Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/010fe958-ab74-3c40-bf36-139d303747df.roa
File:                     010fe958-ab74-3c40-bf36-139d303747df.roa (raw, json)
Hash identifier:          mkSNCcAt1UunBKpj68qJK42nZryVDt0yvukYiPlM3ys=
Subject key identifier:   4D:8D:9B:01:A3:19:83:6E:80:30:CE:83:1E:6B:88:5A:3F:C8:9F:AD
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285848A9965A7D57C521E86F98CE40
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/010fe958-ab74-3c40-bf36-139d303747df.roa
Signing time:             Sat 25 Jan 2025 14:00:52 +0000
ROA not before:           Sat 25 Jan 2025 14:00:52 +0000
ROA not after:            Fri 25 Apr 2025 13:00:52 +0000
asID:                     19905
IP address blocks:        156.154.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a9:96:5a:7d:57:c5:21:e8:6f:98:ce:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jan 25 14:00:52 2025 GMT
            Not After : Apr 25 13:00:52 2025 GMT
        Subject: CN=ac4e0f85-2dc1-4334-afc6-171896e6007b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:85:c9:9b:8a:90:b7:07:0e:a9:cf:83:25:e2:
                    1a:32:9f:6d:7b:84:0a:75:f5:f0:80:99:c3:0b:d3:
                    3d:73:54:e2:ed:cd:5a:be:65:94:ac:18:af:37:6c:
                    74:ae:a7:21:44:17:e3:de:4a:ed:98:7b:3a:62:16:
                    b7:6c:22:2f:14:af:86:34:2d:49:80:19:7c:f9:ba:
                    5c:45:84:e2:38:73:9f:c6:ca:7d:03:bf:61:59:bb:
                    00:68:45:c4:d6:c9:88:d5:ca:53:47:c0:4a:bd:a0:
                    ce:8f:6a:79:40:86:93:fd:72:06:ff:7a:84:2c:77:
                    16:ac:47:11:c3:0f:ed:3a:1e:be:a8:4f:3f:48:fe:
                    16:ca:f2:b2:d8:05:20:0a:ae:d4:7c:a0:c2:b6:c8:
                    4f:9a:aa:9a:dc:7f:ed:88:bc:bd:76:17:51:af:9e:
                    e9:2e:82:bd:85:b7:7c:dc:f0:c3:c6:d4:07:35:ee:
                    3d:57:c1:6d:a8:31:59:b7:9c:26:29:75:6f:cc:cf:
                    8d:82:7b:22:2f:cf:f8:83:01:68:9d:cb:85:14:40:
                    82:74:48:37:4a:d5:27:4c:63:be:36:d9:8f:0b:a4:
                    05:38:4a:ce:09:3e:ee:2b:dd:2e:c2:87:b5:69:63:
                    a8:cd:74:d0:bd:33:09:13:94:cc:24:2e:49:94:39:
                    47:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:8D:9B:01:A3:19:83:6E:80:30:CE:83:1E:6B:88:5A:3F:C8:9F:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/010fe958-ab74-3c40-bf36-139d303747df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:5c:b3:11:30:64:5a:13:61:54:8c:d7:3a:94:c2:05:6a:05:
         2f:7d:f3:15:74:24:16:39:9f:b4:a3:6f:69:54:20:84:ac:5c:
         ad:a0:29:b1:6b:a8:79:b1:40:da:7a:ba:9b:e2:56:33:83:a8:
         a3:bf:1c:8e:b4:36:6a:45:06:2a:b6:60:20:1a:92:8b:c6:38:
         94:03:7e:78:0e:04:93:9d:7b:fb:ec:35:24:bb:46:a3:1c:f2:
         75:aa:20:97:dd:0c:53:f3:01:b1:42:50:e1:8d:93:53:f6:59:
         96:48:61:9d:78:9b:af:e9:4e:3f:98:c8:77:47:b8:18:73:d1:
         83:35:ed:e9:56:50:8f:86:0d:82:e1:eb:74:72:28:c6:dc:b3:
         2b:47:0f:2e:1c:8c:8e:22:da:e6:0a:54:44:d7:57:89:4f:21:
         f9:3d:81:f5:45:4b:21:30:95:2b:15:5f:36:70:8e:11:15:36:
         12:a0:da:75:6b:65:93:27:95:3e:8c:48:34:d1:97:fc:5f:ec:
         0e:b1:c8:03:bc:1d:64:84:17:28:fe:a1:cf:ee:8a:d0:22:1f:
         1a:f4:fc:e1:7e:0c:5e:c0:96:5c:13:ab:ee:78:b2:2d:0f:df:
         24:d7:fe:f6:f8:36:a2:07:d3:9c:d5:69:3d:44:e6:c0:00:a2:
         11:24:eb:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:45:08 2025 by rpki-client