Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b6d039b6-e436-3ff5-8410-912a94ccd873.roa
File:                     b6d039b6-e436-3ff5-8410-912a94ccd873.roa (raw, json)
Hash identifier:          U50nKm2SJ/stzrlkSisqhnv32y3Gk6LFkaWWvrHDij0=
Subject key identifier:   97:DC:DE:1F:DB:AE:E7:23:B7:BC:1A:BB:25:25:DE:41:4C:53:C3:B9
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285848A9965037999FCF042B282300
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b6d039b6-e436-3ff5-8410-912a94ccd873.roa
Signing time:             Sat 25 Jan 2025 14:00:52 +0000
ROA not before:           Sat 25 Jan 2025 14:00:52 +0000
ROA not after:            Fri 25 Apr 2025 13:00:52 +0000
asID:                     397230
IP address blocks:        156.154.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a9:96:50:37:99:9f:cf:04:2b:28:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jan 25 14:00:52 2025 GMT
            Not After : Apr 25 13:00:52 2025 GMT
        Subject: CN=8415b7fd-cc83-4d2a-add5-a08bca55badc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ac:fe:b4:2a:b1:d8:4d:8d:43:ca:a0:2b:43:
                    3c:ee:76:64:38:b5:56:31:89:26:8e:da:95:77:17:
                    3a:62:6b:26:9b:f9:7a:cb:85:a7:ba:5e:a0:a0:54:
                    9e:d7:a5:a2:e1:e8:30:0e:78:96:e8:5b:bf:0d:ab:
                    97:7f:3a:e6:d5:10:bd:c9:45:cf:f2:a3:3c:f2:56:
                    cd:cb:9c:f0:f2:4f:77:c0:46:57:f1:fc:39:33:94:
                    23:64:76:51:1e:68:87:42:37:23:2a:1d:8a:48:b1:
                    56:12:f6:c3:cf:d8:91:02:f0:9d:e1:fb:7c:fb:6d:
                    25:76:5a:22:d8:f6:78:a0:e5:f6:8b:34:38:e0:45:
                    91:3f:31:f5:09:af:c5:d8:d4:6d:e2:91:a0:7f:d4:
                    f1:1f:cf:99:d4:a2:c1:d5:46:d9:e4:04:be:19:5e:
                    b1:34:a4:63:ef:c1:83:44:38:aa:d0:25:13:0a:52:
                    ac:1b:1d:a8:11:79:ec:94:88:50:c6:1e:b3:a4:3c:
                    ba:10:dd:cc:65:13:57:a1:c1:f2:0c:a8:53:cd:92:
                    a6:b5:17:a5:ca:4e:81:a3:1b:9a:0c:1b:3b:2b:15:
                    e9:bf:cf:48:ae:05:57:7a:9b:19:68:8b:b2:1e:6d:
                    16:9f:60:92:be:4d:82:c1:d9:95:39:86:b6:95:0f:
                    86:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:DC:DE:1F:DB:AE:E7:23:B7:BC:1A:BB:25:25:DE:41:4C:53:C3:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b6d039b6-e436-3ff5-8410-912a94ccd873.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:53:14:7f:bf:3e:67:66:6d:5a:71:76:1f:3c:18:50:6d:41:
         41:ae:1a:f7:11:79:a6:8a:29:67:94:a7:58:e0:9b:e2:01:48:
         9c:f5:93:92:2f:6a:70:f6:eb:1a:63:eb:7e:eb:88:57:76:63:
         d3:14:27:98:76:5b:06:3b:3c:43:65:13:0c:97:65:d9:ce:38:
         1a:95:99:22:84:31:1a:2b:5e:15:f7:dc:db:87:09:96:df:04:
         53:a1:f2:ad:20:16:4d:6c:4f:bf:8e:79:1b:a6:8a:0b:7d:ca:
         c2:bf:26:87:1d:37:59:d5:6b:a0:27:8c:c7:bf:70:9a:9b:4e:
         8a:98:61:3c:66:f7:e5:6b:3f:8f:ee:85:76:b7:e4:21:78:04:
         08:39:be:2f:85:e2:76:fa:43:15:4b:dc:18:d6:3e:5f:4e:23:
         64:37:a1:68:1b:c6:a9:69:a8:6d:df:c8:80:45:12:6f:b4:b3:
         fe:b3:e3:7d:44:06:1b:e0:a3:33:3a:88:ae:fe:b2:2f:ab:14:
         71:c4:8c:63:f9:0d:e9:a9:91:cc:38:37:f2:5a:4c:76:6e:2e:
         1a:d2:24:bf:30:61:cc:d9:ec:4d:8f:83:56:ec:cd:81:28:38:
         37:0d:72:ae:6b:2f:a1:69:1f:10:1d:89:1a:70:d2:ac:51:3d:
         d7:04:75:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:39:43 2025 by rpki-client