Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a4b2c025-d3ee-3281-97ee-97786b7f6c28.roa
File:                     a4b2c025-d3ee-3281-97ee-97786b7f6c28.roa (raw, json)
Hash identifier:          oD8EOmlEQPk72lNHdU3+Tk7lPAN+NVzn/x8uxB6mFZc=
Subject key identifier:   89:7A:69:D2:55:96:D0:FB:78:84:86:1E:99:FB:FF:5E:50:30:E7:A3
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858487CEB6BC91779659DD07C5100
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a4b2c025-d3ee-3281-97ee-97786b7f6c28.roa
Signing time:             Thu 09 Jan 2025 14:00:52 +0000
ROA not before:           Thu 09 Jan 2025 14:00:52 +0000
ROA not after:            Wed 09 Apr 2025 13:00:52 +0000
asID:                     397234
IP address blocks:        156.154.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Feb 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7c:eb:6b:c9:17:79:65:9d:d0:7c:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jan  9 14:00:52 2025 GMT
            Not After : Apr  9 13:00:52 2025 GMT
        Subject: CN=795af399-34bc-4927-915a-8b3a83e90cd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:13:cc:4b:c2:6e:50:0f:7f:dc:cd:ce:b8:7b:
                    c2:1b:32:20:71:f8:37:fb:87:91:19:8f:08:6c:4d:
                    7c:05:ee:a3:14:bc:e4:89:a6:56:ec:48:bc:3f:a0:
                    89:be:9a:2c:b3:97:6d:32:8f:9a:24:31:c4:ff:77:
                    6a:09:02:e8:23:43:dc:1c:5d:42:8f:79:0c:59:cf:
                    5a:cd:41:39:6d:b0:59:1d:41:e3:e1:fe:1f:da:fb:
                    67:83:3b:a9:1c:87:7c:9d:a3:f9:1d:55:84:58:28:
                    4c:c8:e3:7b:0c:f6:93:2f:94:c2:e7:d1:b2:d7:6f:
                    56:32:0b:df:84:a9:a7:9e:58:dd:d6:80:88:f6:b5:
                    3b:6e:c7:a0:ba:8c:ba:e5:b8:84:34:ee:42:90:a3:
                    78:62:b0:ef:a3:9a:ce:ae:db:08:27:7b:42:d8:7e:
                    d6:3e:07:29:ea:b2:ba:18:c5:79:24:e2:52:22:69:
                    cf:d9:8d:e3:60:2a:eb:6f:71:ee:2a:f6:1f:51:e3:
                    e9:cc:e1:db:bf:a1:56:4f:27:d5:0f:78:69:b0:2d:
                    7c:67:80:2d:89:91:69:eb:2b:9f:49:4f:c3:6d:0b:
                    81:06:b8:f9:d4:d5:d1:79:c8:fd:b5:d4:29:5b:cd:
                    00:65:bc:bd:2a:73:d9:4d:2b:a1:45:5c:86:1f:b6:
                    33:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:7A:69:D2:55:96:D0:FB:78:84:86:1E:99:FB:FF:5E:50:30:E7:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a4b2c025-d3ee-3281-97ee-97786b7f6c28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:99:e4:4c:d7:ac:c8:b7:9b:36:f8:59:57:e8:00:2f:46:20:
         a1:57:f2:03:f6:f8:44:1f:e6:9b:45:a3:ec:5d:8e:27:09:3b:
         90:7d:94:09:ca:fe:05:b3:08:e7:cf:06:86:06:1a:ac:1a:51:
         83:78:75:1e:c8:7f:1a:ce:da:87:a1:67:53:bc:22:11:33:a4:
         ae:a8:35:8c:ee:a1:03:88:de:1e:5c:a4:6c:1a:da:64:65:b4:
         1e:f5:29:9f:48:a4:95:c6:19:a5:38:10:b4:e4:7f:e5:1d:d1:
         86:e8:c8:37:5a:47:60:0d:c4:44:69:d6:ad:12:4e:4c:9d:d7:
         49:6a:28:84:44:b2:5e:de:37:df:4d:e4:43:4f:49:2e:b6:f8:
         e8:2b:57:5a:0b:51:30:a5:ba:d2:39:1b:f1:3d:73:ba:0e:37:
         85:b9:a0:47:a3:8b:7d:10:bc:c7:8b:4d:ab:a0:29:56:21:35:
         e0:c7:d7:95:8d:4f:01:b7:8f:10:76:ee:64:8f:47:e8:88:87:
         10:20:76:cd:99:23:93:09:71:2e:d3:38:1a:f4:f1:78:b7:e1:
         1c:1c:35:10:e8:e2:d2:27:ce:6a:a4:61:bc:18:99:04:34:19:
         93:9d:1d:cc:e0:87:a2:37:05:4f:57:2f:c8:8f:09:37:7b:ab:
         d6:1d:d7:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:54:26 2025 by rpki-client