Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cd789731-b7d6-499d-bd13-8fae75220140/73fd3813-4da8-358c-950f-e5ad3865b3aa.roa
File:                     73fd3813-4da8-358c-950f-e5ad3865b3aa.roa (raw, json)
Hash identifier:          me96EuvIcE+kEvBSnlanLOaidxzAjhjakhpPX6DiM4s=
Subject key identifier:   51:E6:BB:33:A1:98:BD:94:F7:B1:7C:F0:02:74:4F:09:3D:44:77:04
Certificate issuer:       /CN=cd789731-b7d6-499d-bd13-8fae75220140
Certificate serial:       010D0C9F43285849350EA91A23553103FE34F800
Authority key identifier: 47:7D:85:A3:D9:21:EC:00:74:C9:D4:CA:61:B7:96:16:4E:D4:A3:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cd789731-b7d6-499d-bd13-8fae75220140.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cd789731-b7d6-499d-bd13-8fae75220140/73fd3813-4da8-358c-950f-e5ad3865b3aa.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     16922
IP address blocks:        156.110.144.0/24 maxlen: 24
                          156.110.145.0/24 maxlen: 24
                          156.110.146.0/24 maxlen: 24
                          156.110.147.0/24 maxlen: 24
                          156.110.148.0/24 maxlen: 24
                          156.110.149.0/24 maxlen: 24
                          156.110.150.0/24 maxlen: 24
                          156.110.151.0/24 maxlen: 24
                          156.110.152.0/24 maxlen: 24
                          156.110.153.0/24 maxlen: 24
                          156.110.154.0/24 maxlen: 24
                          156.110.155.0/24 maxlen: 24
                          156.110.156.0/24 maxlen: 24
                          156.110.157.0/24 maxlen: 24
                          156.110.158.0/24 maxlen: 24
                          156.110.159.0/24 maxlen: 24
                          156.110.160.0/24 maxlen: 24
                          156.110.161.0/24 maxlen: 24
                          156.110.162.0/24 maxlen: 24
                          156.110.163.0/24 maxlen: 24
                          156.110.164.0/24 maxlen: 24
                          156.110.165.0/24 maxlen: 24
                          156.110.166.0/24 maxlen: 24
                          156.110.167.0/24 maxlen: 24
                          156.110.168.0/24 maxlen: 24
                          156.110.169.0/24 maxlen: 24
                          156.110.170.0/24 maxlen: 24
                          156.110.171.0/24 maxlen: 24
                          156.110.172.0/24 maxlen: 24
                          156.110.173.0/24 maxlen: 24
                          156.110.174.0/24 maxlen: 24
                          156.110.175.0/24 maxlen: 24
                          156.110.176.0/24 maxlen: 24
                          156.110.177.0/24 maxlen: 24
                          156.110.178.0/24 maxlen: 24
                          156.110.179.0/24 maxlen: 24
                          156.110.180.0/24 maxlen: 24
                          156.110.181.0/24 maxlen: 24
                          156.110.182.0/24 maxlen: 24
                          156.110.183.0/24 maxlen: 24
                          156.110.184.0/24 maxlen: 24
                          156.110.185.0/24 maxlen: 24
                          156.110.186.0/24 maxlen: 24
                          156.110.187.0/24 maxlen: 24
                          156.110.188.0/24 maxlen: 24
                          156.110.189.0/24 maxlen: 24
                          156.110.190.0/24 maxlen: 24
                          156.110.191.0/24 maxlen: 24
                          156.110.240.0/24 maxlen: 24
                          156.110.241.0/24 maxlen: 24
                          156.110.242.0/24 maxlen: 24
                          156.110.243.0/24 maxlen: 24
                          156.110.244.0/24 maxlen: 24
                          156.110.245.0/24 maxlen: 24
                          156.110.246.0/24 maxlen: 24
                          156.110.247.0/24 maxlen: 24
