Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/d5cf8319-403b-387c-a79b-84a59277e3f3.roa
File:                     d5cf8319-403b-387c-a79b-84a59277e3f3.roa (raw, json)
Hash identifier:          s4IGCRXiCvo0aNpmH5sGjOogDh7LdTJXhFHpk/VmVSk=
Subject key identifier:   AB:39:AF:A5:10:EE:00:AB:22:C1:AC:AF:D9:5A:05:96:84:4F:0D:CE
Certificate issuer:       /CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Certificate serial:       010D0C9F43285849194174300132472306577340
Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/d5cf8319-403b-387c-a79b-84a59277e3f3.roa
Signing time:             Thu 06 Mar 2025 14:00:52 +0000
ROA not before:           Thu 06 Mar 2025 14:00:52 +0000
ROA not after:            Wed 04 Jun 2025 13:00:52 +0000
asID:                     54535
IP address blocks:        156.37.196.0/24 maxlen: 24
                          156.37.197.0/24 maxlen: 24
                          156.37.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:19:41:74:30:01:32:47:23:06:57:73:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9
        Validity
            Not Before: Mar  6 14:00:52 2025 GMT
            Not After : Jun  4 13:00:52 2025 GMT
        Subject: CN=048bbe0d-3eb1-4381-b1c9-049e4ec5500f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:db:fd:fd:92:17:6c:64:32:3e:86:33:7f:9d:
                    50:24:d4:f0:a4:96:92:75:4a:94:6b:2f:69:8e:56:
                    15:4f:67:29:29:75:50:54:48:65:fa:16:bd:35:89:
                    83:c9:70:1f:02:6a:0f:63:04:a4:11:ef:f6:28:72:
                    16:53:68:44:53:ed:47:7d:50:dc:0a:c3:85:5d:83:
                    a5:bc:15:7e:0e:f9:cc:f7:33:24:eb:83:a5:fa:3c:
                    fc:9f:47:93:fa:35:2b:a7:7b:5a:14:3d:1e:11:ed:
                    25:2d:48:ba:aa:eb:1a:56:bd:e7:f3:99:d1:aa:0a:
                    70:6e:dc:f1:8e:75:ec:d2:b4:be:76:f6:15:1b:9a:
                    c4:89:4e:2e:21:a5:da:22:4b:a8:76:36:3b:7d:cc:
                    c9:de:69:97:b3:3c:b2:76:b4:f5:c0:59:35:89:7a:
                    08:3e:5e:fa:f6:72:f2:b5:bb:20:6c:d7:4a:16:66:
                    fb:f6:db:6b:22:f8:ca:78:20:b9:50:36:a0:29:06:
                    5c:69:13:58:26:8c:03:fa:f1:e7:ed:88:fa:c9:88:
                    0f:7a:e0:69:ee:c2:2b:2f:08:c4:41:50:0b:5c:09:
                    87:01:f8:60:95:32:08:5a:5e:58:60:b7:16:08:42:
                    67:28:12:f2:ae:6b:d7:9f:38:96:cc:5f:a1:fa:73:
                    b8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:39:AF:A5:10:EE:00:AB:22:C1:AC:AF:D9:5A:05:96:84:4F:0D:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/d5cf8319-403b-387c-a79b-84a59277e3f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl

            X509v3 Authority Key Identifier:
                keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.37.196.0-156.37.198.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:13:39:44:57:f8:03:6e:5d:c7:79:5c:11:4d:d7:3b:d9:be:
         7d:07:35:f1:27:a4:a4:ae:f3:31:18:ae:1f:1c:3d:ac:70:d9:
         98:0f:e0:be:f0:d4:0a:71:36:09:d2:0c:ad:22:83:40:c3:fa:
         a5:40:87:f0:c2:24:51:5c:f9:30:4a:eb:86:1e:aa:b7:ac:14:
         2e:c7:21:17:33:07:c6:00:6e:dd:9c:bb:67:08:58:d7:58:81:
         44:52:49:0d:17:ff:d0:4a:dd:48:cd:3c:b9:c2:45:30:e0:0d:
         31:b7:1d:ed:4f:e6:71:12:cd:46:5d:e9:97:49:00:9b:7e:be:
         74:c3:ec:2c:ac:31:05:b7:e9:50:e6:be:56:c4:82:35:23:0b:
         81:0f:65:d8:b8:d3:76:27:11:ce:01:5b:ab:be:66:0c:94:39:
         bc:44:ca:c4:d2:01:fd:cc:c7:e7:7d:4f:79:ae:2d:93:b7:9c:
         a3:02:9a:ef:bf:90:33:16:5c:fe:06:24:e5:b0:d1:ff:b1:49:
         d1:f8:b0:0d:7f:df:ef:11:cd:46:09:6c:18:71:b9:25:79:5f:
         8a:30:61:4f:8f:c4:a9:d6:97:51:cc:82:cb:59:07:4c:be:53:
         04:9a:fe:76:9e:e9:87:b2:d4:ac:14:ae:90:70:22:e5:98:2c:
         91:ef:7c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:39:02 2025 by rpki-client