Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/91afe88d-f079-3905-9a9e-e8bda2bc10fd.roa
File:                     91afe88d-f079-3905-9a9e-e8bda2bc10fd.roa (raw, json)
Hash identifier:          dIqnIS1BpAnTbDMAAhb5PCA9z1W9ARjjKMgXvDD4py0=
Subject key identifier:   8B:CE:ED:E2:BB:C6:8A:B6:47:CC:66:E3:50:08:BF:52:D3:5A:C9:B7
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285848BD2105D8BA1BEA638BD1D1C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/91afe88d-f079-3905-9a9e-e8bda2bc10fd.roa
Signing time:             Sat 01 Feb 2025 14:00:51 +0000
ROA not before:           Sat 01 Feb 2025 14:00:51 +0000
ROA not after:            Fri 02 May 2025 13:00:51 +0000
asID:                     397219
IP address blocks:        156.154.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Feb 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bd:21:05:d8:ba:1b:ea:63:8b:d1:d1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Feb  1 14:00:51 2025 GMT
            Not After : May  2 13:00:51 2025 GMT
        Subject: CN=99b5a1f4-86f1-4760-9e24-e7f8e810770b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:2b:12:81:8a:7b:91:81:32:3a:ea:d9:8e:d4:
                    b1:22:41:40:2d:cd:ba:db:80:84:81:5b:3b:e4:73:
                    f7:99:d5:ec:21:d2:28:e4:94:51:f6:78:32:be:5a:
                    94:ca:6c:c7:5d:d3:7f:8f:26:b2:13:de:fd:51:24:
                    2e:67:78:35:1b:56:33:d4:dc:59:99:cf:55:45:b9:
                    7b:d3:72:1c:61:64:e3:4e:92:24:bc:20:8f:c8:fc:
                    68:be:14:e2:49:4a:26:79:5f:45:d4:29:80:20:5e:
                    dd:c3:9e:7d:92:80:d8:68:36:ba:0f:2d:be:a7:bc:
                    09:33:5f:a6:62:8c:d2:06:a9:22:83:fb:46:41:77:
                    c9:14:80:98:ac:ac:d8:5c:7d:a9:77:a4:02:3d:56:
                    1a:50:24:aa:a2:93:e0:27:25:3a:43:8a:83:09:f9:
                    16:e4:94:bc:c5:3e:c2:04:f2:9b:07:6d:09:6a:0c:
                    13:d7:89:af:61:95:d0:ab:75:c4:b8:f3:21:ee:f8:
                    bb:83:d4:76:6e:bf:9d:d8:a1:8b:f2:f3:4d:2c:09:
                    fa:05:a1:56:9d:b0:9e:d4:4d:65:35:c1:b7:ec:42:
                    b2:e1:4f:8f:e4:67:c4:b9:23:94:7f:43:72:24:1d:
                    83:32:f7:c2:48:ee:f8:00:11:39:73:a1:ec:91:f0:
                    30:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:CE:ED:E2:BB:C6:8A:B6:47:CC:66:E3:50:08:BF:52:D3:5A:C9:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/91afe88d-f079-3905-9a9e-e8bda2bc10fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:e6:da:4f:b9:5f:01:cd:60:18:12:1d:11:4e:d8:8d:5e:eb:
         cf:24:f1:15:a2:7d:a5:70:b3:7c:a2:3c:78:f1:bb:e3:ba:cb:
         16:97:31:f8:34:db:c2:05:57:66:a5:8d:09:a0:3e:39:28:d5:
         31:f0:99:04:c3:a7:8a:ef:00:9a:ea:95:4b:0d:48:8a:55:f6:
         86:b9:e5:0f:8c:05:d9:5b:e1:7a:df:08:6c:bf:b4:ca:9f:95:
         05:93:35:b4:9e:48:f6:ee:26:d4:6b:3f:47:38:08:a0:db:c9:
         26:97:cc:05:cd:d5:af:e7:07:4d:2d:8d:9c:5f:b5:b4:c5:57:
         1c:73:ea:71:d7:a4:8b:5c:f6:ca:de:03:4e:90:de:4b:91:e0:
         70:2f:b7:ef:14:b0:70:9c:2f:59:c9:23:52:5e:70:83:bc:23:
         fb:dd:1a:4e:75:d5:5b:32:53:38:87:f8:73:8c:28:49:6f:e2:
         c4:96:83:c4:a3:76:f3:a1:39:3a:ce:6a:09:f0:50:17:8e:e2:
         6e:a0:dd:df:9e:c1:68:da:70:a0:a2:74:77:46:66:af:ac:8c:
         74:db:31:49:69:99:8c:f7:67:02:8c:a1:a9:5e:3d:d9:b6:cb:
         88:98:25:53:39:85:72:aa:68:f6:7f:f1:5c:38:25:3f:c6:8e:
         2f:20:8d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:47:30 2025 by rpki-client