Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/64217b13-4cfb-30d9-8c26-10f376e1c0c5.roa
File:                     64217b13-4cfb-30d9-8c26-10f376e1c0c5.roa (raw, json)
Hash identifier:          cflKEPay/dN965Vw6pIL77ohS7018PwQNBLOheWg/TY=
Subject key identifier:   2A:C6:68:D3:91:A4:39:28:77:8A:07:AE:D9:D6:12:B8:25:BC:FE:C3
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858491246EC61A56B738F99077D80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/64217b13-4cfb-30d9-8c26-10f376e1c0c5.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     397231
IP address blocks:        156.154.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:ec:61:a5:6b:73:8f:99:07:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=377ef7d3-eea8-492d-815c-e1356c349848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:52:c0:af:9f:bb:23:f1:1b:41:eb:57:ed:fc:
                    e1:7c:0c:10:5d:b3:77:71:3f:a8:b3:aa:35:44:7c:
                    97:19:9a:c3:7a:f4:22:20:d0:b9:26:c9:aa:e7:c0:
                    b7:2e:7b:a3:b1:f0:f0:3c:71:d9:90:6e:7e:64:8f:
                    e5:ff:70:82:1f:5e:89:92:af:1d:8e:a7:d5:49:71:
                    cf:dc:3c:d4:59:1f:1e:7e:6b:6c:53:ed:08:13:80:
                    42:88:95:45:35:14:d7:1e:73:d0:9d:66:ab:7c:98:
                    19:cf:04:26:7e:99:44:af:7a:5c:12:59:9a:c9:85:
                    73:65:d4:fb:50:87:20:c8:69:7e:27:50:1b:a4:70:
                    0e:e9:20:b1:7d:3e:7b:37:b4:fb:9f:c5:dc:77:6f:
                    e8:9c:69:ac:3d:3f:c8:50:0b:f9:80:10:19:26:96:
                    34:af:73:2a:bc:70:54:c3:03:76:d2:11:56:81:21:
                    92:91:9a:15:4d:bb:9f:5f:47:0c:00:c2:09:17:7a:
                    e4:58:88:33:4f:93:db:81:af:53:45:8e:cd:c4:6f:
                    66:48:2b:46:6e:16:67:a5:10:f8:a5:3b:33:a7:f9:
                    0a:ac:c9:c9:e7:fd:56:16:45:be:ee:e7:4a:ee:3f:
                    7e:77:2e:4e:ff:7c:97:fd:f7:9f:48:ad:d1:48:9c:
                    73:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:C6:68:D3:91:A4:39:28:77:8A:07:AE:D9:D6:12:B8:25:BC:FE:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/64217b13-4cfb-30d9-8c26-10f376e1c0c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:37:32:5f:52:44:4a:df:ad:34:f1:08:77:f7:cc:18:af:fe:
         5b:f5:62:6e:84:8d:18:f0:f2:9d:fe:67:5e:83:a0:05:27:f1:
         56:9a:6b:8e:52:fe:93:59:e3:47:6c:11:62:ce:da:df:df:e8:
         c0:4d:fa:19:d7:02:1d:a7:c1:96:b4:4f:34:25:99:c1:14:15:
         65:23:46:bb:72:9e:d4:db:0b:0c:13:66:07:b4:4a:92:04:e0:
         3c:46:66:8b:7f:d9:4f:e5:fd:c5:b8:79:26:2a:ea:52:b1:9b:
         91:a9:b1:25:5e:c8:11:05:40:40:4a:d3:0e:af:f7:30:ec:0f:
         a2:81:28:96:ff:23:20:0f:97:fb:f7:a8:a4:66:1d:df:50:d9:
         6a:a5:bb:d9:06:f1:7f:65:ee:c3:da:61:4a:1b:74:96:49:8d:
         26:99:7d:b6:c8:10:15:32:58:29:17:2d:a6:7f:30:14:2b:b1:
         a5:f0:a7:65:6d:ae:9b:f4:fc:7c:cc:81:b7:f8:a4:d7:8d:2f:
         c8:99:1e:fb:69:37:b0:13:a2:c7:57:ef:f7:ba:57:d8:d8:6b:
         b7:3e:4f:9a:0a:75:8e:20:99:c6:ca:5a:5f:61:8b:d1:48:76:
         55:58:2b:16:7d:8f:85:96:ee:c4:02:66:f4:ff:bf:41:74:95:
         5b:76:9b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 07:49:46 2025 by rpki-client