Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e410566b-6606-3c06-a8f2-3bd72a80ee5a.roa
File:                     e410566b-6606-3c06-a8f2-3bd72a80ee5a.roa (raw, json)
Hash identifier:          jVb/F+Pr37aiCQsQNA+L9hOBFTojDOdIe6FiY/lX/EE=
Subject key identifier:   C3:C1:68:BA:8B:7A:BB:7A:7C:3B:15:ED:B0:08:2D:AA:87:A0:15:C5
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584988CF5B2C5B1F800ABCBF2C00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e410566b-6606-3c06-a8f2-3bd72a80ee5a.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     397226
IP address blocks:        156.154.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:5b:2c:5b:1f:80:0a:bc:bf:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=95741630-bfe0-48e2-bd52-889d3741f393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b5:4b:f1:22:65:94:a5:e7:f1:c1:0a:fd:1e:
                    15:84:32:91:9c:1e:28:10:5a:93:2b:ff:22:88:9f:
                    b6:b3:83:81:f4:fc:17:aa:cf:47:1e:fd:61:26:3e:
                    8e:ef:5c:01:3e:71:71:72:2a:7b:da:9f:a6:e4:fa:
                    b7:0e:ca:a8:69:05:fe:33:63:c4:58:3d:29:ce:79:
                    65:8d:25:35:c6:97:d3:b2:28:95:91:53:93:1e:fe:
                    96:fa:dc:4f:ba:7c:fc:7b:c6:9c:c0:c8:84:e1:3e:
                    c0:38:3a:b7:1c:85:66:00:a9:26:71:c4:87:72:5b:
                    42:1b:c3:f8:c0:02:06:2a:51:2a:6d:a7:06:74:b0:
                    1d:51:36:92:0f:7e:71:19:eb:7e:a8:17:c9:0c:c0:
                    5c:16:c6:5d:72:91:74:c2:ec:fc:8e:40:9e:b1:3f:
                    14:1c:92:52:43:41:f7:56:d5:65:96:d3:a6:27:d0:
                    29:f8:78:ba:1d:e7:9f:03:16:02:b0:ee:ff:69:8c:
                    6c:5d:9c:6a:74:3e:e4:45:ab:b7:6b:06:40:f3:d7:
                    b9:ea:64:1f:c4:a6:46:88:0d:e5:dc:ef:3a:4b:76:
                    2a:fd:7f:b7:00:7b:6b:94:96:8b:f3:04:10:53:61:
                    e1:d4:77:b0:ee:e4:60:40:5e:ab:20:2b:64:60:5a:
                    99:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:C1:68:BA:8B:7A:BB:7A:7C:3B:15:ED:B0:08:2D:AA:87:A0:15:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e410566b-6606-3c06-a8f2-3bd72a80ee5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:ab:7b:6d:63:33:fc:e5:50:f5:27:e8:e4:7d:76:9f:51:3a:
         3a:9e:c8:48:de:2d:02:57:49:82:ff:9d:72:99:15:22:74:1a:
         26:0f:ee:6e:2f:07:59:5c:04:0f:d1:bb:4a:5c:ba:fe:0b:c0:
         53:20:5c:83:97:94:7b:cb:b4:c6:7c:fc:0e:16:d0:8b:0e:bc:
         a6:0b:19:52:2b:cd:d7:ee:45:62:26:09:88:bd:d1:6b:6a:84:
         74:8a:6c:c2:9b:3a:8c:14:2f:ee:d0:6d:39:01:68:91:c2:16:
         73:fb:bc:65:ab:c5:37:d1:20:78:02:73:12:05:b3:72:70:d7:
         0a:d8:10:14:bf:93:46:78:c2:11:79:4e:ee:2b:a7:9c:81:31:
         37:14:34:57:dc:0c:e5:17:9c:1c:9e:e0:52:f3:8e:82:9f:d1:
         9e:5e:4c:48:ca:c8:76:68:77:a6:da:bb:ae:1b:0c:13:d4:60:
         3d:bd:ce:ca:ff:22:2b:64:ff:39:47:bd:70:48:96:b5:40:83:
         0f:02:51:ff:d4:ec:3c:fa:d8:69:4e:1c:fe:8e:66:ef:d0:8d:
         de:81:93:6b:ce:3c:2b:2b:de:d6:ed:e4:86:d4:dd:f0:fe:77:
         76:c4:c2:dd:54:66:fc:80:c0:4a:f3:c4:44:78:ee:dc:82:93:
         57:4b:1b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:42:59 2025 by rpki-client