Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ed146ec7-7e6f-319e-866d-36b93dbadde5.roa
File:                     ed146ec7-7e6f-319e-866d-36b93dbadde5.roa (raw, json)
Hash identifier:          f48yTjnDNlJW6XgaLcayCr/lguRYBATugNWst/k+Ymw=
Subject key identifier:   72:3C:75:E6:28:D4:11:09:3A:F8:8D:0B:7D:C8:DB:C1:9E:BF:3C:39
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285848BD210FAC16234ABA58469780
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ed146ec7-7e6f-319e-866d-36b93dbadde5.roa
Signing time:             Sat 01 Feb 2025 14:00:51 +0000
ROA not before:           Sat 01 Feb 2025 14:00:51 +0000
ROA not after:            Fri 02 May 2025 13:00:51 +0000
asID:                     397228
IP address blocks:        156.154.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bd:21:0f:ac:16:23:4a:ba:58:46:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Feb  1 14:00:51 2025 GMT
            Not After : May  2 13:00:51 2025 GMT
        Subject: CN=67b7c21c-2526-445a-9755-261c24114727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d8:11:6f:2b:9f:f2:e1:b2:a2:ce:97:80:7b:
                    1a:98:5b:bf:1b:66:2f:be:65:b6:61:72:0b:6d:b2:
                    e6:c8:7b:07:a3:68:bf:1e:6f:13:9b:4f:2e:fc:fa:
                    97:79:94:67:6f:44:24:ea:c1:60:9d:40:78:24:85:
                    ed:29:7a:5e:60:4f:31:e5:73:4e:77:12:46:3a:f4:
                    7c:b6:5f:07:67:5e:6b:46:2f:27:86:f4:5c:70:68:
                    5a:a5:f6:5e:af:7c:6d:84:ed:09:6b:53:8a:0c:3f:
                    6e:78:62:0d:15:08:96:21:5d:f5:af:d9:60:6f:b2:
                    bf:49:26:7b:60:18:b0:1b:ce:da:aa:10:4c:d5:e4:
                    57:9b:a9:43:4d:c6:87:57:f7:d9:57:36:31:09:73:
                    34:5e:c8:a9:57:b5:c8:f6:fb:39:35:28:5b:9f:7f:
                    c3:f1:0c:83:87:6e:76:d3:4d:25:fa:12:81:a5:de:
                    03:48:9a:b6:b3:8d:ac:12:76:95:98:d2:e9:35:93:
                    36:3f:fa:49:93:61:dd:e5:b1:e5:ea:d6:50:0d:d9:
                    70:3d:ab:d8:4c:a9:04:1a:57:22:b4:da:da:5b:20:
                    35:a5:ce:22:a8:5b:b5:99:a0:a4:f3:79:f8:77:5b:
                    67:09:92:0b:aa:7a:c2:d1:0a:17:0a:41:62:d1:ac:
                    6e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:3C:75:E6:28:D4:11:09:3A:F8:8D:0B:7D:C8:DB:C1:9E:BF:3C:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ed146ec7-7e6f-319e-866d-36b93dbadde5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:05:32:65:84:bd:d5:e4:bb:97:76:9d:43:c9:d1:09:42:4f:
         b7:62:fe:3d:ab:43:bf:f8:8e:e5:07:b9:7c:c0:4d:44:b7:f5:
         4d:2f:8b:f5:4b:1f:0f:60:43:35:c9:c7:1c:50:a5:65:cc:16:
         8b:9d:9f:aa:5b:fa:10:91:6a:55:d8:40:d5:39:c8:69:aa:cc:
         54:25:7b:3d:4e:f2:3c:06:ab:b0:66:ff:1b:70:3e:d1:a5:da:
         90:aa:94:82:3a:d7:ec:57:5f:72:3a:58:33:df:1d:35:6d:b8:
         da:a0:23:81:a4:cd:03:ef:86:c8:2d:1f:c9:9d:f6:1b:b9:74:
         d3:fd:00:1e:bc:89:7a:9f:2c:f5:0f:f7:b2:db:04:e9:93:4e:
         c4:c9:0a:e7:70:16:e9:ee:65:0f:89:71:ae:30:1c:eb:23:5a:
         b6:55:ec:0f:42:11:52:23:65:a6:ab:cf:17:99:87:84:b7:ab:
         31:ca:9f:87:55:ff:fe:23:ec:7b:2f:bb:d7:30:7b:38:28:5c:
         9f:a7:05:36:da:08:c7:00:88:9e:cd:f6:de:d5:79:e7:d3:2a:
         05:81:ff:75:9d:0c:1c:fe:6d:a4:c0:56:d1:62:12:35:5b:7b:
         84:c9:b7:a0:2e:ef:db:db:6a:1e:84:93:4c:38:08:23:ca:6f:
         6a:91:e1:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:42:33 2025 by rpki-client