Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/83d4edf8-37f7-3287-928a-d2cb6ddccc9d.roa
File:                     83d4edf8-37f7-3287-928a-d2cb6ddccc9d.roa (raw, json)
Hash identifier:          Ac53mnAQdjOnydrh1EtM4kMt4to+n4P422lGWH9PV9U=
Subject key identifier:   0E:9A:AE:20:57:72:2D:E9:58:B0:20:24:F2:DA:92:5C:6C:96:ED:06
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858492CB14360A252CA7D9D3D4458
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/83d4edf8-37f7-3287-928a-d2cb6ddccc9d.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     399164
IP address blocks:        156.154.94.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b1:43:60:a2:52:ca:7d:9d:3d:44:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=f3674fa8-7be7-4e41-a6f9-c2e7ae89fe17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:16:80:ca:46:09:2c:f7:0a:f4:35:6e:9f:9f:
                    ea:e3:8e:29:56:e0:8d:ea:86:e9:df:38:44:27:de:
                    41:71:c9:ee:00:50:76:34:1b:17:39:41:a1:0d:1c:
                    e1:51:94:bf:a4:0a:ee:a2:88:6d:ab:48:49:9f:f5:
                    12:e9:4e:8c:32:bb:76:69:34:8c:8c:ef:27:dd:b7:
                    c6:73:73:79:b0:18:61:59:9b:a2:e4:f6:4a:32:98:
                    08:48:82:43:97:23:99:19:8c:de:74:8d:7f:d2:9b:
                    49:58:5b:73:e1:a1:4a:3a:cc:72:38:84:ba:34:d9:
                    2a:07:df:20:79:46:60:d9:02:32:ba:da:19:39:29:
                    14:42:84:20:58:98:0f:09:84:88:30:c6:79:40:36:
                    8d:e8:c7:0c:49:f6:78:46:b6:44:f9:e4:bb:9b:c9:
                    53:9a:65:26:7d:93:bd:d3:e2:1d:a5:42:8d:bb:fc:
                    42:da:9a:f9:27:fc:ed:19:38:f3:7e:08:f4:0f:12:
                    66:77:a4:58:16:a6:4f:b4:24:9a:24:05:19:33:44:
                    d0:e0:db:9e:20:94:e0:8b:f2:ba:bf:9e:cd:9e:d5:
                    d1:d6:63:aa:9d:5a:65:09:ef:c8:03:84:72:53:46:
                    00:39:6e:dd:c5:d4:25:8c:8d:7e:1e:d2:64:23:ae:
                    be:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:9A:AE:20:57:72:2D:E9:58:B0:20:24:F2:DA:92:5C:6C:96:ED:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/83d4edf8-37f7-3287-928a-d2cb6ddccc9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.94.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:cc:bd:59:0c:c3:0c:fd:33:b2:01:3d:ef:43:95:ad:81:2e:
         a5:20:83:2c:a3:b3:69:4b:b2:93:45:88:fd:99:1b:68:0f:8d:
         c9:6c:39:5a:98:4f:1d:42:52:94:06:29:bd:e0:75:de:20:ff:
         16:3f:ff:13:22:ad:28:cc:69:e1:62:cb:7b:f1:59:05:37:2f:
         a7:ec:76:a1:e5:b6:5e:ae:6c:a7:aa:97:68:71:70:37:89:9d:
         7f:eb:f3:22:c3:7c:b8:21:21:bc:10:a2:82:d9:35:3b:eb:c3:
         c0:0b:25:b4:f0:be:53:7d:91:32:e3:ef:a2:aa:ae:ea:3c:f0:
         25:cf:c4:76:73:83:8c:fa:35:9d:5d:d3:67:11:e1:33:59:47:
         30:27:7d:01:36:d2:cc:24:fe:83:b7:2d:d2:1d:a5:55:e1:af:
         fa:e7:91:38:af:b4:25:10:5c:ea:86:f9:46:5a:f4:60:e8:d1:
         01:28:67:5c:47:fe:c6:16:2f:ac:d1:7d:f9:0b:b5:c3:a0:7d:
         17:fa:15:f5:c7:37:38:e0:dd:89:99:75:57:96:8c:a8:09:20:
         1b:91:bb:b1:a7:05:43:02:13:43:df:83:18:1b:c9:10:29:d6:
         9f:d0:a4:0d:1c:4d:b5:24:9b:a0:72:b1:d6:d0:1e:64:ce:1d:
         76:c6:3c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:07:05 2025 by rpki-client