Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/df40897c-a253-34b6-b216-6281b98bb00e.roa
File:                     df40897c-a253-34b6-b216-6281b98bb00e.roa (raw, json)
Hash identifier:          COHa0Fn+bBbqVWlZYl800dYIt4nHe6J3loVUeILF3KY=
Subject key identifier:   D0:25:1E:DA:48:31:B7:44:C1:74:BB:09:91:74:1B:0B:26:C9:ED:ED
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A4F05DD3C48D73DB3D41BB400
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/df40897c-a253-34b6-b216-6281b98bb00e.roa
Signing time:             Wed 25 Jun 2025 13:01:04 +0000
ROA not before:           Wed 25 Jun 2025 13:01:04 +0000
ROA not after:            Tue 23 Sep 2025 13:01:04 +0000
asID:                     397216
IP address blocks:        156.154.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4f:05:dd:3c:48:d7:3d:b3:d4:1b:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jun 25 13:01:04 2025 GMT
            Not After : Sep 23 13:01:04 2025 GMT
        Subject: CN=8c681668-dbbb-419a-854a-5a7011b70cb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:57:e7:1e:69:fa:ce:b7:ed:84:d3:9f:59:89:
                    c9:f5:10:d5:55:3d:1f:f4:ea:ec:b2:77:44:6e:77:
                    9a:b7:b4:81:eb:e1:f6:0c:de:21:98:3d:0e:d2:67:
                    52:0d:1e:0f:7b:8f:a9:17:77:de:c0:2a:64:34:ff:
                    a3:a4:37:96:c9:c9:34:03:1e:7f:19:48:1d:45:e7:
                    42:71:77:79:e0:7f:83:00:e4:b4:b1:e6:66:f1:39:
                    ea:6f:b2:8c:34:59:cf:47:7f:74:f9:73:0b:3f:1c:
                    38:e6:e9:2f:78:57:1e:bd:48:a4:69:79:3f:3e:ca:
                    fe:47:77:3a:cb:59:d5:63:bf:d8:67:cf:6e:da:a7:
                    cb:c1:28:2d:02:c6:e6:80:57:9e:cc:b1:12:23:9c:
                    19:93:76:d7:7f:a3:e7:93:98:45:6a:ee:67:0d:a0:
                    79:17:8a:0b:ce:1f:80:86:7e:2c:4a:df:1c:08:a4:
                    52:39:26:97:7c:9a:68:3b:64:3c:1a:d3:7d:11:fd:
                    be:c1:8f:dc:75:8b:d3:2b:09:f5:ae:c2:1e:b2:d3:
                    dc:78:50:2c:bb:37:64:30:cd:f5:61:43:d8:c2:a1:
                    d6:f9:4e:da:3e:a6:9f:70:e3:35:de:15:4b:29:d6:
                    6e:db:1b:d0:75:8e:d0:56:96:18:d0:49:82:f2:3b:
                    13:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:25:1E:DA:48:31:B7:44:C1:74:BB:09:91:74:1B:0B:26:C9:ED:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/df40897c-a253-34b6-b216-6281b98bb00e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:b5:ef:ce:ac:06:d5:b3:71:e6:f9:e0:94:a0:6d:32:fd:19:
         47:6c:8c:28:a7:47:df:0f:68:20:a7:77:84:ec:ab:26:0f:d9:
         51:5d:ba:9c:61:55:b1:6b:a0:c7:c9:07:fa:0c:d6:ae:cb:36:
         db:fc:25:e1:23:b4:4f:b1:0d:fc:fa:f3:6b:33:d7:10:5c:1a:
         f5:5c:09:fa:96:e0:74:ad:47:d5:54:b1:fa:16:94:52:9e:f1:
         49:f1:25:5a:9d:d9:3a:1e:50:3e:58:b2:ee:ec:7c:43:b2:d8:
         f7:91:96:08:c5:c5:2c:e5:f4:4a:c8:ed:4e:2a:87:5c:29:e3:
         83:29:d9:09:28:9a:08:9e:93:f4:27:99:af:d4:3a:7f:53:74:
         cd:26:63:cc:2e:07:7f:b5:1a:63:dc:e4:74:ca:e7:2a:92:4c:
         1f:38:70:fc:66:64:54:46:ef:65:78:74:7d:ed:e7:48:c4:32:
         f1:b5:9b:fa:93:cf:37:2b:44:93:8c:57:7b:c2:76:0a:a4:b5:
         5b:7e:11:a2:b2:a0:67:f2:7f:34:42:f8:d1:c0:d6:89:d7:c7:
         4b:72:73:3e:8a:aa:ae:12:2d:45:a3:b0:59:31:b1:e3:d9:94:
         bc:e1:cc:54:2d:11:25:24:87:39:fb:e5:64:d3:1f:8d:f7:18:
         61:28:47:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 08:15:40 2025 by rpki-client