Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4b9be573-b571-39a0-9f3d-264509021215.roa
File:                     4b9be573-b571-39a0-9f3d-264509021215.roa (raw, json)
Hash identifier:          njdZsZZOgpQBT9GOKC9KX+inE12mrfM90y/Zg3546oY=
Subject key identifier:   7E:C4:BB:DA:D9:7A:EC:5A:C2:E4:6B:86:19:EF:F3:A8:05:B9:B0:28
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A682615F82286482B3AF63180
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4b9be573-b571-39a0-9f3d-264509021215.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     397242
IP address blocks:        156.154.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:15:f8:22:86:48:2b:3a:f6:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=65292101-3efc-4582-8b83-7086aa41f058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a3:19:08:9a:e3:61:26:d8:f2:df:1b:19:61:
                    74:ee:ec:60:5c:9f:0a:1d:27:10:7f:fa:10:1e:ed:
                    cd:d7:d1:a2:d1:ad:67:75:2a:07:a4:aa:d6:d5:9b:
                    02:dc:8d:a5:48:05:37:c6:34:d5:8d:07:62:64:2c:
                    88:a9:da:05:27:02:78:b0:83:00:03:34:81:ba:68:
                    46:13:15:e9:9b:f4:e3:82:30:89:7a:20:3d:e6:86:
                    4d:a6:cd:54:b5:00:8a:3f:31:14:76:fd:93:90:31:
                    0f:56:f3:b0:82:2b:bb:e1:c1:1e:c8:d6:63:84:ff:
                    c4:4f:a5:fc:38:57:92:c3:57:73:05:6e:11:ca:a3:
                    e0:e1:b2:52:bd:db:27:a4:e2:97:e9:9e:6e:89:85:
                    bf:78:4d:fc:50:01:c4:a6:af:18:9a:d5:9e:cf:0e:
                    cc:59:02:6d:6d:b4:33:ff:34:8a:fc:bc:b6:fa:50:
                    f0:1a:ee:25:2c:cc:34:40:8a:35:aa:63:93:6e:e5:
                    f4:55:9b:b8:36:d0:ef:b9:84:9a:67:56:72:bb:9c:
                    9e:12:99:78:50:ec:22:b1:88:1a:c4:7a:92:0c:bf:
                    c7:45:37:16:d1:a7:b0:8d:01:57:8f:ed:90:01:ab:
                    5e:49:a7:04:40:24:33:d2:87:95:1d:9b:d1:ca:44:
                    3c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:C4:BB:DA:D9:7A:EC:5A:C2:E4:6B:86:19:EF:F3:A8:05:B9:B0:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4b9be573-b571-39a0-9f3d-264509021215.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:4f:38:9d:be:4a:b8:d9:33:b2:91:e4:30:91:80:69:01:f2:
         1b:ca:64:8c:bd:3d:35:e0:2a:ab:f8:d9:fe:d3:db:10:65:07:
         8f:6d:b8:b0:f7:aa:ae:79:e9:fc:ab:56:eb:62:ba:ed:a2:13:
         6c:d7:26:85:1c:8d:f3:67:0a:16:52:8b:24:97:59:fd:d3:5d:
         17:34:09:35:cf:ba:0f:1f:d7:55:76:91:8f:a4:8f:bb:fe:1b:
         3c:da:31:cc:d4:d2:97:1a:4e:61:98:89:95:3d:d9:88:e7:3e:
         a3:eb:c3:7c:da:51:40:49:55:ab:3d:49:5c:48:b4:7b:62:2a:
         f7:77:1b:3b:44:09:86:f3:90:98:f0:3c:ed:ab:aa:78:64:2e:
         42:9b:70:40:e9:af:cd:d2:2f:5f:f8:a7:d7:02:7a:bc:d9:48:
         db:f1:f0:46:bc:30:5c:41:af:07:03:e5:f5:a8:e3:14:05:cd:
         6a:53:e5:43:2a:f0:17:50:4d:f6:2b:74:80:6b:08:6f:81:f5:
         ea:cc:5a:1d:9a:f3:2b:3a:35:61:58:75:ca:ad:b6:27:e3:60:
         56:b3:83:63:63:fb:79:a3:17:e1:2f:93:46:37:7b:df:bb:c4:
         84:21:c0:a0:f2:48:18:e8:50:c5:28:b8:d2:7d:8b:0a:d6:f8:
         56:f9:48:50
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJhX4IoZIKzr2MYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk
NjUyOTIxMDEtM2VmYy00NTgyLThiODMtNzA4NmFhNDFmMDU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqMZCJrjYSbY8t8bGWF07uxgXJ8KHScQf/oQ
Hu3N19Gi0a1ndSoHpKrW1ZsC3I2lSAU3xjTVjQdiZCyIqdoFJwJ4sIMAAzSBumhG
ExXpm/TjgjCJeiA95oZNps1UtQCKPzEUdv2TkDEPVvOwgiu74cEeyNZjhP/ET6X8
OFeSw1dzBW4RyqPg4bJSvdsnpOKX6Z5uiYW/eE38UAHEpq8YmtWezw7MWQJtbbQz
/zSK/Ly2+lDwGu4lLMw0QIo1qmOTbuX0VZu4NtDvuYSaZ1Zyu5yeEpl4UOwisYga
xHqSDL/HRTcW0aewjQFXj+2QAateSacEQCQz0oeVHZvRykQ8UwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH7Eu9rZeuxawuRrhhnv86gFubAoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNGI5YmU1NzMtYjU3MS0z
OWEwLTlmM2QtMjY0NTA5MDIxMjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHxPOJ2+SrjZM7KR5DCRgGkB8hvKZIy9PTXgKqv42f7T2xBlB49tuLD3
qq556fyrVutiuu2iE2zXJoUcjfNnChZSiySXWf3TXRc0CTXPug8f11V2kY+kj7v+
GzzaMczU0pcaTmGYiZU92YjnPqPrw3zaUUBJVas9SVxItHtiKvd3GztECYbzkJjw
PO2rqnhkLkKbcEDpr83SL1/4p9cCerzZSNvx8Ea8MFxBrwcD5fWo4xQFzWpT5UMq
8BdQTfYrdIBrCG+B9erMWh2a8ys6NWFYdcqttifjYFazg2Nj+3mjF+Evk0Y3e9+7
xIQhwKDySBjoUMUouNJ9iwrW+Fb5SFA=
-----END CERTIFICATE-----
Generated at Thu Aug 7 04:44:04 2025 by rpki-client