Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d6ea140f-5b57-3e89-ad00-9345af112d7b.roa
File:                     d6ea140f-5b57-3e89-ad00-9345af112d7b.roa (raw, json)
Hash identifier:          apMu5qCVTvZoTELNqVngpflg2DJ3fsFd1pIL8VaSTzs=
Subject key identifier:   0C:94:46:74:CA:C6:4F:F5:DC:8C:A3:E1:F7:4D:9C:58:AB:27:49:F6
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858491246D9DACF6C2A2CAA1A4A00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d6ea140f-5b57-3e89-ad00-9345af112d7b.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     397223
IP address blocks:        156.154.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:d9:da:cf:6c:2a:2c:aa:1a:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=d9a9d2e4-6e05-484c-999c-608e71fbe321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b9:9a:84:fd:bf:4e:a1:1a:58:b2:0e:3e:29:
                    23:6c:c5:7a:76:4c:3c:61:86:b4:05:1c:ff:ee:81:
                    53:7d:db:a4:93:87:0a:9d:48:ea:44:53:04:6c:31:
                    b8:a3:1b:a0:67:07:da:22:bf:5a:6d:3c:a4:dd:b8:
                    77:63:71:03:08:13:a2:56:f0:ee:c8:6b:f9:b3:75:
                    e3:8a:db:19:9b:68:1d:f7:fd:77:07:2b:4c:04:54:
                    d7:50:cb:95:2d:60:ec:df:e6:10:12:24:c4:a5:76:
                    92:f8:1d:0b:02:59:83:2c:1e:21:3e:db:91:80:61:
                    b2:ec:2a:4f:ab:3f:bf:be:0e:0c:7d:3f:42:5f:a9:
                    8b:10:6e:7d:d0:0d:d2:5d:e4:78:ca:ad:98:e2:3b:
                    0e:f6:6a:40:fe:cf:a6:a7:a2:0b:04:c6:8a:26:e8:
                    1a:53:15:b3:36:98:f5:23:e8:4e:f6:ef:f4:aa:ae:
                    7c:c1:3c:01:b4:6c:5e:55:75:d1:78:28:4f:7a:92:
                    4d:5e:db:60:6e:ea:1e:41:48:e4:1d:f4:d4:0e:76:
                    9a:a2:85:3f:20:53:61:ee:5b:20:28:63:10:5c:1f:
                    86:6b:fc:b8:61:08:43:d4:3f:de:5a:d5:43:86:34:
                    3c:2a:bf:fd:f1:68:06:be:71:62:ab:41:4e:fe:f2:
                    ac:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:94:46:74:CA:C6:4F:F5:DC:8C:A3:E1:F7:4D:9C:58:AB:27:49:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d6ea140f-5b57-3e89-ad00-9345af112d7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:0e:b7:b1:2f:c6:8d:57:3d:5d:1a:6c:ab:d5:ca:bf:21:81:
         47:12:50:46:cd:f5:7b:df:a5:1a:a4:85:79:16:9c:33:0b:6d:
         d1:f1:01:4c:19:db:26:d1:a4:f6:5b:30:3d:b6:3d:70:0c:57:
         7b:20:c5:c2:0a:cc:d9:88:3c:84:9f:a4:8c:1b:63:ff:7e:30:
         a0:99:36:cb:e9:d7:08:14:4f:a6:af:38:f4:72:4d:2f:e2:02:
         f8:ef:43:f6:98:68:0a:83:f8:96:8a:20:71:a0:94:0d:9b:d3:
         d4:15:58:94:df:c9:c2:29:9a:73:c3:c2:d2:5d:6e:47:30:1e:
         bc:f8:67:d1:e3:65:90:1a:0d:be:02:95:0a:57:d8:0e:e3:d1:
         1b:ac:af:ac:54:76:b3:e7:c2:82:ae:b1:0b:67:6e:fc:c0:6a:
         c3:b0:64:79:3a:84:b8:25:94:4c:9d:47:d7:c2:9f:3f:44:06:
         d9:51:ad:91:21:c5:1f:b9:5c:c7:4a:f2:63:c0:bb:7c:57:8a:
         36:14:0f:c4:9a:84:77:0c:50:92:97:2d:ad:2a:d1:29:da:68:
         ca:cb:29:a3:70:00:c6:16:6d:aa:4b:48:06:07:78:8a:b1:1b:
         e0:5e:1d:80:64:f9:3a:af:44:94:dd:c8:5c:79:23:c3:49:27:
         0f:41:b5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 01:55:52 2025 by rpki-client