Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c5cb91d4-a957-3b1a-8ec8-4c438772fe80.roa
File:                     c5cb91d4-a957-3b1a-8ec8-4c438772fe80.roa (raw, json)
Hash identifier:          +owjRWJEsC7k0vmnng9EIEy5bU62wba7s2Oc+PNrASc=
Subject key identifier:   F7:F1:02:6E:25:CE:14:8A:D3:00:BB:93:F2:1D:C4:28:8E:1B:C3:ED
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584988CF4F3123CAE92CD6A45380
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c5cb91d4-a957-3b1a-8ec8-4c438772fe80.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     397222
IP address blocks:        156.154.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:4f:31:23:ca:e9:2c:d6:a4:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=063d797e-58ca-4a7d-aaa4-b86cc07818b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:01:1d:db:83:a7:54:51:f0:4a:ac:17:d5:bc:
                    b6:c8:98:31:e0:e2:98:5b:cb:a7:03:8d:07:27:a5:
                    40:f5:09:0d:9c:d7:c7:c7:0c:ee:5b:58:b6:5b:e4:
                    1f:d1:1b:20:f3:a1:9e:7a:21:52:7a:df:b7:ff:f3:
                    be:fd:aa:56:db:00:de:4e:4b:42:a3:72:67:62:13:
                    8d:85:54:59:f5:00:5b:11:a7:c8:ae:04:31:18:d0:
                    e9:47:bf:28:d2:79:94:4d:e6:e1:1c:54:79:53:2b:
                    5f:90:f4:d4:31:4b:02:3c:98:54:79:09:a1:de:f2:
                    53:7f:3d:6c:88:b8:45:e5:34:5b:5a:f7:71:30:39:
                    5f:de:52:0c:4a:f4:2e:1a:b9:9c:50:cf:eb:f1:f9:
                    b6:33:97:3c:3e:9b:82:4a:f0:88:58:d0:94:bb:74:
                    8b:fd:bf:c9:81:b5:7b:45:bb:b7:94:9d:10:0c:9a:
                    49:35:0a:55:dc:41:0c:21:eb:05:31:e7:ec:e0:d1:
                    23:95:11:ee:be:4b:d5:59:98:0c:5e:65:0d:7e:a0:
                    a2:c7:97:53:fe:21:bc:a3:28:f1:ed:36:89:db:23:
                    76:61:6b:53:3d:5d:5c:bf:11:7e:1f:6c:99:18:bf:
                    2f:7d:1f:7b:13:f1:c6:6c:ad:54:a9:b8:1b:c1:19:
                    c1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:F1:02:6E:25:CE:14:8A:D3:00:BB:93:F2:1D:C4:28:8E:1B:C3:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c5cb91d4-a957-3b1a-8ec8-4c438772fe80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:ad:00:81:9a:c6:a0:f4:51:41:7d:7b:25:71:44:fd:5f:66:
         34:88:44:16:09:46:42:23:29:78:42:a7:8f:57:b3:8d:92:04:
         00:17:61:6f:5d:ae:9d:3b:12:56:ec:0d:77:b5:e9:87:af:21:
         48:ee:7c:25:41:da:d7:9d:c0:62:73:44:6a:51:49:f5:ce:44:
         69:1c:d4:87:02:01:a0:dc:6f:c6:06:b7:92:be:fb:ab:5d:37:
         24:66:4a:00:d4:c3:72:62:3a:e8:36:f8:84:32:3d:d1:83:26:
         e6:a6:07:b4:e1:0d:d3:27:5c:2c:e9:1d:4c:07:9a:c6:34:2f:
         d2:b4:79:7f:30:14:24:dc:9d:0e:b4:b7:bd:c5:a9:db:9a:95:
         93:0e:37:66:0e:4f:69:9d:d1:07:a8:46:d6:ce:66:ae:70:fa:
         10:a0:2e:55:8f:c0:16:23:f7:2d:d7:9e:f0:f5:c1:14:5e:8a:
         a5:f8:92:39:a6:b8:d9:98:f3:7c:ce:b3:ff:36:c5:56:d9:98:
         2c:e7:7b:85:79:a9:d3:ab:12:20:ba:e0:d6:0f:14:54:56:77:
         3c:45:1d:96:c6:20:5e:56:16:c9:69:5f:2a:d6:71:11:8b:5a:
         b3:80:86:43:37:5e:56:f4:9b:3d:dc:35:2d:27:36:cf:7c:5d:
         82:b2:ed:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:00:34 2025 by rpki-client