Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3347d88d-a367-3c94-bcfc-0693b3da6604.roa
File:                     3347d88d-a367-3c94-bcfc-0693b3da6604.roa (raw, json)
Hash identifier:          GEwyh3MnZlSw9/XXr5/5WZTPWePtUVfquG379/rMtWc=
Subject key identifier:   60:8B:24:78:F6:65:E3:E5:1E:F6:8E:0E:7C:90:A2:8A:1E:A7:26:29
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858491246DA250E14B552FC8333E0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3347d88d-a367-3c94-bcfc-0693b3da6604.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     397228
IP address blocks:        156.154.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:da:25:0e:14:b5:52:fc:83:33:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=7c90442b-1566-41b2-af24-430ad9373da3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:78:0b:ef:02:81:8c:b7:36:dc:44:64:29:64:
                    43:27:b8:9c:0a:10:51:b1:f5:e6:55:f3:20:e7:67:
                    4a:a5:6a:33:69:79:70:9d:ed:0c:c0:34:b6:62:6d:
                    1c:13:35:43:34:42:38:d2:62:22:3b:5d:77:01:91:
                    e5:b2:db:fb:e7:53:2a:ce:1b:83:3e:17:1d:45:cc:
                    0d:ae:cc:49:b2:10:f6:28:2b:e4:38:db:aa:b1:35:
                    6e:39:c5:94:27:d8:99:4d:94:ec:d3:0d:68:88:6d:
                    c6:81:f3:8d:f5:e9:7f:e5:7b:b7:b9:4a:7e:63:94:
                    ea:1a:44:ed:9d:a8:4d:af:87:35:d4:84:22:f1:80:
                    1b:58:e8:f3:85:3e:7b:aa:b0:03:af:d9:4a:a1:5a:
                    36:c8:44:1c:ee:8e:9f:d7:e9:5c:32:de:0a:ff:fe:
                    44:6b:b9:d5:29:3d:6d:49:1f:67:31:60:c9:f1:16:
                    9f:2d:69:5e:ad:ae:ab:1d:2d:36:7e:e6:d1:ed:36:
                    26:df:44:56:31:71:29:97:e0:c7:62:96:8b:2e:94:
                    f6:0d:51:9c:f1:ab:a5:ad:9d:18:46:7b:71:64:74:
                    a7:72:69:df:da:19:b7:2a:1d:be:87:15:ab:da:19:
                    06:fa:d5:e7:a7:f6:4f:56:d0:59:a8:53:82:67:42:
                    c1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:8B:24:78:F6:65:E3:E5:1E:F6:8E:0E:7C:90:A2:8A:1E:A7:26:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3347d88d-a367-3c94-bcfc-0693b3da6604.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:cd:e6:e6:eb:c7:02:53:ec:8c:23:9c:16:92:b0:ef:77:c6:
         13:13:c2:13:40:7b:cf:57:09:70:31:08:69:8d:94:49:13:99:
         a2:8d:3e:c3:7e:c9:e4:ea:d6:9e:a4:df:3d:ef:cd:5d:c8:79:
         13:d5:3c:20:77:2e:6b:b7:88:4c:e7:0b:37:47:c5:89:cd:86:
         42:8e:c8:04:38:a3:c9:f5:aa:8f:f2:56:5a:d8:e0:ea:e8:cd:
         7b:7a:db:92:e7:94:8f:9d:4a:6c:22:58:c1:70:a8:5e:37:c6:
         18:5d:e7:05:8d:d3:76:bd:59:9b:a4:36:a5:22:8b:c0:04:96:
         13:45:df:3e:65:4b:5c:e9:b2:a1:58:ab:f7:5e:56:41:f2:7f:
         54:90:87:b9:8f:39:98:de:1b:99:15:90:e4:1b:fa:9d:71:8f:
         f2:ad:51:ad:48:39:57:fa:95:ad:a9:1b:9d:77:c2:7b:52:e5:
         02:3d:29:1f:51:e4:7e:b8:a9:49:3b:ed:8a:f2:63:b0:95:9d:
         40:eb:a2:42:56:2b:5f:e1:8c:a7:f3:58:36:d6:44:04:6e:3f:
         ea:ba:47:61:9b:e3:35:86:51:5e:91:3f:78:be:72:d2:d2:c6:
         29:ea:c5:aa:0f:2c:69:ec:10:39:00:08:f1:5e:1f:49:f8:5d:
         79:f9:ef:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:37:32 2025 by rpki-client