Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d66384f8-66ff-3115-aeff-7c9b97c98de6.roa
File:                     d66384f8-66ff-3115-aeff-7c9b97c98de6.roa (raw, json)
Hash identifier:          ujdhfylUP1lS26V/0vVHPUsC7ZdPJAZBWokchvXouxI=
Subject key identifier:   1D:6C:4A:F4:4D:28:CD:4B:8F:DC:F3:98:4D:F0:E5:19:95:06:F9:08
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285848BD2100A439372000DAB80130
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d66384f8-66ff-3115-aeff-7c9b97c98de6.roa
Signing time:             Sat 01 Feb 2025 14:00:51 +0000
ROA not before:           Sat 01 Feb 2025 14:00:51 +0000
ROA not after:            Fri 02 May 2025 13:00:51 +0000
asID:                     397229
IP address blocks:        156.154.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bd:21:00:a4:39:37:20:00:da:b8:01:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Feb  1 14:00:51 2025 GMT
            Not After : May  2 13:00:51 2025 GMT
        Subject: CN=fd60549a-3712-403f-8b7d-177f7dd37583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:6b:02:93:80:2e:fd:a3:66:85:26:3c:7c:3a:
                    53:ea:3b:ac:37:22:28:1c:62:83:20:73:ca:e9:37:
                    b9:bd:30:02:c5:9e:3c:17:2a:71:09:8e:f8:5d:d0:
                    0d:a5:e2:34:53:12:a3:75:ab:de:cc:10:03:5f:45:
                    d3:69:fa:e8:d3:57:bb:1a:fa:31:d7:98:c3:78:ab:
                    87:09:2c:a1:56:48:a9:b6:a3:76:fb:13:7d:4d:02:
                    f5:59:25:8f:5c:1c:71:98:98:9f:a1:ac:8b:e4:b3:
                    ea:4e:9d:57:da:5f:b2:8a:b7:f3:f8:ed:47:e4:42:
                    72:8e:a3:51:72:6a:f4:93:09:f5:d2:42:49:a1:59:
                    04:43:7a:30:83:d6:27:ae:8c:89:da:42:a1:88:fb:
                    61:bc:e2:fa:0c:34:9f:96:11:d9:fc:76:81:18:99:
                    2e:67:ed:f3:3f:4e:0b:49:1a:1e:e3:66:bd:59:3f:
                    40:e1:d0:df:84:bd:7d:08:af:f4:fa:3b:4e:6f:39:
                    b9:77:02:0c:06:cd:cf:6c:94:7a:fa:a1:46:b1:24:
                    e3:e2:5c:cc:d6:8a:bd:fc:f7:f9:6c:d2:f4:77:d3:
                    96:94:df:4d:7d:94:30:b0:6a:21:76:91:27:5f:1e:
                    c0:45:df:03:54:32:0c:81:d4:9d:9a:61:35:32:f8:
                    27:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:6C:4A:F4:4D:28:CD:4B:8F:DC:F3:98:4D:F0:E5:19:95:06:F9:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d66384f8-66ff-3115-aeff-7c9b97c98de6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:1a:cc:53:0e:52:2a:b7:95:a5:49:a2:a5:44:8f:c7:fe:51:
         19:61:e1:99:3b:18:23:e1:fd:ba:84:1c:08:f4:dd:d4:fe:fa:
         01:9d:51:ac:56:3f:6e:03:f5:f1:78:3f:40:cd:ea:05:06:02:
         9c:d3:a2:69:dc:6c:de:0d:68:8a:ac:73:7e:92:fd:e3:35:08:
         50:c8:67:32:eb:67:b4:74:c6:ac:cb:f9:50:bd:a5:48:c6:50:
         a0:29:9e:c9:83:56:46:c1:36:cb:ca:53:0b:e8:05:8b:55:db:
         69:ff:35:3a:37:9e:d8:43:06:e3:f9:89:fe:0b:a9:4a:1e:82:
         dd:f3:1c:0e:08:63:74:12:6d:6b:bd:ea:62:f4:6d:9b:8a:48:
         76:9e:af:29:b9:5c:0a:3f:e0:16:0d:7a:50:87:d1:28:e6:5e:
         43:cc:34:86:0f:3d:44:3d:b5:21:d4:82:c8:63:a3:ab:11:64:
         e7:7d:8d:67:51:20:8f:c2:22:e6:07:37:4c:72:e9:d6:5c:78:
         40:ef:83:a4:45:2f:d1:47:d4:87:c2:6d:45:fe:85:58:f4:61:
         32:a4:0e:6a:d2:cb:f1:f0:e7:c6:f1:df:fe:24:37:8d:f4:41:
         4d:5e:3b:f8:9c:41:44:5a:d0:81:db:77:b7:40:fe:7e:26:6f:
         d4:74:b2:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:19:42 2025 by rpki-client