                          156.110.248.0/24 maxlen: 24
                          156.110.249.0/24 maxlen: 24
                          156.110.250.0/24 maxlen: 24
                          156.110.251.0/24 maxlen: 24
                          156.110.252.0/24 maxlen: 24
                          156.110.253.0/24 maxlen: 24
                          156.110.254.0/24 maxlen: 24
                          156.110.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cd789731-b7d6-499d-bd13-8fae75220140/cd789731-b7d6-499d-bd13-8fae75220140.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cd789731-b7d6-499d-bd13-8fae75220140/cd789731-b7d6-499d-bd13-8fae75220140.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cd789731-b7d6-499d-bd13-8fae75220140.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:a9:1a:23:55:31:03:fe:34:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd789731-b7d6-499d-bd13-8fae75220140
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=c728a23c-9c46-4152-abbf-971a4b9017c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:63:0f:ab:11:13:c3:ec:87:c9:a6:29:40:fd:
                    b2:a3:62:8f:e6:db:50:1a:1e:60:f7:8c:b4:47:fe:
                    3a:12:d4:35:3d:9c:43:05:f5:0c:97:cc:53:65:28:
                    57:e8:6e:1d:50:61:13:56:b8:b1:61:4d:ce:57:27:
                    7f:65:13:0d:e9:0b:aa:55:8e:b7:8e:09:df:71:62:
                    2b:aa:a5:d8:bc:51:a8:6b:79:f8:89:6b:7c:ec:fb:
                    4e:b7:0c:c8:9f:60:dc:c7:cb:ce:4e:d0:04:8e:17:
                    60:65:58:a4:0a:2a:b5:87:b5:1f:2b:d7:42:07:60:
                    68:2d:f4:1c:99:7e:48:06:36:b7:cd:fd:9e:4a:28:
                    0d:40:ca:a7:db:c2:b9:d8:66:93:9c:a0:9c:5b:ac:
                    8d:78:87:cb:69:6b:08:f4:95:3d:94:28:8b:e3:02:
                    b7:84:ab:93:ac:e3:95:42:59:57:31:62:50:4c:c3:
                    a8:d2:97:c5:f3:b9:2d:35:d9:15:c9:ff:0f:96:9a:
                    ba:ef:4f:c6:f8:81:71:9f:f3:9e:66:5c:9c:96:cf:
                    e5:7d:d6:02:08:ee:2e:16:ad:5f:e8:10:da:bb:5d:
                    9d:26:a1:21:15:0b:45:1d:ca:1c:80:f4:a3:13:e8:
                    7f:4f:51:4f:c0:16:58:92:c1:05:66:38:ff:a3:9d:
                    da:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:E6:BB:33:A1:98:BD:94:F7:B1:7C:F0:02:74:4F:09:3D:44:77:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cd789731-b7d6-499d-bd13-8fae75220140/73fd3813-4da8-358c-950f-e5ad3865b3aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cd789731-b7d6-499d-bd13-8fae75220140/cd789731-b7d6-499d-bd13-8fae75220140.crl

            X509v3 Authority Key Identifier:
                keyid:47:7D:85:A3:D9:21:EC:00:74:C9:D4:CA:61:B7:96:16:4E:D4:A3:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cd789731-b7d6-499d-bd13-8fae75220140.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.110.144.0-156.110.191.255
                  156.110.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:92:3d:2b:a2:2a:df:9c:f9:3b:0c:a4:00:97:82:b4:07:5e:
         c2:d7:31:e0:7e:c4:01:de:bd:94:28:5a:41:48:18:88:52:d7:
         fe:90:e9:36:41:da:1c:a2:35:cb:07:49:41:cc:8d:a0:d9:38:
         26:60:c4:52:97:bf:6f:66:6b:82:26:d1:78:9a:c7:6b:b7:40:
         5e:bb:5b:26:8a:8c:6e:2e:a8:58:e0:3e:a6:d5:16:da:f6:81:
         cb:4a:7d:93:60:f5:28:2a:47:18:c5:94:77:58:78:12:b1:46:
         8b:92:7c:27:9c:7e:a3:15:05:47:7e:c6:09:79:ea:2a:79:53:
         7b:f2:b7:5f:39:22:72:f1:45:42:e7:5d:2a:eb:3b:8d:cb:76:
         f6:2a:06:7c:54:db:59:29:46:24:6b:78:c9:08:39:83:09:03:
         22:05:b3:d0:83:fd:d3:2a:f2:2a:97:22:91:b2:0c:d1:fa:bd:
         94:dd:54:40:20:d6:e2:53:b5:b3:e8:19:24:b1:41:d2:f5:4b:
         b8:f2:88:f1:81:f2:5c:d7:ae:0a:6e:d2:9b:dc:1f:6c:9f:21:
         14:f5:93:a3:09:a2:63:24:5c:7d:4f:51:cd:f0:d8:a5:3d:18:
         a2:9c:66:67:f4:43:ce:8d:19:f6:28:7f:34:c0:a9:fb:9d:7b:
         33:9d:4f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:00:23 2025 by rpki-client