Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/db405216-0b0f-3ed5-821b-744bf64148a4.roa
File:                     db405216-0b0f-3ed5-821b-744bf64148a4.roa (raw, json)
Hash identifier:          Aj0E0ti1/jLvqQ6fAnl1LnXlF0klWqMt1QvqPk9R60Y=
Subject key identifier:   3D:90:B2:9C:9D:2B:00:DD:10:B8:FF:A5:0C:00:F5:B7:08:54:02:BE
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285848A996404D318272CBFBDFE300
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/db405216-0b0f-3ed5-821b-744bf64148a4.roa
Signing time:             Sat 25 Jan 2025 14:00:52 +0000
ROA not before:           Sat 25 Jan 2025 14:00:52 +0000
ROA not after:            Fri 25 Apr 2025 13:00:52 +0000
asID:                     397231
IP address blocks:        156.154.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a9:96:40:4d:31:82:72:cb:fb:df:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jan 25 14:00:52 2025 GMT
            Not After : Apr 25 13:00:52 2025 GMT
        Subject: CN=df5fd4d0-601c-4b9c-b0ca-b6dbfb3180d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9a:3c:6d:3f:ef:38:b6:8a:a6:e5:18:3b:8d:
                    64:70:54:17:17:13:9b:ca:5c:a6:e7:6a:27:f2:88:
                    e6:05:0a:10:ee:cd:9f:50:a6:86:0c:50:d6:ec:ab:
                    7b:44:d4:f1:50:80:b6:b9:0d:9a:d7:dd:44:93:25:
                    b5:6b:83:f2:fa:72:d2:bb:d5:2a:f6:2c:66:39:c7:
                    48:d6:a2:72:d2:2e:d3:f2:02:f0:5e:11:9a:19:0a:
                    1b:5d:40:95:67:da:d0:cf:ce:85:53:e0:29:02:45:
                    01:a3:13:41:ba:3b:92:8e:ab:e4:bf:63:82:d1:ff:
                    c1:8c:07:cc:61:31:88:29:18:cf:8d:df:26:0e:eb:
                    ac:9a:bf:20:51:05:2d:91:b4:02:af:28:4b:cc:f2:
                    69:f4:13:10:a7:31:45:47:44:74:f9:12:30:96:33:
                    a9:6f:d0:a0:05:9f:70:3f:03:e7:86:37:f0:a1:30:
                    e7:6c:18:e4:36:a8:f3:26:41:1c:d4:bc:78:5f:0d:
                    5e:58:a6:8c:a8:37:7f:dd:1a:b7:e5:6e:64:47:7a:
                    6a:75:66:1c:33:81:27:ae:a3:f1:cb:58:68:bf:57:
                    c3:0e:38:32:48:4f:d5:73:12:c8:19:f7:cf:94:ee:
                    25:95:6d:ba:e3:32:e2:c9:77:27:57:79:4c:e7:1d:
                    97:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:90:B2:9C:9D:2B:00:DD:10:B8:FF:A5:0C:00:F5:B7:08:54:02:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/db405216-0b0f-3ed5-821b-744bf64148a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:7c:46:df:70:69:89:01:4d:51:8a:f5:fb:f9:38:f5:ad:e1:
         ca:08:89:08:02:9f:7c:97:fb:48:63:fd:66:46:96:b9:17:81:
         97:74:87:d2:b3:f5:bf:60:bd:94:71:9c:e1:10:48:c5:94:a4:
         47:0b:53:38:d9:9c:08:70:21:c4:56:18:dd:b9:1a:34:d8:0e:
         f1:42:3d:c4:dd:93:f6:33:a9:e4:55:36:90:e4:49:c9:18:33:
         da:c1:a4:09:28:48:88:89:94:41:11:a3:73:53:7e:f5:a6:cc:
         7f:e5:69:f5:a9:97:81:7f:5e:f8:99:53:13:02:38:1c:32:b3:
         2c:2e:51:e3:ee:35:57:dd:2f:c9:e7:ee:e8:c5:90:0f:87:aa:
         aa:b3:aa:b3:b5:f5:ea:31:be:3e:6c:f5:56:3b:61:67:b5:89:
         ab:85:52:a9:57:6f:c7:e7:6e:d6:19:3d:6f:5b:c0:86:1f:d7:
         cc:b2:d9:60:95:25:fc:39:93:bd:70:b6:48:eb:d3:1e:d7:27:
         5a:27:13:53:ca:f9:9f:77:20:a6:13:ce:67:8a:8c:94:1b:03:
         df:a9:24:8e:5b:f1:ed:ef:07:39:66:04:03:7e:62:5d:6e:8d:
         66:88:69:12:6a:c7:2b:63:72:55:fd:dd:05:90:2c:7c:5c:3f:
         f1:ec:89:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:52:27 2025 by rpki-client