:
                    d1:12:09:9d:1a:30:f5:e7:50:65:2e:49:a4:c0:44:
                    85:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:0C:90:C9:B5:CF:CF:AB:47:EA:60:E4:53:4C:50:7D:3D:F2:9B:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9ad2416f-6539-3ef4-9992-d4de90c820d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:9b:db:32:5f:05:a3:82:9e:5e:b2:49:4e:38:23:a1:d5:f8:
         86:c1:55:fd:68:13:3d:cd:2d:37:d7:2a:9c:c3:e7:3e:fe:14:
         ae:0b:06:62:cf:c3:5b:ad:7d:e9:a3:5c:30:f9:e9:e7:46:6d:
         10:bf:5f:51:8d:34:0a:18:03:96:12:8d:9f:2e:5f:d6:06:a4:
         d9:53:c9:8d:e4:8b:d9:d2:3f:4f:77:fa:09:c2:e3:a2:a1:11:
         b8:e2:9a:09:ae:82:f9:3b:ab:92:67:3b:50:74:cf:ce:98:9d:
         96:c4:24:85:a5:8e:d3:1d:13:ae:bf:dd:6a:6c:8d:f5:fc:e2:
         b3:74:e9:19:58:c6:58:91:bd:47:92:4a:33:ae:58:e6:e9:13:
         39:48:76:ac:92:58:21:6e:e0:85:9d:d9:7b:61:68:9b:59:af:
         99:17:14:10:9d:d8:68:83:14:41:db:fc:5c:72:a9:d4:31:2f:
         91:3b:80:a5:83:ba:23:d9:e2:34:a2:53:87:6c:0c:88:ee:f4:
         92:f1:52:b9:96:5d:d1:52:91:c9:a8:c9:ac:3e:67:81:e2:97:
         2f:79:ea:5c:4d:08:7a:3d:db:80:d9:47:24:cc:fd:a9:c3:69:
         ac:e3:fe:cc:d2:4d:bf:7d:c1:f4:94:33:6c:83:e4:4d:f5:ec:
         7d:38:99:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 17:30:18 2025 by rpki-client