Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/293673a8-9d67-381a-9fbc-ddc621ad7393.roa
File:                     293673a8-9d67-381a-9fbc-ddc621ad7393.roa (raw, json)
Hash identifier:          8zwjBE0u9vMqKCoYqpDgrK2AIxn1ASJAVSACjm8I2gI=
Subject key identifier:   CF:31:83:68:8C:09:E9:BC:07:EA:C0:44:9B:0C:7B:7D:D4:0B:A6:A8
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285848BD21004D80753D0751D7DC40
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/293673a8-9d67-381a-9fbc-ddc621ad7393.roa
Signing time:             Sat 01 Feb 2025 14:00:51 +0000
ROA not before:           Sat 01 Feb 2025 14:00:51 +0000
ROA not after:            Fri 02 May 2025 13:00:51 +0000
asID:                     397223
IP address blocks:        156.154.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bd:21:00:4d:80:75:3d:07:51:d7:dc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Feb  1 14:00:51 2025 GMT
            Not After : May  2 13:00:51 2025 GMT
        Subject: CN=87cbfe84-6003-4a82-9487-e7b38375ba22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a7:33:64:1e:97:2a:98:cd:0d:8b:d6:50:df:
                    e3:10:d2:57:8b:33:45:6b:f1:d4:2b:39:f5:c4:18:
                    13:58:9a:34:53:be:23:f2:60:5a:a0:b7:b5:29:72:
                    b7:2d:34:eb:01:35:bb:41:44:2c:15:58:c7:2a:fa:
                    81:3c:f4:18:1e:9b:e6:20:d0:a5:48:b9:33:19:e8:
                    64:94:1f:d9:c1:78:69:8b:d5:ba:66:8d:27:ec:6e:
                    88:42:c6:ed:a5:8f:02:89:33:6f:2d:98:cb:26:f1:
                    15:bd:ed:2b:f0:a1:97:5a:82:f0:dc:0e:1d:aa:6c:
                    49:61:1b:5a:ea:68:b6:d6:32:f1:6f:b1:2f:bc:0e:
                    b1:c6:b2:f7:3d:b5:86:85:a5:4a:8b:8c:41:ea:62:
                    97:88:a3:86:0e:b8:46:f7:53:82:8e:ee:93:41:bb:
                    c0:b5:d9:5e:d4:8c:ee:55:2b:46:ad:a2:08:15:ff:
                    03:ca:79:bd:c9:a2:e7:80:14:f6:ac:c0:c0:2b:13:
                    ae:c4:4a:95:9b:ab:3a:16:a8:64:5e:37:33:bb:13:
                    be:47:f9:77:7d:be:da:60:45:f4:2c:7f:43:e5:fc:
                    96:0c:15:28:33:9f:4f:af:07:fc:37:a8:d5:73:6c:
                    9a:12:b9:16:e9:a8:8e:48:da:98:43:76:1d:2e:38:
                    bd:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:31:83:68:8C:09:E9:BC:07:EA:C0:44:9B:0C:7B:7D:D4:0B:A6:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/293673a8-9d67-381a-9fbc-ddc621ad7393.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:d6:a1:c4:16:d4:a9:de:21:5f:34:b4:35:1f:95:d7:7d:44:
         94:0a:73:db:40:c0:6e:51:71:0d:f8:91:13:b6:84:41:6d:00:
         e5:e3:73:5f:39:59:79:f2:2f:51:dc:31:37:50:05:dc:3c:b4:
         a6:43:bb:bc:13:d2:5c:2b:7f:17:34:39:08:1c:8e:c6:46:97:
         4e:47:b0:20:9b:4f:aa:58:fd:3d:80:58:dd:6b:0b:f0:46:d6:
         0a:c3:d8:17:61:9a:c4:ec:24:59:5f:0b:25:b6:98:6f:ee:92:
         d8:29:78:a7:aa:77:d9:f4:00:47:77:da:b0:f7:b6:1e:fb:cf:
         58:24:19:73:fc:f8:71:75:a4:f2:c4:90:e3:fa:fe:59:5d:1b:
         77:ce:0d:3d:9e:43:ba:40:5b:46:62:18:4b:b4:3b:8e:2c:ab:
         a5:4f:36:b0:09:22:45:8d:54:82:ee:1f:af:05:91:ca:1c:13:
         ca:ac:84:c3:66:06:a3:5a:0e:d7:35:7e:70:80:6e:84:27:f9:
         fc:fc:45:3f:2e:2d:e1:39:47:d5:94:ea:ab:48:f5:65:2e:32:
         70:6f:b7:eb:e2:32:ac:61:fb:15:7d:f2:4e:ac:d2:8a:0f:e2:
         d7:58:15:d2:c0:6f:f9:a1:35:cb:aa:48:9c:8c:22:38:01:ce:
         e0:b0:32:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:38:39 2025 by rpki-client