Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a46ab8c4-5ede-3dfe-aa18-52aca68e734e.roa
File:                     a46ab8c4-5ede-3dfe-aa18-52aca68e734e.roa (raw, json)
Hash identifier:          FxFB1LEHg7qrgZ8AFOzzorvq2MHuC9iz53RKbTSUTWc=
Subject key identifier:   10:B0:DC:0D:A5:DD:E7:70:51:8B:1F:F1:0F:EE:83:B1:CC:62:85:6B
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285848A996504F7D148ABA80A4F280
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a46ab8c4-5ede-3dfe-aa18-52aca68e734e.roa
Signing time:             Sat 25 Jan 2025 14:00:52 +0000
ROA not before:           Sat 25 Jan 2025 14:00:52 +0000
ROA not after:            Fri 25 Apr 2025 13:00:52 +0000
asID:                     397232
IP address blocks:        156.154.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a9:96:50:4f:7d:14:8a:ba:80:a4:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jan 25 14:00:52 2025 GMT
            Not After : Apr 25 13:00:52 2025 GMT
        Subject: CN=cb9807f9-9672-4a8a-ae03-22dd6e4dd7d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:64:38:9b:c3:88:94:1b:02:44:40:0e:54:a9:
                    bd:3c:a6:a9:15:03:dc:bf:bb:6e:bf:e6:67:8e:1d:
                    e3:9f:a5:99:45:07:e7:59:c7:d3:31:91:b8:b8:33:
                    65:3c:7b:1a:73:5b:bf:ef:92:42:21:35:27:61:5d:
                    9a:68:67:9c:5a:21:4a:3c:d0:1c:f7:d6:1e:f0:ce:
                    87:c0:1c:eb:78:95:51:55:eb:e9:1e:bf:81:62:63:
                    b3:cc:4c:17:10:7a:4e:bb:4b:33:29:8d:9c:99:31:
                    5a:3c:0b:56:07:86:b7:2c:92:0d:e4:01:a6:f0:a0:
                    2c:f8:68:2b:21:a5:cf:c0:43:5f:38:77:c4:c3:92:
                    b8:46:5c:5d:11:55:7a:d3:5f:3c:7b:eb:c4:dd:35:
                    a8:7e:de:92:2c:5d:7c:8e:51:63:a7:54:c9:8d:8a:
                    ce:24:48:69:9d:fc:51:e1:f0:98:22:b9:30:d6:b5:
                    f4:5b:3e:65:e8:ea:fd:52:a7:9e:bb:50:c2:b7:a6:
                    fc:3e:3c:d2:76:a2:05:96:fc:86:38:51:1a:85:8e:
                    f0:3d:56:5d:e9:f5:af:9b:68:41:6c:06:fb:76:1e:
                    8e:22:a2:0a:ed:7e:ae:55:75:c0:44:db:9a:ad:ec:
                    e1:28:36:1f:62:45:99:ef:07:73:59:30:e4:03:98:
                    ea:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:B0:DC:0D:A5:DD:E7:70:51:8B:1F:F1:0F:EE:83:B1:CC:62:85:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a46ab8c4-5ede-3dfe-aa18-52aca68e734e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:d0:77:79:37:fe:cc:65:b9:53:f4:b7:4d:18:d0:cd:74:73:
         4c:73:2d:2c:38:1c:e0:4c:38:20:71:d9:6f:1f:75:33:8b:7d:
         e4:1c:ed:4f:e8:20:bc:6d:61:0d:23:ed:d2:b8:50:a2:6f:1c:
         15:00:9b:bd:7e:2c:19:d1:9f:e6:67:4f:54:34:9d:17:cd:94:
         cb:bb:2a:cc:e7:7b:5b:ed:36:dd:f4:93:1b:96:16:51:02:b7:
         f5:04:35:22:16:d4:df:13:dc:05:a7:75:2c:5c:2c:23:da:99:
         c5:69:7e:17:78:59:d5:76:a4:3b:b7:61:d5:12:b4:19:86:d5:
         2d:bf:28:52:f3:ef:47:2b:eb:01:4a:77:16:bd:38:4a:70:50:
         7d:fa:4c:77:ce:3c:b9:78:b0:22:b9:3b:62:9f:f5:f5:a3:3b:
         7a:86:c5:19:bd:ef:be:48:d6:0e:85:e0:48:ff:c0:93:f9:ea:
         00:77:87:1b:8d:26:e0:dd:b1:57:a9:bc:21:87:cb:a0:2d:8c:
         7b:d2:7f:fc:cc:04:c5:16:59:ba:f9:d3:cc:36:fe:08:a3:1b:
         a1:b5:c5:75:82:95:f2:f3:94:21:28:f9:f8:cd:ae:e8:67:f5:
         b9:96:5d:6d:8b:60:7d:f6:cb:ce:fc:da:20:14:e0:97:b1:23:
         2b:53:a4:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:58:17 2025 by rpki-client