Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/32ac1cc7-2d5e-3d24-93c5-08369eeb015d.roa
File:                     32ac1cc7-2d5e-3d24-93c5-08369eeb015d.roa (raw, json)
Hash identifier:          QgCq7W6Xfn014He8GtuYD0nt1L5tnH+ooPtI5KFYmcI=
Subject key identifier:   DB:6A:6C:AF:7D:8D:A0:44:2B:AF:AF:9F:20:5B:03:60:2F:F5:02:F4
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858492CB1410890BFA6E484F1CC80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/32ac1cc7-2d5e-3d24-93c5-08369eeb015d.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     36236
IP address blocks:        156.154.150.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b1:41:08:90:bf:a6:e4:84:f1:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=6419dc91-389f-47da-82cf-a0b23682a51e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:66:a8:08:f6:fa:10:1e:2e:1e:f6:42:ce:09:
                    cb:f2:45:22:a3:bc:ad:d7:9a:78:d7:bb:1d:b9:c6:
                    3d:b2:35:ac:e8:fd:49:73:30:90:c1:78:bd:9a:ad:
                    0d:1d:93:9e:83:a1:bd:5a:ad:9b:c5:64:7b:63:b8:
                    59:06:d7:3b:98:9d:9e:fb:53:7d:54:44:3e:ae:e5:
                    89:90:97:7d:04:fc:79:f8:de:5e:af:24:d4:a0:80:
                    03:87:3b:8a:68:82:8c:f7:9f:ad:fb:4b:cf:71:74:
                    f7:84:ff:43:19:ca:bb:73:6c:8c:91:91:c5:a2:25:
                    32:c3:fc:9a:d9:11:8d:17:78:88:8a:eb:70:08:c0:
                    bd:f5:f3:55:37:e2:02:33:1a:7a:8a:23:d6:8b:d0:
                    4d:e0:5c:a7:8e:d1:27:b4:04:9b:79:90:96:69:52:
                    79:26:9e:96:26:61:99:ea:95:29:55:99:65:45:4e:
                    7a:b0:f0:80:92:ad:15:9e:38:57:cd:9d:a9:9d:3d:
                    38:8a:31:22:bb:ba:ba:d0:82:f2:a8:5f:a9:45:9e:
                    4c:df:c2:2b:f5:fe:7f:c1:6d:aa:9f:6d:b0:21:d5:
                    a4:64:fa:f1:1a:94:22:da:e0:02:4c:d0:4d:86:6e:
                    c0:fe:82:2e:5a:58:cf:20:f3:fc:07:04:b9:b0:79:
                    ac:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:6A:6C:AF:7D:8D:A0:44:2B:AF:AF:9F:20:5B:03:60:2F:F5:02:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/32ac1cc7-2d5e-3d24-93c5-08369eeb015d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.150.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:58:62:f1:e2:1c:22:5d:9a:4b:4e:12:01:13:8c:8e:b8:84:
         be:76:92:d0:18:f9:1f:e8:51:f6:dc:2f:e3:d6:4a:96:d7:ef:
         62:6c:dd:48:ea:0a:d3:34:83:90:d3:bd:e9:c9:92:bc:2b:ed:
         bc:db:da:f6:9d:25:d2:7a:56:b9:bd:62:d7:c8:4c:66:f7:63:
         ae:91:7d:29:39:74:de:42:26:ac:9d:f6:de:90:f9:0c:bd:83:
         ee:28:e3:0c:3b:0a:f7:75:e8:bf:62:f2:1a:a7:b3:87:52:da:
         99:74:8a:2e:4c:5a:47:45:97:9f:b9:bc:4a:d4:9a:54:15:a2:
         5c:0d:f3:bd:e5:3c:11:0e:5e:98:5f:33:5e:b8:55:42:38:06:
         9b:e5:05:9c:77:08:b7:ac:db:b5:2e:fd:a5:dd:35:10:54:79:
         12:33:ff:90:e6:94:8e:43:d6:a2:fc:f7:8a:7c:89:6a:16:d8:
         7b:1f:9d:c7:b3:4e:fe:f9:e2:15:a9:95:83:b0:7f:b6:5e:c6:
         ad:68:65:00:7a:80:f4:88:08:bf:2e:13:58:fa:22:78:ad:db:
         e1:5d:05:85:67:0c:2e:9b:d9:2f:96:01:60:f1:c2:1e:87:a1:
         71:c0:44:c9:8d:5e:f4:0a:a2:6b:ef:80:1b:db:6a:46:ab:2c:
         e5:82:f0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:04:54 2025 by rpki-client