Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3bbd8d1e-5eba-30af-98be-1dbee1cd3106.roa
File:                     3bbd8d1e-5eba-30af-98be-1dbee1cd3106.roa (raw, json)
Hash identifier:          rAO+7j42e2oRjarl+UkrsBFV4YvLMYppicHIvzFX1EU=
Subject key identifier:   A6:9A:A8:3A:29:36:75:36:34:FD:CD:58:18:87:C2:FE:C9:D1:2A:37
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858499C5A1469B7FF6C5FDC092A90
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3bbd8d1e-5eba-30af-98be-1dbee1cd3106.roa
Signing time:             Tue 22 Apr 2025 13:01:00 +0000
ROA not before:           Tue 22 Apr 2025 13:01:00 +0000
ROA not after:            Mon 21 Jul 2025 13:01:00 +0000
asID:                     397234
IP address blocks:        156.154.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9c:5a:14:69:b7:ff:6c:5f:dc:09:2a:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 22 13:01:00 2025 GMT
            Not After : Jul 21 13:01:00 2025 GMT
        Subject: CN=258f99e8-c284-41d0-be23-c1af84a43195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:88:03:42:78:6b:8a:cd:2a:95:0b:db:b7:b8:
                    56:86:78:ea:49:26:27:1f:3a:56:52:3e:84:a2:52:
                    c4:34:df:39:a6:45:e8:d7:45:3d:2f:08:87:5f:97:
                    b2:9e:53:d1:1a:e1:65:30:26:a5:7a:4e:9f:27:8e:
                    de:5b:cd:b6:45:59:7e:55:8a:b8:00:e0:72:fc:25:
                    d4:0d:c3:82:bd:5d:42:40:11:4d:f8:54:fa:0b:c1:
                    45:c0:bb:f0:e8:6c:c4:56:e7:7d:47:35:8e:d3:e6:
                    6e:3c:54:78:57:75:84:8f:55:db:b7:c3:b4:7e:5d:
                    cd:48:41:c5:bb:c4:aa:e9:80:8d:9b:e0:50:e2:94:
                    4c:ef:9b:1e:4b:0a:96:62:f7:88:b9:a4:a8:55:f2:
                    3e:e2:2d:a3:f8:6f:d6:03:ee:10:c9:54:04:63:6d:
                    c3:f2:9f:9c:dc:c1:10:d9:7c:92:f2:9c:a0:68:eb:
                    df:14:70:1b:1d:df:38:49:96:11:23:dc:12:ae:18:
                    6b:97:1f:7d:3c:cf:4f:9f:f9:0b:d4:24:19:c1:aa:
                    7c:d7:64:ca:06:a8:ee:7b:c2:08:ad:2d:5f:27:52:
                    d2:b8:de:db:48:40:31:04:c5:da:9e:ad:99:0b:30:
                    44:17:b4:fa:9d:01:f1:05:03:1f:e0:c1:90:1c:e6:
                    23:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:9A:A8:3A:29:36:75:36:34:FD:CD:58:18:87:C2:FE:C9:D1:2A:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3bbd8d1e-5eba-30af-98be-1dbee1cd3106.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:05:c8:a1:cf:9b:58:ff:fb:0f:30:f9:9e:f0:f7:23:1b:79:
         79:9f:8e:86:a7:99:ba:d9:b8:1c:ec:a0:0c:cc:07:29:5c:6f:
         35:c3:6d:8d:05:7c:db:92:4c:b0:85:36:34:b3:3e:11:ce:c3:
         54:b9:01:1e:f5:bb:b4:91:80:0f:97:5a:f6:7d:fa:fe:49:a6:
         db:70:f9:cb:4f:c8:49:8f:57:b0:d3:e5:4b:44:c0:f7:61:36:
         06:05:19:de:32:f7:19:b5:ae:b1:ac:a7:d5:c6:02:bd:1e:42:
         40:50:39:1f:25:7e:2e:d7:46:20:e6:b2:de:c5:bd:a2:24:33:
         9c:a0:a8:13:af:86:aa:e5:1d:3f:70:a4:f7:ed:69:cb:5f:62:
         4b:50:17:8f:47:a7:f4:46:60:b5:c2:96:d4:18:14:15:b8:8d:
         d2:0c:21:8f:56:c2:a5:ea:6e:a6:e2:f0:b5:be:03:93:37:a6:
         b2:87:ee:8c:05:4c:f3:26:33:e5:30:0b:a8:e3:b2:27:14:b0:
         3f:3e:89:b8:84:1f:65:c3:5f:c2:d3:1b:96:a2:47:53:e6:14:
         c1:b9:73:63:a2:74:41:2f:d0:45:24:60:ba:32:9a:82:5f:76:
         83:bb:02:75:14:9d:66:2a:a8:37:23:94:f1:a4:5a:24:70:c8:
         32:e9:5c:1a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcWhRpt/9sX9wJKpAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDQyMjEzMDEwMFoXDTI1MDcyMTEzMDEwMFowLzEtMCsGA1UEAxMk
MjU4Zjk5ZTgtYzI4NC00MWQwLWJlMjMtYzFhZjg0YTQzMTk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4gDQnhris0qlQvbt7hWhnjqSSYnHzpWUj6E
olLENN85pkXo10U9LwiHX5eynlPRGuFlMCalek6fJ47eW822RVl+VYq4AOBy/CXU
DcOCvV1CQBFN+FT6C8FFwLvw6GzEVud9RzWO0+ZuPFR4V3WEj1Xbt8O0fl3NSEHF
u8Sq6YCNm+BQ4pRM75seSwqWYveIuaSoVfI+4i2j+G/WA+4QyVQEY23D8p+c3MEQ
2XyS8pygaOvfFHAbHd84SZYRI9wSrhhrlx99PM9Pn/kL1CQZwap812TKBqjue8II
rS1fJ1LSuN7bSEAxBMXanq2ZCzBEF7T6nQHxBQMf4MGQHOYjTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKaaqDopNnU2NP3NWBiHwv7J0So3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvM2JiZDhkMWUtNWViYS0z
MGFmLTk4YmUtMWRiZWUxY2QzMTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJquMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACEFyKHPm1j/+w8w+Z7w9yMbeXmfjoanmbrZuBzsoAzMBylcbzXDbY0F
fNuSTLCFNjSzPhHOw1S5AR71u7SRgA+XWvZ9+v5Jpttw+ctPyEmPV7DT5UtEwPdh
NgYFGd4y9xm1rrGsp9XGAr0eQkBQOR8lfi7XRiDmst7FvaIkM5ygqBOvhqrlHT9w
pPftactfYktQF49Hp/RGYLXCltQYFBW4jdIMIY9WwqXqbqbi8LW+A5M3prKH7owF
TPMmM+UwC6jjsicUsD8+ibiEH2XDX8LTG5aiR1PmFMG5c2OidEEv0EUkYLoymoJf
doO7AnUUnWYqqDcjlPGkWiRwyDLpXBo=
-----END CERTIFICATE-----
Generated at Sun Apr 27 16:36:15 2025 by rpki-client