Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c78fe2f4-a818-36ed-b750-cd1b7ab9a7a8.roa
File:                     c78fe2f4-a818-36ed-b750-cd1b7ab9a7a8.roa (raw, json)
Hash identifier:          6QG0yoD86vEQeKUku3qk9Qy55GCWd8583Oig+ATIi2w=
Subject key identifier:   E8:84:61:C4:F7:9C:E6:98:4F:BB:0C:7C:3C:B2:4A:44:A3:2E:35:0D
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858491246E4F9EEB844DECFD56480
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c78fe2f4-a818-36ed-b750-cd1b7ab9a7a8.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     397228
IP address blocks:        156.154.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:e4:f9:ee:b8:44:de:cf:d5:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=4c1dcfd7-b4d9-494e-b7c4-381fe54127fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8a:d7:e7:45:4b:c0:d7:83:4c:8c:27:86:84:
                    bf:81:d4:59:be:e3:59:97:97:61:0e:7d:ce:73:64:
                    32:df:db:6c:42:d3:44:15:47:a7:a1:95:3a:12:e6:
                    8a:62:3e:0c:e7:f3:ac:f4:13:a6:7d:79:22:5d:cd:
                    90:f5:8f:9b:06:d6:d0:29:56:49:7f:3c:b3:3d:29:
                    95:93:ad:b5:44:63:f4:30:3f:d8:69:fd:a4:3a:d1:
                    5a:0b:96:d9:f8:4c:c8:c4:fd:a4:93:ea:4f:f8:0f:
                    7f:b3:d8:e5:a9:f7:56:ef:99:23:29:f6:ae:7d:9e:
                    a2:6a:d6:31:2d:0e:b7:18:bc:bd:2c:67:d1:26:68:
                    a0:f8:17:08:98:a5:a4:d9:f3:e4:47:82:58:fb:9e:
                    eb:19:3c:e8:a4:36:f2:fd:ea:fb:f0:df:73:26:f1:
                    e0:31:10:ae:1f:1f:58:73:4b:5e:ba:c0:cc:1c:ca:
                    3a:f7:db:5c:86:d3:54:00:bc:72:64:90:d2:4f:1b:
                    55:f5:2b:7d:bd:30:33:8f:78:f5:e2:65:ca:47:fc:
                    6b:34:a5:c1:7c:3c:13:f6:19:4d:70:23:88:c3:9c:
                    b3:38:d1:2f:1a:32:59:9f:b8:c0:7f:09:9a:0a:59:
                    ba:1f:6e:90:3b:e2:39:d6:b5:29:51:58:fa:d5:60:
                    62:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:84:61:C4:F7:9C:E6:98:4F:BB:0C:7C:3C:B2:4A:44:A3:2E:35:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c78fe2f4-a818-36ed-b750-cd1b7ab9a7a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:4c:97:91:f7:ea:6d:c0:c5:56:9c:8c:df:89:07:2a:98:7c:
         12:a8:40:2d:07:10:f8:85:0f:e4:95:df:1d:b4:36:f7:56:6c:
         fd:c4:63:a2:b1:1a:8d:c1:ab:2f:6d:b4:fe:cc:6d:b2:bf:ca:
         81:d3:26:5a:3d:4c:2d:d8:75:9f:8f:1e:c2:bb:a2:8a:95:cf:
         0e:cc:33:34:d7:f8:74:95:5f:84:4b:7d:da:4b:10:9a:27:eb:
         e6:03:d6:16:e7:e5:31:0a:8a:9b:26:60:aa:97:df:84:6e:69:
         83:ee:4b:9b:f2:80:dd:43:06:05:2c:84:10:a5:8c:25:fb:1d:
         5b:d6:ef:7e:13:6d:05:5c:0a:38:8d:12:1b:b8:e2:83:ae:cd:
         f8:de:d1:dd:eb:b0:4d:d7:d2:85:ff:46:d5:3b:7a:78:20:cf:
         f6:af:d5:a1:fb:c6:50:01:9f:36:81:cc:3e:cb:d1:bb:eb:e6:
         4e:d0:fd:60:4e:2a:1e:4c:80:fa:90:7d:72:9c:c2:59:7c:dc:
         c0:5b:82:a3:2d:67:91:2d:86:92:bb:bd:4b:28:51:82:8b:56:
         af:6d:b9:86:92:26:b8:b4:6d:38:71:3e:36:a6:6e:49:91:d9:
         a2:d7:eb:5e:c9:7a:00:03:d9:76:46:72:7b:71:77:04:3e:6c:
         10:c3:cf:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:37:31 2025 by rpki-client