Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/241732d5-8d77-3be7-b261-3153a528c77c.roa
File:                     241732d5-8d77-3be7-b261-3153a528c77c.roa (raw, json)
Hash identifier:          DToQ9wB3/y/O8RTVURR7pTier5C/nCY5E7Tc9Cu9Koc=
Subject key identifier:   92:0A:4C:E9:32:FF:F0:DC:8A:EA:D7:EB:80:A5:C1:93:DD:2D:81:0E
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285849F17FE7974FAF117240519F80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/241732d5-8d77-3be7-b261-3153a528c77c.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     397224
IP address blocks:        156.154.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:e7:97:4f:af:11:72:40:51:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=d15fac6b-d171-4e42-9f0d-59b61f578ba3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:26:49:3c:81:7b:52:87:e5:77:bd:42:99:74:
                    5e:b3:2a:4b:eb:77:e6:76:52:4d:f9:f9:aa:5e:f0:
                    04:19:4e:34:96:8b:fb:40:df:62:10:5f:28:e6:4a:
                    5b:42:0f:e0:13:90:7f:aa:04:0b:48:d1:fd:bf:fb:
                    c8:3d:ac:76:9a:10:9e:ee:f9:dd:fb:36:1b:e8:fe:
                    6f:96:6e:4a:37:55:92:de:de:0f:4e:36:8a:e4:5d:
                    ac:26:69:bd:40:8f:53:03:18:f1:62:05:03:71:e1:
                    b9:02:26:93:1c:1d:a6:b2:e0:1f:2c:95:0e:78:7f:
                    6c:77:84:a4:94:62:7a:c8:52:fb:f7:09:c9:8f:cf:
                    9c:5c:8a:9b:ea:63:42:48:be:50:2d:a1:07:ec:14:
                    1f:19:1f:d2:91:f3:d8:1f:15:36:97:9f:6b:a6:9e:
                    c6:62:bd:90:d6:2b:a9:02:52:b1:4c:63:a2:ec:17:
                    5a:38:a7:87:51:4a:3b:7d:c3:d6:1e:84:c8:bd:a0:
                    d9:09:9f:3b:90:90:46:73:4b:c3:1e:9f:a0:73:ef:
                    73:c3:d3:77:d7:39:84:0d:96:89:c8:7c:c8:91:9a:
                    fd:92:b2:d0:df:4d:a9:98:21:98:15:6a:ba:8d:ba:
                    e9:82:23:03:1c:b1:8d:9e:bd:da:a5:8b:74:30:50:
                    9b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:0A:4C:E9:32:FF:F0:DC:8A:EA:D7:EB:80:A5:C1:93:DD:2D:81:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/241732d5-8d77-3be7-b261-3153a528c77c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:3a:ce:02:34:0e:8c:17:3a:53:20:a4:c9:53:74:1f:76:3f:
         0f:d2:7b:3e:72:5a:8b:ab:c2:1a:70:46:71:d0:36:98:87:6a:
         0d:08:14:85:13:cd:70:0f:38:32:a5:14:a0:3e:29:0e:8f:85:
         bc:d1:40:80:3c:be:78:49:cb:9e:22:68:2f:fc:73:03:51:c3:
         84:32:e2:63:fa:7f:68:d7:1f:c7:de:93:7f:10:fa:d0:f3:ac:
         de:fd:9f:03:c6:b9:29:e9:56:f5:7a:e7:53:7c:2e:5a:68:4f:
         6b:9d:10:7c:0f:b8:89:bf:36:02:4f:2e:40:7a:d2:9c:6e:f3:
         10:c2:45:f8:02:60:0e:9f:b9:b6:a7:c9:8a:15:f1:72:ba:cf:
         65:eb:ef:31:7a:46:7e:10:55:55:c0:6e:f6:e5:9d:80:ab:f7:
         fc:97:88:18:29:4a:aa:a4:31:c1:91:3a:b5:1d:4b:6e:37:7f:
         b6:fa:6c:1a:e7:e2:c8:b3:74:af:2f:ec:35:c0:3c:1e:5f:ab:
         3c:3f:e1:71:29:6d:a4:32:fe:07:c5:f7:b5:9d:47:d4:02:e1:
         41:d3:da:ab:ff:ff:b3:4c:bc:5b:36:28:dc:a2:3f:d7:c9:bc:
         d2:14:a0:11:f9:7b:f1:b9:c5:34:82:d8:31:c8:24:48:a9:3c:
         e8:e6:9e:c3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf+eXT68RckBRn4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk
ZDE1ZmFjNmItZDE3MS00ZTQyLTlmMGQtNTliNjFmNTc4YmEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSZJPIF7Uofld71CmXResypL63fmdlJN+fmq
XvAEGU40lov7QN9iEF8o5kpbQg/gE5B/qgQLSNH9v/vIPax2mhCe7vnd+zYb6P5v
lm5KN1WS3t4PTjaK5F2sJmm9QI9TAxjxYgUDceG5AiaTHB2msuAfLJUOeH9sd4Sk
lGJ6yFL79wnJj8+cXIqb6mNCSL5QLaEH7BQfGR/SkfPYHxU2l59rpp7GYr2Q1iup
AlKxTGOi7BdaOKeHUUo7fcPWHoTIvaDZCZ87kJBGc0vDHp+gc+9zw9N31zmEDZaJ
yHzIkZr9krLQ302pmCGYFWq6jbrpgiMDHLGNnr3apYt0MFCbFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJIKTOky//DciurX64ClwZPdLYEOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMjQxNzMyZDUtOGQ3Ny0z
YmU3LWIyNjEtMzE1M2E1MjhjNzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADo6zgI0DowXOlMgpMlTdB92Pw/Sez5yWourwhpwRnHQNpiHag0IFIUT
zXAPODKlFKA+KQ6PhbzRQIA8vnhJy54iaC/8cwNRw4Qy4mP6f2jXH8fek38Q+tDz
rN79nwPGuSnpVvV651N8LlpoT2udEHwPuIm/NgJPLkB60pxu8xDCRfgCYA6fuban
yYoV8XK6z2Xr7zF6Rn4QVVXAbvblnYCr9/yXiBgpSqqkMcGROrUdS243f7b6bBrn
4sizdK8v7DXAPB5fqzw/4XEpbaQy/gfF97WdR9QC4UHT2qv//7NMvFs2KNyiP9fJ
vNIUoBH5e/G5xTSC2DHIJEipPOjmnsM=
-----END CERTIFICATE-----
Generated at Mon Jun 16 02:32:14 2025 by rpki-client