Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/beb479ba-5a1d-363a-b64f-933c71feac81.roa
File:                     beb479ba-5a1d-363a-b64f-933c71feac81.roa (raw, json)
Hash identifier:          ZlWaL1qu02UurI3n6h2dSkvTnThapTVZCmEhWY0iv2U=
Subject key identifier:   E7:1E:8E:D6:DF:B2:53:77:A8:92:67:47:F1:54:26:77:E5:22:25:F2
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858491246EFE9E2FD25DDE21A0900
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/beb479ba-5a1d-363a-b64f-933c71feac81.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     397227
IP address blocks:        156.154.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:ef:e9:e2:fd:25:dd:e2:1a:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=2bd0f72e-7255-4b69-ae8c-5804e3fb3f9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:20:dc:fb:96:a6:f0:6f:ca:c5:2f:2d:52:63:
                    86:f5:b7:f8:02:4f:87:48:08:ee:52:0c:a2:15:91:
                    7d:6d:6e:a3:1d:69:32:fc:fa:fc:3d:e1:b0:28:1e:
                    a2:64:3b:64:e3:65:13:6d:d7:8a:91:44:e6:68:d2:
                    f4:a7:71:d9:c0:85:39:4c:40:9d:18:74:57:39:44:
                    7e:c7:2f:e8:33:93:7e:ae:f5:d0:78:c0:65:77:55:
                    6b:18:1f:af:14:40:36:72:94:26:b2:6e:3b:48:30:
                    97:97:64:11:28:cd:61:55:6b:ea:af:4b:4f:42:bb:
                    d6:96:e6:1a:35:42:58:e1:cd:d5:b2:3f:4b:03:1a:
                    8d:70:0e:a5:2e:7a:72:9c:26:09:eb:b4:60:96:f6:
                    72:fe:96:49:5b:3f:6e:71:ca:23:fb:1f:bb:60:dc:
                    ec:92:43:f6:54:e5:4c:d8:59:10:11:3d:a2:c1:7d:
                    83:79:1e:a3:81:77:c9:14:29:ec:a3:ad:cd:8e:f8:
                    d2:3c:63:01:0e:25:73:cd:e7:5b:60:e0:c0:a8:6b:
                    73:ba:c2:14:5c:73:a2:2a:57:9a:98:64:0b:7a:e1:
                    c4:70:5f:be:c1:00:ab:63:cf:21:38:2f:ce:11:e2:
                    88:69:0e:1a:8a:8a:ca:6f:1b:8e:44:a0:e8:64:db:
                    2c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:1E:8E:D6:DF:B2:53:77:A8:92:67:47:F1:54:26:77:E5:22:25:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/beb479ba-5a1d-363a-b64f-933c71feac81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:81:ea:32:10:94:7f:a6:0d:00:02:e0:d9:bb:14:50:8c:c6:
         36:29:74:23:99:c4:89:0e:30:7e:7d:2c:57:22:94:f5:23:1c:
         3f:09:6b:92:46:b8:02:41:6f:09:3f:b6:ba:24:0a:51:a5:7e:
         e6:c9:85:b1:f0:6b:4c:25:79:8e:18:3d:c8:41:86:0e:11:f9:
         9d:62:6e:cf:c5:25:52:95:9a:43:90:0a:a2:76:db:61:9c:66:
         db:dc:26:05:a6:6b:7c:0c:97:4f:63:41:9b:1c:1d:46:72:92:
         27:20:68:31:67:36:9f:28:1e:c0:03:f2:81:f3:c2:e0:60:d7:
         dc:00:89:4d:46:c1:3e:b9:4a:d0:05:df:37:8e:d7:42:7e:d8:
         e8:2d:c0:6f:7f:57:a1:24:c6:dc:17:cf:a6:17:41:e0:4d:af:
         7f:70:1f:59:1b:dc:14:c4:90:9d:a0:0b:66:b2:5f:77:ec:37:
         7f:76:57:47:0e:f8:56:fe:94:5e:f0:ef:fb:ed:83:e7:b1:54:
         9c:0c:6e:f3:43:c0:ee:2c:72:9a:f7:1e:cf:b6:79:5d:87:6a:
         ba:3a:78:4c:51:e7:22:e5:eb:8b:15:64:11:64:82:ac:91:89:
         7e:b6:93:6c:8e:79:65:93:d6:dc:94:2b:10:a9:e0:38:1e:b7:
         d8:0b:2a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 07:38:53 2025 by rpki-client