Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/51fd0d09-e12e-33f7-8298-e424d5c56b7c.roa
File:                     51fd0d09-e12e-33f7-8298-e424d5c56b7c.roa (raw, json)
Hash identifier:          0AIjoUQLxx/w71ykAlzqcwuwPEqmKRmgMZsxW+fKAzA=
Subject key identifier:   D4:0A:1C:0D:B7:C7:75:ED:1E:88:E2:08:FE:8E:20:F2:29:26:58:82
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285848A996571743C0F5DE41E328C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/51fd0d09-e12e-33f7-8298-e424d5c56b7c.roa
Signing time:             Sat 25 Jan 2025 14:00:52 +0000
ROA not before:           Sat 25 Jan 2025 14:00:52 +0000
ROA not after:            Fri 25 Apr 2025 13:00:52 +0000
asID:                     397242
IP address blocks:        156.154.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a9:96:57:17:43:c0:f5:de:41:e3:28:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jan 25 14:00:52 2025 GMT
            Not After : Apr 25 13:00:52 2025 GMT
        Subject: CN=f58295c1-056e-4163-8a04-123a1eaa0ba6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c7:78:e0:37:f0:1a:fc:bf:cf:7c:5b:74:cc:
                    a6:ae:1b:3b:68:fa:84:59:84:2a:b7:74:1e:70:17:
                    61:fb:39:6b:c9:65:37:46:0d:ac:ec:a3:4c:ec:e2:
                    b7:66:d0:f4:8d:07:97:c5:aa:62:5b:61:d4:a1:97:
                    47:cd:1f:23:2e:2d:56:14:b5:bb:12:ee:8e:8a:da:
                    ae:4e:f8:1c:c7:d7:7d:f0:91:8d:8b:27:8f:fb:ac:
                    0a:32:8e:c0:ec:e0:4f:ae:dc:f0:23:68:2f:12:42:
                    c7:65:ea:31:f0:d1:f3:43:98:e0:1a:85:23:1b:d1:
                    7f:5a:ac:95:d8:49:b2:39:5c:b6:bd:a4:b4:63:ac:
                    63:23:7f:cc:4d:33:8f:3c:90:8a:5a:4f:84:ac:d2:
                    42:2d:ca:08:29:b5:d3:f6:4d:6f:2b:99:06:2a:93:
                    48:a4:b2:3d:70:15:6e:23:4d:40:23:25:f4:67:05:
                    6a:c9:70:58:70:6e:97:19:26:27:5d:5d:66:28:5c:
                    ea:eb:95:f3:97:5e:8e:09:c2:50:c3:6a:34:27:68:
                    f6:46:74:62:34:3b:bc:7c:f9:70:13:15:4d:42:4b:
                    46:24:4b:4e:51:22:d3:5d:7e:f3:53:67:05:81:e6:
                    4a:3c:08:f5:f2:11:57:51:25:86:46:d1:85:84:c0:
                    28:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:0A:1C:0D:B7:C7:75:ED:1E:88:E2:08:FE:8E:20:F2:29:26:58:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/51fd0d09-e12e-33f7-8298-e424d5c56b7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:10:86:e2:ca:85:9a:29:1a:03:f9:0b:4d:11:03:7d:37:26:
         8e:1b:0f:76:bf:db:bc:f6:8c:2d:28:81:80:7e:7a:a5:43:93:
         ba:2c:45:a9:26:96:10:62:ad:a6:d8:fc:8d:5e:9e:a0:4e:7e:
         00:73:37:0a:92:2b:39:a9:13:a0:a3:05:02:21:ad:e5:b7:10:
         ca:52:32:c9:aa:21:db:12:96:5f:6b:56:4a:59:59:bd:86:0b:
         30:e5:f4:3e:ba:1c:95:20:64:b1:b0:c5:26:4d:ea:bd:08:38:
         d5:13:26:00:07:53:a4:c7:94:d8:01:e5:b7:67:68:74:09:6b:
         a1:58:0e:6c:29:b0:16:3b:ac:9e:c2:ed:37:6c:8c:43:11:67:
         cb:fa:27:37:59:15:1d:c3:96:c6:58:86:fe:9d:c2:5d:be:fc:
         eb:b1:a6:91:6a:fc:d0:01:14:48:c7:b9:a6:ca:8c:ac:c3:d3:
         3b:41:51:97:00:c3:38:b7:f7:ea:5e:5e:7a:95:a9:5e:a5:fb:
         90:13:d3:61:53:c0:dd:c6:74:18:c1:8f:b3:a8:11:f1:69:46:
         29:6d:db:69:98:76:6a:d4:40:0b:b7:85:27:c7:7c:6a:49:d0:
         6d:e0:af:6c:6f:8f:c5:c4:d8:ad:1a:da:78:63:8a:2e:2b:a9:
         b9:8c:c3:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:57:46 2025 by rpki-client