Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a6bdd95f-bd52-3f15-8267-48c03a7305f2.roa
File:                     a6bdd95f-bd52-3f15-8267-48c03a7305f2.roa (raw, json)
Hash identifier:          K/RDUbDmjw20AD8A6W1yKevPzOBZnT4Fju2mE76v67w=
Subject key identifier:   6F:BA:3B:4A:34:98:E5:63:53:C7:4F:0F:18:B3:0A:A0:47:52:66:57
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858499C5A01722A78E03FFF317600
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a6bdd95f-bd52-3f15-8267-48c03a7305f2.roa
Signing time:             Tue 22 Apr 2025 13:01:00 +0000
ROA not before:           Tue 22 Apr 2025 13:01:00 +0000
ROA not after:            Mon 21 Jul 2025 13:01:00 +0000
asID:                     397228
IP address blocks:        156.154.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9c:5a:01:72:2a:78:e0:3f:ff:31:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 22 13:01:00 2025 GMT
            Not After : Jul 21 13:01:00 2025 GMT
        Subject: CN=40541083-95f4-4026-898c-3d407d1672ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:85:86:40:ed:85:80:3f:ae:b8:27:49:05:6c:
                    3e:10:d5:3d:37:84:47:d7:24:79:b8:db:05:3e:50:
                    84:1c:07:e9:82:e5:e9:12:dc:03:d4:14:30:8f:62:
                    67:a6:39:12:f9:c0:db:54:19:05:e5:c1:80:e4:24:
                    67:00:a8:c6:df:ab:39:00:e0:17:99:91:67:98:77:
                    00:98:86:d9:54:e5:e1:3e:aa:14:4c:e3:8d:ad:b3:
                    96:09:ac:e8:ec:b0:fa:06:7a:52:bc:61:c1:8a:94:
                    49:27:8f:ad:50:95:84:88:d3:e2:2d:e5:c0:02:c8:
                    fa:5d:23:32:2d:d6:e2:c6:12:7b:4b:d2:0a:47:15:
                    25:8b:23:8b:16:b1:55:7c:5d:ff:af:32:52:1b:28:
                    e8:4b:42:a7:4e:29:13:47:43:9f:ce:2d:d6:9d:6b:
                    5a:7e:b9:00:71:47:28:99:af:4d:0a:73:89:1a:a0:
                    3d:87:19:ee:49:65:d9:bd:f3:f8:50:65:18:45:58:
                    85:04:f6:19:29:0a:3c:b5:d1:0d:8d:bc:8e:79:a6:
                    79:82:34:25:f1:fe:f4:60:a7:14:5f:f7:fc:01:eb:
                    f5:14:5d:40:f1:a8:7d:8c:67:d9:f6:c4:92:df:40:
                    a4:0a:0d:bc:06:d5:2f:0c:52:e4:97:d5:e2:57:d0:
                    e2:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:BA:3B:4A:34:98:E5:63:53:C7:4F:0F:18:B3:0A:A0:47:52:66:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a6bdd95f-bd52-3f15-8267-48c03a7305f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:6f:fb:8c:44:b1:88:d7:48:95:37:43:dd:71:cf:68:03:c7:
         36:88:e7:8e:63:fa:29:34:40:d5:17:a3:fd:63:cc:17:ea:d7:
         70:40:47:5e:df:8b:95:cc:13:53:fb:2a:b8:ae:6a:85:4b:09:
         05:73:1c:a1:52:3e:14:cc:43:84:ca:81:ac:60:c5:30:c4:cd:
         f6:61:ac:ba:1f:14:88:e7:de:63:36:07:be:bf:c3:d9:1f:a6:
         9e:51:fd:c4:db:d5:19:9e:df:d2:4c:a7:f6:5a:be:32:d9:9e:
         75:09:d3:f9:9b:2f:ea:02:f7:ba:0f:1d:e4:07:4f:d3:c3:e6:
         15:86:62:ea:82:f8:89:a7:a2:e8:3b:b7:a4:25:21:9b:6c:fe:
         bf:dc:0f:b4:3c:d1:4e:6a:5a:50:e2:a6:d5:0d:e8:02:c8:b8:
         32:91:20:9f:21:3d:c4:1e:8c:0e:11:e5:42:58:38:b8:cf:bd:
         17:5e:a3:4c:b7:19:25:68:77:74:38:58:87:6d:09:a4:c3:b9:
         f7:2f:f5:85:49:ff:87:3e:34:d3:09:9c:94:ea:4c:5f:c8:c8:
         52:ee:2b:fd:a5:4d:1f:73:df:19:fb:55:da:39:c5:db:60:fd:
         3e:90:f2:25:c1:aa:81:a3:46:5b:be:b5:84:56:36:1c:b6:89:
         41:04:c1:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 21:03:22 2025 by rpki-client