Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f9f4e18f-274c-3a7c-823a-665d0bb80ead.roa
File:                     f9f4e18f-274c-3a7c-823a-665d0bb80ead.roa (raw, json)
Hash identifier:          O5U7j7RPwPUyf9sN44OlZfExqqZiHYW6cq078XOh9XI=
Subject key identifier:   C1:4D:A7:C3:DD:AB:9E:D0:17:29:AE:0F:4A:03:97:C2:1F:D0:16:81
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285848A9964EC560673204EFE88480
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f9f4e18f-274c-3a7c-823a-665d0bb80ead.roa
Signing time:             Sat 25 Jan 2025 14:00:52 +0000
ROA not before:           Sat 25 Jan 2025 14:00:52 +0000
ROA not after:            Fri 25 Apr 2025 13:00:52 +0000
asID:                     397233
IP address blocks:        156.154.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a9:96:4e:c5:60:67:32:04:ef:e8:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jan 25 14:00:52 2025 GMT
            Not After : Apr 25 13:00:52 2025 GMT
        Subject: CN=ac3f1e3d-5e80-472a-b9b8-49799fcd4eab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4f:7d:4b:db:3f:11:0c:54:6c:c0:1f:8b:e0:
                    75:10:ec:de:03:df:68:7f:fd:78:82:ac:4e:f7:ed:
                    87:3d:ab:38:c2:7e:80:49:99:e2:97:91:d2:43:4d:
                    86:9a:d1:ba:52:2e:f3:98:d6:8f:f9:5f:c0:61:3b:
                    cc:13:bf:30:fb:03:74:4e:07:73:3d:a2:ea:15:0b:
                    64:ea:93:c6:c3:c4:e7:72:5d:b6:29:46:4c:a1:6b:
                    3d:70:cf:bd:96:cd:ff:73:5c:69:28:a0:4f:b7:44:
                    b1:b6:42:29:d4:b1:36:35:75:52:a8:72:98:ed:ef:
                    a1:e2:0c:59:9d:82:88:ad:94:c7:c3:58:79:52:29:
                    73:93:fd:a9:50:d4:10:e5:07:e5:26:0c:38:04:52:
                    92:ea:94:20:af:55:ae:f0:88:ca:0c:9e:31:e9:ce:
                    5d:ff:dc:1f:ee:d7:ff:47:75:fc:b2:ca:82:d7:da:
                    45:99:f6:e3:14:73:38:a1:e9:05:1e:a2:9b:1a:a9:
                    e7:87:43:26:dc:bd:f7:a3:73:d7:ad:9c:3f:81:3d:
                    a2:aa:97:67:d9:eb:6d:59:e4:3f:a6:bf:59:84:77:
                    18:1a:29:56:ce:61:19:3d:dd:51:cc:a5:f0:bc:22:
                    f4:4a:e7:cd:62:f4:14:5b:3a:11:77:a1:77:be:8a:
                    87:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:4D:A7:C3:DD:AB:9E:D0:17:29:AE:0F:4A:03:97:C2:1F:D0:16:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f9f4e18f-274c-3a7c-823a-665d0bb80ead.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:d2:bf:4b:6d:df:c1:74:dc:4f:48:c7:0b:47:53:23:53:a4:
         b5:c4:8a:b8:b4:6f:f3:d7:05:28:46:a7:e6:72:d6:50:b6:a9:
         10:4e:d6:53:3d:62:94:03:4e:b6:13:dc:b2:d5:4f:42:8b:8e:
         68:94:f1:7a:54:dd:06:8b:28:8a:01:2a:87:45:93:bd:29:ea:
         38:c1:f3:2e:b6:70:55:39:38:98:de:00:76:81:48:2b:83:0a:
         a9:84:b1:65:a8:ce:9e:7b:cf:c0:e6:24:3e:ea:21:cf:7c:dd:
         2d:44:93:f9:f8:95:14:3f:1f:ce:25:80:cf:0f:3c:3e:40:f9:
         08:ce:56:00:06:6a:4a:8f:82:e6:85:57:be:5a:a3:7f:1c:66:
         eb:10:8b:11:50:00:a1:a1:2a:2d:1d:d1:03:f7:07:d2:5f:01:
         0c:2d:93:6e:42:34:10:3e:c0:a3:30:15:e1:2e:8a:55:81:e6:
         bc:0c:fc:77:5f:52:a6:c9:64:62:6c:b8:bc:eb:49:b0:7e:bb:
         fb:dc:55:f0:30:89:1c:86:83:1c:c6:14:6e:54:29:17:4f:c1:
         65:48:8c:4f:61:ae:b7:33:0e:f9:dd:43:28:de:57:23:33:ce:
         ab:e7:aa:83:85:b0:ea:0d:57:f4:08:3a:49:85:57:45:4b:28:
         bb:fb:45:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:03:08 2025 by rpki-client