Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/37024891-f3c2-3e45-bf9a-005e06316064.roa
File:                     37024891-f3c2-3e45-bf9a-005e06316064.roa (raw, json)
Hash identifier:          xm3zQBhyf1uruq84kUt5OLPsyvKn7IZiKE1amTpksKM=
Subject key identifier:   87:B9:35:92:37:F7:10:BC:47:44:B2:EA:1F:0A:04:EC:35:99:3F:9A
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A682631E9B5D4788EFBB18980
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/37024891-f3c2-3e45-bf9a-005e06316064.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     397213
IP address blocks:        156.154.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:31:e9:b5:d4:78:8e:fb:b1:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=24f09b95-5b8a-487e-a83a-deb7d39d4dd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:13:9c:c5:c6:f3:83:7a:93:66:ad:f9:b5:67:
                    e4:fc:92:bd:3b:91:28:07:2e:f4:4d:4e:c7:9d:5b:
                    5a:6a:ca:ab:1c:25:50:5b:8e:91:a1:3b:6b:75:79:
                    e7:87:71:a9:9f:91:c8:20:16:5c:c1:5d:17:b0:08:
                    0f:55:6a:8f:24:3a:14:ef:d9:af:a2:90:ba:4f:3c:
                    6e:5e:d4:58:2e:ee:21:4f:f8:d1:e6:f1:3b:31:8a:
                    11:69:45:86:1c:b0:7f:9b:3b:4d:40:6c:b4:65:66:
                    15:55:1a:1b:59:ae:a2:ff:41:fb:d6:5e:25:e9:20:
                    4d:73:45:cf:dd:93:73:f0:ce:09:60:2a:b0:89:20:
                    0a:71:bc:a7:8b:a2:a5:9d:0e:9b:ff:4a:c7:bf:96:
                    f4:f4:52:19:00:03:2e:ae:90:6f:4a:6e:16:c0:b6:
                    7e:3c:22:4c:05:e6:d7:ba:ba:7a:46:e9:bc:08:a0:
                    08:cd:ea:ec:fd:97:98:c4:1a:e0:22:bb:09:0a:0e:
                    e1:ed:8c:56:06:05:57:76:30:53:00:87:1f:11:97:
                    10:30:63:b7:79:0a:88:c5:b2:5e:8a:c1:bf:79:ee:
                    80:58:b8:b7:ec:8e:5f:62:8d:b7:02:c0:37:c3:19:
                    32:24:0e:96:ea:46:4e:28:32:df:fd:3c:78:2b:5a:
                    8b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:B9:35:92:37:F7:10:BC:47:44:B2:EA:1F:0A:04:EC:35:99:3F:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/37024891-f3c2-3e45-bf9a-005e06316064.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:33:84:a1:fe:fd:30:0d:0b:01:43:cd:9a:a2:f8:23:38:17:
         bc:4a:68:a5:78:22:11:d3:91:98:04:8e:38:9a:47:3e:1d:65:
         42:75:da:25:cd:03:c4:5c:37:fb:b6:5b:aa:60:fe:65:a9:4a:
         30:76:32:17:ff:91:e8:ed:25:48:a0:29:f5:f6:80:40:42:83:
         f1:cd:da:a7:8c:cf:01:2e:d6:fe:e3:54:b8:58:48:b7:d6:fb:
         79:0a:22:31:65:5b:ac:78:ac:45:26:51:05:11:f2:9b:9b:1e:
         7b:f0:ff:c2:7b:60:d4:ee:84:7f:a4:34:55:6f:30:27:7a:d7:
         2e:c3:4c:26:7a:93:e1:b9:96:d8:9d:5f:37:47:a5:86:8a:33:
         9c:ac:4d:ce:22:8e:b4:43:c2:cd:a3:11:81:32:97:b8:00:85:
         c9:12:61:d9:d9:d2:c4:1a:fe:37:d6:b0:f8:5c:16:e0:69:a9:
         99:87:69:b1:59:36:1d:da:2b:54:fb:fc:33:56:b3:92:73:88:
         10:69:25:87:4b:93:05:82:0a:51:60:2b:b6:67:e7:8e:c7:14:
         bc:fe:6b:3a:e0:8f:6b:8c:29:a1:3a:66:5b:c3:0f:eb:03:d9:
         a2:34:97:d2:18:b2:51:3d:94:f4:b0:fd:47:3c:3a:f5:e2:d1:
         c0:cb:22:f2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJjHptdR4jvuxiYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk
MjRmMDliOTUtNWI4YS00ODdlLWE4M2EtZGViN2QzOWQ0ZGQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBOcxcbzg3qTZq35tWfk/JK9O5EoBy70TU7H
nVtaasqrHCVQW46RoTtrdXnnh3Gpn5HIIBZcwV0XsAgPVWqPJDoU79mvopC6Tzxu
XtRYLu4hT/jR5vE7MYoRaUWGHLB/mztNQGy0ZWYVVRobWa6i/0H71l4l6SBNc0XP
3ZNz8M4JYCqwiSAKcbyni6KlnQ6b/0rHv5b09FIZAAMurpBvSm4WwLZ+PCJMBebX
urp6Rum8CKAIzers/ZeYxBrgIrsJCg7h7YxWBgVXdjBTAIcfEZcQMGO3eQqIxbJe
isG/ee6AWLi37I5fYo23AsA3wxkyJA6W6kZOKDLf/Tx4K1qLowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIe5NZI39xC8R0Sy6h8KBOw1mT+aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMzcwMjQ4OTEtZjNjMi0z
ZTQ1LWJmOWEtMDA1ZTA2MzE2MDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABkzhKH+/TANCwFDzZqi+CM4F7xKaKV4IhHTkZgEjjiaRz4dZUJ12iXN
A8RcN/u2W6pg/mWpSjB2Mhf/kejtJUigKfX2gEBCg/HN2qeMzwEu1v7jVLhYSLfW
+3kKIjFlW6x4rEUmUQUR8pubHnvw/8J7YNTuhH+kNFVvMCd61y7DTCZ6k+G5ltid
XzdHpYaKM5ysTc4ijrRDws2jEYEyl7gAhckSYdnZ0sQa/jfWsPhcFuBpqZmHabFZ
Nh3aK1T7/DNWs5JziBBpJYdLkwWCClFgK7Zn547HFLz+azrgj2uMKaE6ZlvDD+sD
2aI0l9IYslE9lPSw/Uc8OvXi0cDLIvI=
-----END CERTIFICATE-----
Generated at Wed Aug 6 00:43:49 2025 by rpki-client