Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/01b9e03f-a287-37cc-88a4-af4b68be061d.roa
File:                     01b9e03f-a287-37cc-88a4-af4b68be061d.roa (raw, json)
Hash identifier:          pDJCB2GDkKWoo9cKwy0s96ElNwHGSIJgu5EfX3+FtkU=
Subject key identifier:   61:4F:E2:B9:C6:DA:3A:1A:F0:74:64:96:E0:D0:F7:6E:50:B7:FC:74
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285848A996582E72F50B982C260AE0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/01b9e03f-a287-37cc-88a4-af4b68be061d.roa
Signing time:             Sat 25 Jan 2025 14:00:52 +0000
ROA not before:           Sat 25 Jan 2025 14:00:52 +0000
ROA not after:            Fri 25 Apr 2025 13:00:52 +0000
asID:                     397232
IP address blocks:        156.154.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Feb 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a9:96:58:2e:72:f5:0b:98:2c:26:0a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jan 25 14:00:52 2025 GMT
            Not After : Apr 25 13:00:52 2025 GMT
        Subject: CN=c291f6bd-dce8-48cf-8b5d-5eb14e97e40c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:95:31:a5:d8:f2:34:2a:a7:5b:17:c1:95:72:
                    19:06:b4:7a:dc:81:dd:52:20:69:97:78:0e:5c:e9:
                    27:bf:10:4f:af:ba:48:9f:22:26:b4:fe:9d:4c:cc:
                    19:e3:f1:8e:a3:d6:17:7a:82:96:4b:4d:34:7c:91:
                    e6:8f:28:ed:f7:0a:2d:e9:65:02:a9:0a:65:7e:53:
                    f2:45:aa:5e:92:ca:b3:4d:f2:ad:85:2b:af:60:0c:
                    47:09:0e:58:07:f4:07:5f:ff:15:70:db:b4:db:1e:
                    09:81:34:56:cd:15:69:0f:44:bc:18:40:60:5d:d7:
                    1f:18:66:40:e4:02:25:5d:2e:d5:68:53:fe:b1:f2:
                    a6:c9:e8:3c:39:28:d6:4a:47:57:36:97:62:b1:b4:
                    00:a8:31:48:69:65:5a:84:80:7f:e0:a7:af:9a:15:
                    41:4b:fc:6b:b2:fc:a7:a8:16:bc:34:b2:94:e6:06:
                    d9:47:bc:57:a0:65:60:68:07:21:ea:7f:7d:08:70:
                    28:75:d3:14:0d:c2:ed:64:3b:bc:e8:51:f5:d6:f1:
                    92:4b:9b:4f:b7:ba:1c:5c:0c:0e:5c:17:ba:be:1a:
                    fd:7b:00:b4:a1:f6:da:6c:64:85:37:d4:cb:4e:e3:
                    87:35:ff:a4:05:3e:8a:27:6f:ef:1e:ab:01:3f:6b:
                    74:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:4F:E2:B9:C6:DA:3A:1A:F0:74:64:96:E0:D0:F7:6E:50:B7:FC:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/01b9e03f-a287-37cc-88a4-af4b68be061d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:9c:fc:69:e2:03:e6:b0:d2:98:6b:c4:65:68:b2:0c:6a:47:
         9e:25:05:12:9f:4c:35:90:0e:e2:d6:e8:f8:37:33:52:3c:ef:
         62:15:09:11:cf:53:d7:fc:2c:ba:2d:ec:9f:7b:85:5e:80:f1:
         65:4d:c7:56:0c:a9:4c:8b:6e:1a:6b:12:34:b6:02:a1:8d:40:
         b4:9d:6b:86:81:8f:97:9c:d3:9b:a2:4a:a1:4c:c1:19:07:7c:
         58:f8:55:ea:fc:7f:92:d9:0b:68:ee:e7:0d:bb:0f:ba:f3:02:
         8e:5f:02:cd:25:69:37:97:0c:81:58:a0:d8:b4:4e:f7:4b:ed:
         11:3f:6a:49:3d:df:c3:59:c1:9c:c9:35:63:70:10:b1:19:8d:
         81:78:62:92:c1:ed:08:c0:d9:a8:d7:21:84:18:3f:78:dd:9c:
         47:60:7e:69:c3:88:75:02:30:49:be:b9:64:aa:4e:42:16:75:
         e4:91:c2:96:03:c3:53:39:71:78:74:a3:e0:c6:eb:8b:c8:19:
         26:f0:8d:20:a5:ad:cf:c9:b6:13:cd:ce:93:7e:67:fa:ad:38:
         22:a6:6d:46:8c:b6:e0:e3:ee:0b:95:f3:e7:64:a5:d0:59:63:
         fc:af:18:cd:0e:7b:0b:28:5c:72:b2:f1:23:a4:4e:ae:89:11:
         3c:69:1b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:44:17 2025 by rpki-client