Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c5da446e-616e-382f-a398-c1555d4a662d.roa
File:                     c5da446e-616e-382f-a398-c1555d4a662d.roa (raw, json)
Hash identifier:          0Cbyjg1vhG0ZWenR2ffE+Lz8265DMtQjOIdshuPWpqc=
Subject key identifier:   C6:65:8B:89:BF:67:8A:48:B1:3A:82:C4:BA:F0:6B:B0:F9:B5:B5:91
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285848BD20EE4F416F3E1EFDD63390
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c5da446e-616e-382f-a398-c1555d4a662d.roa
Signing time:             Sat 01 Feb 2025 14:00:51 +0000
ROA not before:           Sat 01 Feb 2025 14:00:51 +0000
ROA not after:            Fri 02 May 2025 13:00:51 +0000
asID:                     397228
IP address blocks:        156.154.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bd:20:ee:4f:41:6f:3e:1e:fd:d6:33:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Feb  1 14:00:51 2025 GMT
            Not After : May  2 13:00:51 2025 GMT
        Subject: CN=68b6277a-485f-4cb8-b18d-f46e9253081d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:47:9a:92:74:3a:5d:95:80:0f:5e:bc:76:f2:
                    d5:33:b4:9a:2b:f4:c6:2a:d7:2f:68:f6:cb:bb:f6:
                    6d:ea:4a:dc:65:21:4d:a8:2c:25:9f:0c:90:36:78:
                    7d:8b:b0:d8:b2:99:49:d3:ca:2e:c3:d4:6f:6d:0c:
                    cd:93:a7:f3:1b:9c:8e:bb:60:f9:eb:ec:13:89:42:
                    32:54:3f:9b:9e:c3:6f:58:5b:e7:4b:94:82:3e:02:
                    e9:9e:12:8e:76:2a:a2:9d:e6:d4:41:d8:74:e2:25:
                    4f:36:78:0d:04:7d:5c:62:1c:41:a2:a5:b2:e8:36:
                    78:d9:93:9d:e8:61:19:34:e4:2c:a6:ea:31:e1:1e:
                    f2:3a:3e:96:e6:f5:0b:7f:ca:e6:88:87:25:2a:e1:
                    eb:53:21:f6:39:45:5b:24:a2:5d:64:68:02:41:55:
                    0a:aa:fa:0f:55:48:78:c0:6f:3e:c9:2d:93:f1:a8:
                    47:82:b2:b6:63:de:f0:e8:a3:aa:ae:dd:7c:57:fa:
                    26:a7:20:55:da:bb:64:f3:ae:f1:a0:62:d9:3d:ef:
                    40:b7:a3:9c:c0:6f:53:7a:a0:c7:49:b2:68:15:c8:
                    4e:ad:bd:6f:6b:b5:65:17:eb:d5:78:ef:ff:77:9e:
                    37:4a:7d:f0:fb:2f:73:41:f6:53:48:88:6e:7f:d9:
                    a6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:65:8B:89:BF:67:8A:48:B1:3A:82:C4:BA:F0:6B:B0:F9:B5:B5:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c5da446e-616e-382f-a398-c1555d4a662d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:8d:a4:c8:b1:be:3f:7a:27:75:7a:89:75:d3:35:8f:17:1d:
         35:fa:15:b7:36:ec:e5:66:08:c9:1d:e6:1e:0d:d6:10:19:f4:
         db:6a:95:d7:a1:c4:04:d5:21:3d:ee:1e:18:3d:69:60:b1:d4:
         6c:a6:57:75:78:14:ea:ac:e7:e9:85:d2:9f:3a:88:62:fa:31:
         df:92:f5:9e:1e:bc:cc:09:50:3e:be:37:2c:bd:50:b9:f9:22:
         f3:21:a2:40:04:de:e0:4c:32:7b:eb:cd:b3:2a:59:04:8e:01:
         50:9b:b0:29:38:4d:e5:88:a7:d6:24:68:20:e2:da:87:97:d2:
         7e:6d:be:cd:2b:7f:67:da:b3:de:bd:82:0b:84:15:e0:8f:6a:
         f9:08:8e:53:b4:8a:66:cb:a4:c8:02:36:8b:1a:20:28:e8:1d:
         63:f0:b1:08:61:35:3b:e9:fc:18:ea:9a:3a:bc:b3:d4:79:10:
         ca:ba:c0:dd:47:f7:72:1c:0a:71:2b:3e:da:64:e4:64:41:d0:
         c2:59:73:c4:30:be:91:18:42:96:6b:28:d4:cd:ed:7c:28:46:
         76:e8:3f:d7:79:58:5f:08:0d:ca:38:b1:5e:24:27:52:26:90:
         3c:38:b2:d6:78:85:f7:41:5f:13:84:ab:1e:07:c8:2e:94:94:
         f5:64:f8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:40:02 2025 by rpki-client