Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9074cab2-9a72-375b-8a0e-690da45e15b1.roa
File:                     9074cab2-9a72-375b-8a0e-690da45e15b1.roa (raw, json)
Hash identifier:          nOQZOqakT4UkMOx4BirZbkKdHry5At3E5jbLrwKUaDk=
Subject key identifier:   64:4F:CF:20:6B:CF:A0:86:6C:2B:11:DF:CD:E6:AE:64:36:AD:A4:2D
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858486C2B2A32DC2E9A06467C0D80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9074cab2-9a72-375b-8a0e-690da45e15b1.roa
Signing time:             Fri 03 Jan 2025 14:00:51 +0000
ROA not before:           Fri 03 Jan 2025 14:00:51 +0000
ROA not after:            Thu 03 Apr 2025 13:00:51 +0000
asID:                     397215
IP address blocks:        156.154.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Feb 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6c:2b:2a:32:dc:2e:9a:06:46:7c:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jan  3 14:00:51 2025 GMT
            Not After : Apr  3 13:00:51 2025 GMT
        Subject: CN=0983ce34-29a3-4092-b0cb-35540e2f84e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ca:cc:57:6a:e9:b9:40:fb:e5:c6:30:e3:87:
                    86:82:4f:1d:5d:7d:03:a7:7a:14:17:b5:5d:b4:fe:
                    43:2e:2d:ad:9a:63:39:38:02:59:e2:d4:a2:2c:5a:
                    1f:1e:64:8c:aa:c6:a1:f0:2e:80:c7:a4:ae:23:b1:
                    be:5a:ee:ba:88:88:85:4d:de:99:df:f8:37:be:f6:
                    f0:bd:27:0e:50:e9:51:d3:bb:f8:fa:41:50:02:29:
                    e5:df:ea:cb:d8:6d:90:6b:df:21:d2:07:45:ec:2f:
                    02:57:ed:08:0c:8a:04:4c:18:16:cf:c6:ec:d4:c9:
                    86:c7:7b:bc:94:a9:91:19:b6:32:ad:b1:53:83:d2:
                    26:0c:ed:ac:7e:f7:00:3d:7e:d2:d7:8c:5f:f1:98:
                    33:55:f0:c4:08:47:0b:47:34:64:56:5f:e3:48:96:
                    44:08:4c:99:75:94:75:c3:c7:fc:55:0f:d8:00:43:
                    02:d0:ff:71:b5:20:f3:91:8e:ca:2e:30:1d:f1:20:
                    60:12:ea:49:c2:69:b1:6e:1a:83:94:68:7c:9c:a6:
                    07:8c:38:a5:39:eb:47:30:41:86:21:09:3f:b6:3a:
                    17:19:3d:2d:8c:dc:4d:ec:fd:59:0d:84:ba:b7:88:
                    56:d4:37:ea:12:f3:5d:d8:90:37:63:17:b0:2f:91:
                    d0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:4F:CF:20:6B:CF:A0:86:6C:2B:11:DF:CD:E6:AE:64:36:AD:A4:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9074cab2-9a72-375b-8a0e-690da45e15b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:61:a6:02:3d:2b:fd:2c:37:25:84:30:cd:24:b5:ed:f9:13:
         04:44:51:f6:71:f3:b8:9c:df:8f:0e:1c:fd:a2:05:b3:33:76:
         8b:52:83:16:75:5e:55:c1:b9:cf:08:0a:26:44:30:c1:ec:28:
         07:f4:75:36:47:c6:f8:59:a3:ac:8d:b1:5b:54:3e:2c:09:48:
         61:95:1e:da:94:b2:ad:9a:be:b8:d6:7c:46:5a:e7:5b:dd:9e:
         29:a1:4d:2a:05:87:5a:f3:17:b5:26:41:91:f1:ba:e4:12:8c:
         5f:e3:fa:26:d4:8f:3f:8b:68:92:9a:43:cf:2e:12:8a:46:8d:
         83:be:dd:6d:6e:33:78:09:68:e7:f7:08:c9:aa:b2:99:73:de:
         aa:79:23:03:29:2f:88:dd:b8:65:be:29:90:bc:d1:69:da:b8:
         90:de:07:b2:e6:c8:ac:a2:4e:2e:b3:9f:b1:de:4a:0f:8d:6b:
         f1:03:ab:a0:e8:d9:32:c8:92:87:ca:b3:4e:f8:87:81:70:07:
         a9:1f:18:bb:cf:ad:62:47:70:72:d8:c1:de:42:a7:72:8e:a0:
         c7:8f:68:54:3d:f3:51:2d:23:3e:8b:1f:9d:b3:23:b6:97:64:
         d9:d9:b3:6d:1c:f5:32:08:6c:83:29:bf:43:3b:40:07:7d:f1:
         2f:c0:af:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:53:44 2025 by rpki-client