Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/80dcdb79-63a7-39db-bdde-723be67e87e2.roa
File:                     80dcdb79-63a7-39db-bdde-723be67e87e2.roa (raw, json)
Hash identifier:          3jKZpNz2WrA6+U9XESfQYhA3fqv00zaQSS+v0EjBtVM=
Subject key identifier:   5F:B3:B3:EB:8F:6F:A2:FE:78:34:50:A1:D4:25:9D:41:3A:78:D1:FB
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285848BD20EC4F8DA15713B9C75080
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/80dcdb79-63a7-39db-bdde-723be67e87e2.roa
Signing time:             Sat 01 Feb 2025 14:00:51 +0000
ROA not before:           Sat 01 Feb 2025 14:00:51 +0000
ROA not after:            Fri 02 May 2025 13:00:51 +0000
asID:                     397229
IP address blocks:        156.154.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bd:20:ec:4f:8d:a1:57:13:b9:c7:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Feb  1 14:00:51 2025 GMT
            Not After : May  2 13:00:51 2025 GMT
        Subject: CN=ff8fb333-3a7d-45a1-b0e2-3c0daa2acc02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:01:bc:2f:88:54:da:d8:b2:fe:39:d8:0c:d3:
                    0a:d9:9d:8f:f4:5f:15:24:7d:49:42:aa:a0:ad:9e:
                    11:6e:13:f8:99:d5:ae:ba:0a:a0:2b:c8:7d:9d:8c:
                    c0:af:32:88:b3:fd:82:4b:24:26:94:cd:cc:cd:51:
                    3d:05:51:16:28:9e:59:18:82:ba:e5:15:f0:9b:b1:
                    3b:d4:b2:0a:e3:d4:96:cd:26:05:68:ec:e4:20:19:
                    80:13:24:a6:b6:97:a7:01:02:62:0e:a7:34:bf:b5:
                    12:9b:c3:e7:34:c0:8a:c4:17:0d:d6:02:88:d9:6b:
                    90:5e:64:78:31:83:4c:bc:39:93:4c:ed:41:4c:a0:
                    fd:7f:e2:ba:e7:d5:8d:d0:49:e0:57:dd:4a:29:a1:
                    96:77:c7:c1:13:3e:b6:01:8b:ce:c9:3d:32:1a:c9:
                    1e:c7:c9:e2:0a:e6:dd:8a:6c:f6:a9:a0:24:f3:0d:
                    fd:52:ed:4a:66:c1:dc:55:a7:45:dc:18:36:a9:32:
                    ce:fe:42:e4:d8:9f:d8:c5:5b:7c:c5:39:f6:b0:16:
                    fa:c8:60:91:68:73:70:81:65:8d:3b:27:43:52:60:
                    d4:37:c0:1d:59:e4:39:7c:7f:37:b3:e9:fd:09:2b:
                    98:5e:b0:83:0f:df:16:e4:9d:53:65:0b:fe:4b:2c:
                    05:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:B3:B3:EB:8F:6F:A2:FE:78:34:50:A1:D4:25:9D:41:3A:78:D1:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/80dcdb79-63a7-39db-bdde-723be67e87e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:a4:6f:91:7a:30:f5:3f:2a:2f:e9:c5:e7:21:b5:5a:ce:53:
         dc:bf:9f:16:32:b1:fd:1d:99:c7:e9:9b:83:03:42:2d:e8:0b:
         33:4a:3d:7b:04:28:f1:24:cc:fa:fe:6c:c8:1f:ea:03:d4:46:
         49:80:5b:c7:f0:d0:00:1e:22:b8:85:94:97:bd:6c:ee:8d:d7:
         e1:55:24:64:38:fb:a3:7d:a6:f1:6e:aa:2c:d7:01:e4:d1:1a:
         d9:7e:0e:5f:b3:2a:0f:28:80:76:7c:46:79:91:f0:5f:44:8e:
         4d:4c:1d:88:f2:d1:ff:5e:a4:d6:83:c2:9a:1f:d5:09:a5:8e:
         53:a8:33:c9:fe:e4:b5:c7:fc:cf:2a:f5:cc:9a:57:30:d2:4e:
         0d:8e:d4:f2:13:cb:bb:3d:0a:77:34:e5:45:48:ec:07:8d:5e:
         95:cc:8e:67:cf:b1:79:74:a2:75:0c:7e:f0:87:b7:23:2e:59:
         af:05:c2:41:77:bd:51:35:52:22:1a:2c:d1:02:88:ac:1d:d3:
         45:47:67:f2:9c:ad:cc:4f:8c:f3:0c:c5:45:ca:cf:15:57:10:
         67:99:88:2a:da:c6:85:b6:7c:fa:4c:b0:8f:eb:69:f1:19:4d:
         ae:74:39:c5:66:e2:b6:fa:f7:36:82:31:02:e5:5f:cb:fc:05:
         10:b1:e2:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:19:50 2025 by rpki-client