Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1d3d4f28-da0c-32de-b04b-1f1212c4e337.roa
File:                     1d3d4f28-da0c-32de-b04b-1f1212c4e337.roa (raw, json)
Hash identifier:          eDSKKriuEeHVfmHrh+pudUbir5TtLMWfRNlR2nFWwcw=
Subject key identifier:   F1:F7:34:0B:13:ED:B5:37:A9:94:86:D7:D1:AF:A0:A2:8F:76:73:12
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285849F17FFD00826B095524B8EB80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1d3d4f28-da0c-32de-b04b-1f1212c4e337.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     397224
IP address blocks:        156.154.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:fd:00:82:6b:09:55:24:b8:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=47b4e6b5-a90d-4dfb-a3a4-b3945aae1468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b0:96:86:ad:ac:37:2b:ef:53:70:87:d1:0b:
                    82:3f:00:51:95:22:81:b8:cb:78:0f:e9:b1:7a:60:
                    98:7d:1a:e5:77:91:33:21:63:66:4e:b6:81:75:34:
                    e1:d1:51:6f:66:1b:0d:da:19:04:cb:04:c9:43:5d:
                    33:a3:da:db:b3:d7:04:71:9b:86:6b:9b:2b:56:f9:
                    6b:61:b7:4e:a8:41:30:c4:4c:ed:9c:0e:0d:dd:c0:
                    fa:81:96:68:a6:1b:1c:b6:c1:25:9c:53:2c:62:cf:
                    b8:77:32:d8:91:b9:6f:ff:1d:ae:e8:85:80:b5:2e:
                    bd:9e:b5:b3:52:88:21:10:b5:90:21:44:84:3b:0a:
                    cd:da:be:9e:1f:36:01:b3:b5:9a:0b:ca:8e:a8:1a:
                    c9:32:32:13:35:82:f5:1f:78:1b:d9:27:6e:05:66:
                    d6:8d:37:2b:5f:27:78:60:c8:fe:f9:75:6c:ec:88:
                    46:9e:9d:7a:0e:1a:e9:50:26:30:4b:e0:d5:d6:1b:
                    74:00:47:91:93:f0:ca:ee:9c:a0:56:4b:64:4d:31:
                    d9:4c:97:f2:0c:85:46:b8:74:bb:51:ff:df:29:f1:
                    62:6a:f7:63:d6:26:4d:34:83:8a:6d:e6:cf:bd:33:
                    0d:3f:9f:f5:fb:63:2f:d7:ec:57:25:06:7c:39:44:
                    15:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F7:34:0B:13:ED:B5:37:A9:94:86:D7:D1:AF:A0:A2:8F:76:73:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1d3d4f28-da0c-32de-b04b-1f1212c4e337.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:b3:f5:4f:0d:85:0d:ea:e2:41:3b:3e:56:4a:93:3f:87:52:
         87:26:9f:75:e8:c3:6b:be:99:b9:b8:ec:7c:25:4d:68:c3:3e:
         34:a2:db:27:60:33:97:d7:f6:a5:e4:df:f3:2a:c0:e5:f9:c4:
         ed:ec:1a:6e:b7:71:d4:36:f1:25:b8:f4:19:bf:79:d0:16:85:
         a5:9b:64:54:08:5a:df:e3:52:09:d3:dc:c4:11:4b:30:28:0a:
         4d:13:95:44:6a:7c:a9:eb:5c:03:56:c2:89:73:ba:1d:4a:cc:
         68:06:46:cd:9e:c6:3a:28:d7:1b:8b:35:a5:ef:b2:ce:a3:0e:
         34:65:f5:5b:a9:d1:9b:4f:78:c8:6b:d5:ae:b0:4a:1b:9a:94:
         33:27:dd:53:fa:b2:11:52:20:89:c5:e0:c1:6d:52:60:25:74:
         df:01:e0:9e:2f:8b:f7:68:53:ce:24:bb:51:ff:ec:a8:3d:a9:
         96:73:79:b1:b1:6a:45:cf:bb:6f:3e:e1:f0:e4:b6:01:34:09:
         a4:6c:03:8c:24:d3:67:43:ad:a8:09:8e:6d:26:4e:00:8b:52:
         bd:f7:15:12:bf:08:08:a8:0c:d0:5d:0e:9d:88:94:f6:56:36:
         e6:7b:0c:7c:49:10:e0:3d:f6:85:c3:9a:40:c8:ec:a1:29:e9:
         66:35:5c:a5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf/0AgmsJVSS464AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk
NDdiNGU2YjUtYTkwZC00ZGZiLWEzYTQtYjM5NDVhYWUxNDY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbCWhq2sNyvvU3CH0QuCPwBRlSKBuMt4D+mx
emCYfRrld5EzIWNmTraBdTTh0VFvZhsN2hkEywTJQ10zo9rbs9cEcZuGa5srVvlr
YbdOqEEwxEztnA4N3cD6gZZophsctsElnFMsYs+4dzLYkblv/x2u6IWAtS69nrWz
UoghELWQIUSEOwrN2r6eHzYBs7WaC8qOqBrJMjITNYL1H3gb2SduBWbWjTcrXyd4
YMj++XVs7IhGnp16DhrpUCYwS+DV1ht0AEeRk/DK7pygVktkTTHZTJfyDIVGuHS7
Uf/fKfFiavdj1iZNNIOKbebPvTMNP5/1+2Mv1+xXJQZ8OUQVhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPH3NAsT7bU3qZSG19GvoKKPdnMSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMWQzZDRmMjgtZGEwYy0z
MmRlLWIwNGItMWYxMjEyYzRlMzM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGSz9U8NhQ3q4kE7PlZKkz+HUocmn3Xow2u+mbm47HwlTWjDPjSi2ydg
M5fX9qXk3/MqwOX5xO3sGm63cdQ28SW49Bm/edAWhaWbZFQIWt/jUgnT3MQRSzAo
Ck0TlURqfKnrXANWwolzuh1KzGgGRs2exjoo1xuLNaXvss6jDjRl9Vup0ZtPeMhr
1a6wShualDMn3VP6shFSIInF4MFtUmAldN8B4J4vi/doU84ku1H/7Kg9qZZzebGx
akXPu28+4fDktgE0CaRsA4wk02dDragJjm0mTgCLUr33FRK/CAioDNBdDp2IlPZW
NuZ7DHxJEOA99oXDmkDI7KEp6WY1XKU=
-----END CERTIFICATE-----
Generated at Mon Jun 16 02:01:45 2025 by rpki-client