Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e146a3db-f9ad-3629-9415-e319c1497685.roa
File:                     e146a3db-f9ad-3629-9415-e319c1497685.roa (raw, json)
Hash identifier:          Q/RPQB+GSf3xOMg/oev5nZbz3WDmUzP7coNUDQKuoDI=
Subject key identifier:   54:64:0A:38:B1:66:68:08:D3:1A:61:FC:77:2E:63:6B:CD:68:29:93
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285848BD20E8593D154D88E127C340
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e146a3db-f9ad-3629-9415-e319c1497685.roa
Signing time:             Sat 01 Feb 2025 14:00:51 +0000
ROA not before:           Sat 01 Feb 2025 14:00:51 +0000
ROA not after:            Fri 02 May 2025 13:00:51 +0000
asID:                     397235
IP address blocks:        156.154.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bd:20:e8:59:3d:15:4d:88:e1:27:c3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Feb  1 14:00:51 2025 GMT
            Not After : May  2 13:00:51 2025 GMT
        Subject: CN=f4687145-ccb7-4265-ab94-740665d7d005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e6:6b:cc:7a:eb:7f:dc:99:d6:e8:9b:4a:d0:
                    8e:2e:2e:39:30:22:75:46:c1:0a:23:1c:cf:07:1d:
                    f6:84:d0:cf:1d:a8:2d:db:87:9a:7b:a9:f0:87:e7:
                    bf:0c:69:8f:63:48:6e:8f:31:ed:61:f6:ca:60:a7:
                    a1:41:39:73:96:b7:ba:da:f6:00:b6:f6:92:9c:a8:
                    66:9e:f2:c9:f7:e4:35:b8:e6:91:0c:03:88:02:cb:
                    cc:f2:82:29:0a:f5:96:3a:51:2c:45:ae:1a:4d:c4:
                    54:82:4e:fa:72:29:12:18:2d:82:4f:69:b6:8d:01:
                    44:36:d0:f1:55:e5:89:44:0d:43:e5:31:96:87:22:
                    99:08:5a:0b:45:cd:6e:04:ee:6c:64:8a:5c:86:02:
                    ac:ba:e1:88:30:88:68:db:6b:44:79:bd:46:8e:75:
                    fc:8e:61:6c:48:09:55:67:48:91:d3:22:33:c8:db:
                    d2:1f:18:9f:e8:90:86:b3:43:1c:c6:6a:d0:87:6d:
                    3e:ca:8b:f8:d5:e6:e5:bd:a4:a7:fb:49:e8:12:73:
                    95:5d:fa:69:d4:6a:aa:79:3c:c4:44:69:27:7d:89:
                    3b:53:4f:36:19:5b:ed:ee:3d:25:6a:49:2b:cd:e5:
                    96:ae:0a:b9:be:3b:25:78:e2:b1:22:7b:7b:13:cc:
                    13:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:64:0A:38:B1:66:68:08:D3:1A:61:FC:77:2E:63:6B:CD:68:29:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e146a3db-f9ad-3629-9415-e319c1497685.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:42:e0:95:94:f7:b0:cb:17:26:f9:d7:65:39:bd:47:d6:c0:
         17:b0:56:b0:ce:43:ac:d5:2c:33:cd:eb:67:4f:c0:60:19:cc:
         8d:90:72:ef:26:a1:d1:49:a2:95:90:ea:35:2f:8d:d3:85:1b:
         83:84:7f:4f:dc:2f:b7:5c:78:57:13:f7:f2:91:89:7d:cc:82:
         b4:52:e7:5d:b2:91:45:73:4c:ca:90:39:99:33:7c:c1:d6:64:
         e1:45:2e:03:a7:2a:5f:b6:d1:fd:a7:4e:63:92:2a:90:d0:a7:
         f6:68:b4:ce:b3:ae:99:52:30:27:08:0d:81:2e:c6:c7:f1:05:
         95:1b:62:06:4c:fb:26:ef:b6:9f:53:ec:e0:2d:9b:11:b4:06:
         e9:86:77:12:32:4d:bf:f3:4c:e6:f4:d7:ba:a0:85:09:b5:6f:
         e5:d9:9e:13:17:24:41:8c:fb:f1:5d:14:94:1b:f8:b8:69:1a:
         17:87:55:89:83:0f:60:d0:35:c5:5f:85:0f:8f:21:46:68:d7:
         9d:54:da:aa:77:9a:25:41:1c:d3:9a:f0:2d:0d:36:e0:fc:bb:
         4d:3e:4e:d1:29:e0:8a:69:0e:99:ef:59:eb:f6:7f:ea:14:8d:
         af:3e:b8:ac:01:f8:54:17:eb:eb:7d:48:49:a6:f2:4e:1a:ae:
         43:6a:ef:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:45:03 2025 by rpki-client