Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/05a706b3-8411-3277-801d-910a1f425519.roa
File:                     05a706b3-8411-3277-801d-910a1f425519.roa (raw, json)
Hash identifier:          z2BCzQ0dTMRAirs6oXcqHfatQRd0qEnhZB6c/pOoU3Q=
Subject key identifier:   09:CB:F4:C6:52:5C:76:66:2D:BC:3E:10:C2:3F:01:5E:4F:AA:32:1B
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858491246E7D4A992651B6151DE40
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/05a706b3-8411-3277-801d-910a1f425519.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     397215
IP address blocks:        156.154.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:e7:d4:a9:92:65:1b:61:51:de:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=c9508900-327f-4934-bc79-cb51353a289b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:58:30:b2:f3:af:56:15:65:ca:de:e5:be:70:
                    63:4c:59:70:13:85:88:d9:77:ea:84:31:68:b9:67:
                    34:5b:05:d0:b4:cd:9e:f6:74:dc:e8:eb:b9:63:2b:
                    cf:ed:7b:09:84:90:cb:44:98:80:51:51:7d:1d:82:
                    6d:8c:4f:ce:e9:e3:6b:6e:70:35:25:42:a1:14:92:
                    ff:30:1d:8c:db:44:93:d3:45:b9:a7:e6:a3:e9:c0:
                    d9:56:37:e7:01:5f:de:c0:40:ec:32:8f:ec:2b:df:
                    8a:42:23:62:14:cd:90:76:b4:0c:9f:7a:1c:e5:2e:
                    a2:f8:74:9c:5b:0e:88:d2:82:0a:30:94:b5:58:99:
                    72:01:f1:ed:b0:29:d2:49:be:4a:98:23:8c:11:c6:
                    73:61:84:2b:77:8c:a9:30:06:b6:67:d9:9d:f7:9e:
                    ce:af:65:93:e1:fc:e1:e9:4f:81:20:7b:ee:3f:16:
                    a6:dd:ff:69:bd:62:c3:a2:b3:d1:38:f1:5c:a4:24:
                    df:e6:2b:fd:a5:42:26:73:40:ac:c1:f4:e5:04:92:
                    db:88:91:9b:5a:1f:42:30:c2:4d:e7:e3:52:dc:6d:
                    6a:dd:0b:b6:7d:21:68:b9:73:b4:c3:c3:58:aa:ed:
                    20:e7:da:4d:aa:65:1b:21:f5:11:e5:63:1e:5b:cf:
                    46:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:CB:F4:C6:52:5C:76:66:2D:BC:3E:10:C2:3F:01:5E:4F:AA:32:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/05a706b3-8411-3277-801d-910a1f425519.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:3b:4e:46:c0:04:91:78:97:80:99:5f:c1:c0:d8:0c:27:d0:
         2d:60:56:7c:33:e2:f6:0f:91:9b:d1:58:bc:db:b3:17:1d:bd:
         a9:54:6a:5a:60:df:ea:2d:66:a8:78:af:50:2e:71:e9:1b:29:
         87:1f:da:b8:ea:85:ba:94:fb:f7:ed:8f:f4:49:57:86:01:dc:
         23:fe:b1:6f:6d:c6:87:3c:02:ce:c6:51:cc:c7:69:d1:e6:d5:
         1e:8f:4b:ba:f4:ee:39:75:5b:4c:dd:06:5d:2a:7e:72:be:33:
         af:8b:a4:f4:67:dc:be:b4:74:20:ba:6b:cc:79:c1:dd:35:1b:
         8c:f9:08:72:2f:94:b2:62:f9:30:60:48:e1:85:0c:d7:33:52:
         52:cd:79:aa:93:13:6f:30:5c:d4:e2:14:c1:f1:03:d4:0e:8e:
         e8:3d:35:bb:af:1f:9d:fd:20:1b:55:1a:08:17:1f:0f:8f:74:
         ff:2d:83:69:db:d6:4c:3c:a0:23:3e:b0:35:c3:ce:a6:b1:bc:
         9c:aa:c9:bf:b2:46:87:a3:78:74:c7:e7:aa:7a:fd:96:bc:00:
         86:b2:5b:9f:0d:ca:a9:ff:5d:4a:d3:6a:91:6b:e7:a8:58:de:
         2d:69:bb:dc:85:85:8d:81:d1:41:52:99:b6:7a:cc:1d:4e:08:
         89:9e:58:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:08:37 2025 by rpki-client