Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/098c6579-1b87-3b11-b6f8-7514dc2b7c9d.roa
File:                     098c6579-1b87-3b11-b6f8-7514dc2b7c9d.roa (raw, json)
Hash identifier:          w8ZDqardJOjhFZK4BljEy4LrMf2+WRkT4c77XSDZr90=
Subject key identifier:   4E:6B:20:D4:01:65:0A:91:FA:D4:06:B7:C8:21:79:8D:8B:95:57:DF
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584AB91BB6203B6322D483BD0500
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/098c6579-1b87-3b11-b6f8-7514dc2b7c9d.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     397231
IP address blocks:        156.154.58.0/24 maxlen: 24
                          156.154.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:b6:20:3b:63:22:d4:83:bd:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=955c5cae-b856-4717-9a00-4bc85d0d06b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ab:fe:31:b9:bf:5a:65:29:a8:89:fe:60:24:
                    3f:55:86:58:d1:fe:6c:8d:44:34:5f:a2:6e:de:aa:
                    81:0c:8c:d6:bd:c4:95:dd:cc:b6:67:6a:16:fe:ba:
                    8a:a2:53:90:04:73:d7:49:a4:23:c2:ab:d9:2c:3f:
                    5d:6d:7d:a5:96:a1:d1:ea:6c:95:c2:4e:3c:aa:16:
                    f2:64:04:3b:18:32:6d:33:0d:a6:9d:37:e2:ed:b4:
                    ca:ce:d3:fb:d4:4a:bd:42:c8:48:92:b8:27:16:de:
                    08:ae:b5:aa:a9:60:8c:62:16:17:1c:e3:69:0e:41:
                    e1:2d:b9:52:bd:87:0c:ab:f8:6a:0f:53:06:1d:34:
                    24:2d:5f:78:a2:4e:eb:7d:0c:e0:9b:10:43:ae:04:
                    bf:c6:1e:2f:cd:a5:eb:65:d5:ee:17:e0:9f:70:bc:
                    0b:47:22:0f:e9:dc:11:ef:cc:a1:7e:98:c6:5b:29:
                    ab:80:77:e3:a9:46:ec:3f:6e:cc:ac:d6:d5:7e:0c:
                    22:fc:2a:1b:06:df:ae:9e:ac:26:ed:d3:d4:6b:b3:
                    56:41:c0:94:98:de:3f:c5:9c:4c:88:65:13:b2:a8:
                    8e:01:8b:b5:b9:99:88:d2:c8:64:b5:50:a5:a6:a5:
                    e8:09:f0:df:20:93:ee:f2:2a:f8:f3:fc:f4:d4:60:
                    ae:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:6B:20:D4:01:65:0A:91:FA:D4:06:B7:C8:21:79:8D:8B:95:57:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/098c6579-1b87-3b11-b6f8-7514dc2b7c9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.58.0/24
                  156.154.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:4a:4a:7f:d1:97:6c:9e:aa:00:91:55:51:3b:57:11:5a:67:
         0b:69:9f:e1:c7:44:78:ab:42:a6:7b:f0:37:96:3a:4a:9f:1c:
         d6:ae:4a:41:69:3e:df:64:f1:5c:fa:3f:80:ca:f1:83:88:26:
         f2:23:de:92:a9:a6:0c:0b:83:1f:cf:22:64:a2:a7:9b:ac:38:
         a7:50:7b:13:32:9a:a0:e4:a6:64:9f:4d:a8:96:a2:e5:c9:21:
         84:4d:8d:d2:04:a2:10:7c:c2:ed:72:73:03:be:b8:80:72:fa:
         78:e2:43:a4:a6:da:a0:bf:e1:74:af:63:2a:9c:ab:1d:2b:e9:
         20:59:92:6e:bd:08:9a:97:55:60:4a:dc:b0:a6:25:6b:a6:88:
         4a:fa:61:73:16:97:95:f9:ee:5c:06:46:3e:eb:c1:6b:30:3e:
         26:28:96:3c:90:95:30:b1:18:84:1c:f0:2b:71:7e:a2:68:8b:
         76:c2:3a:e6:d5:67:58:df:dd:72:d8:d1:e3:25:e5:e7:51:ff:
         cf:03:82:79:f6:9d:b9:93:aa:55:1c:b0:e2:73:49:fa:19:82:
         c4:8e:c6:a8:cc:77:2b:91:39:70:84:58:2b:db:36:20:83:b1:
         a3:ec:60:20:df:0d:27:5d:d4:de:ab:a5:0a:bd:9b:cf:9b:cf:
         78:2a:ad:ef
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEq5G7YgO2Mi1IO9BQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk
OTU1YzVjYWUtYjg1Ni00NzE3LTlhMDAtNGJjODVkMGQwNmI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqv+Mbm/WmUpqIn+YCQ/VYZY0f5sjUQ0X6Ju
3qqBDIzWvcSV3cy2Z2oW/rqKolOQBHPXSaQjwqvZLD9dbX2llqHR6myVwk48qhby
ZAQ7GDJtMw2mnTfi7bTKztP71Eq9QshIkrgnFt4IrrWqqWCMYhYXHONpDkHhLblS
vYcMq/hqD1MGHTQkLV94ok7rfQzgmxBDrgS/xh4vzaXrZdXuF+CfcLwLRyIP6dwR
78yhfpjGWymrgHfjqUbsP27MrNbVfgwi/CobBt+unqwm7dPUa7NWQcCUmN4/xZxM
iGUTsqiOAYu1uZmI0shktVClpqXoCfDfIJPu8ir48/z01GCuYQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFE5rINQBZQqR+tQGt8gheY2LlVffMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMDk4YzY1NzktMWI4Ny0z
YjExLWI2ZjgtNzUxNGRjMmI3YzlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAnJo6AwQA
nJq/MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAGZKSn/Rl2yeqgCRVVE7VxFaZwtpn+HHRHirQqZ78DeWOkqf
HNauSkFpPt9k8Vz6P4DK8YOIJvIj3pKppgwLgx/PImSip5usOKdQexMymqDkpmSf
TaiWouXJIYRNjdIEohB8wu1ycwO+uIBy+njiQ6Sm2qC/4XSvYyqcqx0r6SBZkm69
CJqXVWBK3LCmJWumiEr6YXMWl5X57lwGRj7rwWswPiYoljyQlTCxGIQc8CtxfqJo
i3bCOubVZ1jf3XLY0eMl5edR/88Dgnn2nbmTqlUcsOJzSfoZgsSOxqjMdyuROXCE
WCvbNiCDsaPsYCDfDSdd1N6rpQq9m8+bz3gqre8=
-----END CERTIFICATE-----
Generated at Mon Aug 4 19:04:54 2025 by rpki-client