Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/00adbd42-33fc-471d-8b5d-c9ffe622ea2a/a4249787-a790-3cf8-8678-56770f696be4.roa
File:                     a4249787-a790-3cf8-8678-56770f696be4.roa (raw, json)
Hash identifier:          w/F1YoTM3KNcS4kffyhW5DNsh92BEGBSloc6DswHaoU=
Subject key identifier:   A8:DE:3B:29:E5:83:0B:2A:1F:96:6B:A9:AB:46:FB:74:D5:4E:4A:13
Certificate issuer:       /CN=00adbd42-33fc-471d-8b5d-c9ffe622ea2a
Certificate serial:       010D0C9F4328584968B42776DFF3E6622864A600
Authority key identifier: 93:27:BA:88:AD:D9:16:D7:4A:BA:88:E3:00:E1:16:BD:A4:D6:1D:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/00adbd42-33fc-471d-8b5d-c9ffe622ea2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/00adbd42-33fc-471d-8b5d-c9ffe622ea2a/a4249787-a790-3cf8-8678-56770f696be4.roa
Signing time:             Fri 04 Apr 2025 01:00:47 +0000
ROA not before:           Fri 04 Apr 2025 01:00:47 +0000
ROA not after:            Thu 03 Jul 2025 01:00:47 +0000
asID:                     26685
IP address blocks:        155.107.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/00adbd42-33fc-471d-8b5d-c9ffe622ea2a/00adbd42-33fc-471d-8b5d-c9ffe622ea2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/00adbd42-33fc-471d-8b5d-c9ffe622ea2a/00adbd42-33fc-471d-8b5d-c9ffe622ea2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/00adbd42-33fc-471d-8b5d-c9ffe622ea2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:68:b4:27:76:df:f3:e6:62:28:64:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00adbd42-33fc-471d-8b5d-c9ffe622ea2a
        Validity
            Not Before: Apr  4 01:00:47 2025 GMT
            Not After : Jul  3 01:00:47 2025 GMT
        Subject: CN=b6d1132a-b756-4957-a0d5-49bf71a16932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:85:57:e0:ec:df:07:7a:22:72:6e:d7:4f:26:
                    20:35:57:ec:27:04:7d:f9:55:9f:da:9d:8e:77:5e:
                    19:ba:77:59:a7:4b:8d:b7:d1:df:b5:a0:ed:26:9c:
                    13:11:6c:a1:60:23:3b:3b:93:1b:38:9a:74:da:e5:
                    43:87:64:8e:57:55:93:dc:9a:3e:d3:1e:e1:16:8b:
                    c7:af:a8:e0:98:2b:ca:a2:59:05:94:cf:66:d1:64:
                    7c:29:f9:91:c8:48:a9:6d:35:cf:64:ae:4f:c3:f8:
                    a1:0e:b0:44:c9:3c:6a:51:1f:00:a6:bc:7c:30:df:
                    94:32:30:31:64:d0:bd:66:00:de:6f:1f:6a:a9:b1:
                    1d:e8:3d:1a:ef:d3:42:da:92:65:41:3f:97:c1:36:
                    97:15:3c:ab:fa:07:96:c3:c7:01:72:20:68:94:d6:
                    e4:43:76:db:10:4c:a6:f0:3f:e2:e9:12:21:ad:56:
                    46:9c:b3:75:40:6a:19:f9:6e:ee:89:36:fe:22:97:
                    fc:08:09:de:22:a7:58:4b:b5:62:f0:90:5d:2a:a2:
                    2d:44:c8:64:94:4c:5e:7f:47:e0:71:2c:39:56:c8:
                    f8:89:f1:39:37:37:90:97:95:07:ae:c8:54:97:ab:
                    e7:32:e8:53:45:79:50:2a:96:81:db:14:3b:0b:05:
                    fe:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:DE:3B:29:E5:83:0B:2A:1F:96:6B:A9:AB:46:FB:74:D5:4E:4A:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/00adbd42-33fc-471d-8b5d-c9ffe622ea2a/a4249787-a790-3cf8-8678-56770f696be4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/00adbd42-33fc-471d-8b5d-c9ffe622ea2a/00adbd42-33fc-471d-8b5d-c9ffe622ea2a.crl

            X509v3 Authority Key Identifier:
                keyid:93:27:BA:88:AD:D9:16:D7:4A:BA:88:E3:00:E1:16:BD:A4:D6:1D:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/00adbd42-33fc-471d-8b5d-c9ffe622ea2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.107.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:83:59:d2:34:4c:d7:76:e6:41:f1:40:89:6a:4a:06:a7:5a:
         93:cf:96:0d:a6:77:9b:a6:2f:b2:fa:a5:0c:22:5e:2c:3b:68:
         1c:86:3b:dd:01:5e:2a:6d:33:52:82:84:78:dc:40:36:79:7e:
         0e:b7:13:f8:30:fa:10:d8:6a:d6:a5:ad:81:10:03:9f:42:7d:
         15:94:38:30:9f:35:0c:ef:14:f7:bc:0e:2b:7e:b0:86:23:70:
         df:09:7c:a5:6c:ab:d6:de:1e:14:c7:8e:6b:c4:94:08:ef:8a:
         b9:cb:41:d5:6a:54:30:89:e0:5e:b7:b1:de:c1:b9:57:9b:16:
         a0:04:7f:66:83:cb:3a:8a:d4:3d:fa:0e:87:42:74:73:7a:ff:
         54:24:ab:19:e0:74:e6:5a:8b:d6:92:3e:89:4a:c1:54:ae:77:
         a0:0f:63:00:85:ba:30:ef:f4:f2:39:5b:9d:ac:28:51:0e:e9:
         23:a0:98:e3:75:13:76:f6:bc:63:54:22:ba:72:06:af:bd:56:
         37:10:e5:5d:02:11:5e:ad:47:2c:5e:83:3f:55:f9:93:d4:17:
         67:b1:35:2a:52:90:2e:f7:44:e7:59:66:1a:c7:24:6c:12:f6:
         4c:bb:82:98:22:da:8d:08:ea:a4:b5:21:02:ed:8c:02:a8:47:
         af:ae:10:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:28:01 2025 by rpki-client