Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4f2c2920-5a27-35af-9e04-181d4dcc7a95.roa
File:                     4f2c2920-5a27-35af-9e04-181d4dcc7a95.roa (raw, json)
Hash identifier:          J/DcnlhOZhhEfsZJVW8nlrX2meWHixwv959gVIWh5bI=
Subject key identifier:   99:32:E2:75:54:04:6B:A1:E4:C0:2C:13:1B:A1:15:C2:F0:7B:83:55
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A96368F74C45ECAEFB2D0D080
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4f2c2920-5a27-35af-9e04-181d4dcc7a95.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     12008
IP address blocks:        156.154.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:8f:74:c4:5e:ca:ef:b2:d0:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=b45a6dd8-74fd-484c-9d4f-0dfacfbf10b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:58:24:78:b7:51:91:07:26:34:e8:d0:f0:7b:
                    b2:fb:ce:59:81:f7:a5:ac:df:54:c9:95:13:37:a1:
                    7e:12:7f:7d:d4:86:6a:22:02:8e:84:eb:19:e7:db:
                    bd:94:16:db:cb:08:7f:43:60:53:e8:0f:2e:8d:13:
                    e0:60:0d:9c:da:86:42:0e:16:61:54:ce:ed:5d:79:
                    f7:b0:4c:d6:72:9f:8e:b3:5b:a0:f5:dc:e3:0e:85:
                    b0:8a:13:7a:8b:01:ed:22:ca:5d:88:a5:8d:ad:b3:
                    87:8e:a7:97:ef:73:9a:a9:f1:56:b9:15:95:77:b2:
                    44:bb:39:c4:6b:92:56:61:a6:64:5b:ac:bb:a7:30:
                    ed:8f:2a:dc:87:11:61:be:f2:ba:72:d8:ff:74:b7:
                    98:38:31:f1:6a:31:51:9d:d5:a8:d5:bc:1a:7c:d2:
                    73:6f:1b:a4:9e:34:b0:04:8b:67:f8:a8:b1:30:ed:
                    3e:5e:ac:e9:1e:d9:61:1a:fb:c9:33:49:c8:17:31:
                    bc:fd:8d:ca:18:9f:a6:e2:17:6e:cb:f5:8e:3d:81:
                    57:ea:b1:b5:27:82:0e:77:f7:09:c0:6e:fa:33:06:
                    c8:de:c1:a1:ae:56:e5:9e:7b:0d:78:17:ea:02:33:
                    4c:2e:f1:c5:15:0c:db:d8:22:ae:ee:c5:ab:45:b6:
                    9c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:32:E2:75:54:04:6B:A1:E4:C0:2C:13:1B:A1:15:C2:F0:7B:83:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4f2c2920-5a27-35af-9e04-181d4dcc7a95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:aa:1d:ad:7d:4e:c1:7b:17:9b:6b:73:02:35:98:d0:aa:12:
         34:32:34:1e:d3:2b:e3:79:e3:25:c1:65:18:2b:a9:73:9b:8a:
         5e:f5:0d:e9:83:90:60:a7:a0:b3:32:93:92:e1:66:77:25:38:
         a1:c0:09:d3:fc:f5:99:15:e2:b2:36:f6:fb:d9:f8:f4:ba:9a:
         29:a1:da:3e:fe:ce:90:8b:24:eb:cc:55:a1:b5:f3:91:ce:8a:
         56:6b:79:63:95:2d:9e:74:69:97:aa:9f:08:63:78:5c:20:6f:
         18:be:0b:60:77:8e:bc:4f:58:f3:39:7a:49:25:ae:05:dc:1a:
         e1:ed:9f:8a:46:5a:64:2a:c1:a7:0b:a5:21:02:e8:e8:af:28:
         3e:18:00:a5:c9:a1:a8:b5:76:12:d2:25:1d:a4:5a:f5:eb:89:
         a9:10:68:9e:2c:a2:66:e7:fd:38:d6:01:16:64:68:94:31:d3:
         35:d5:0f:57:90:bf:72:74:b6:7e:36:73:c2:64:85:99:e4:4c:
         5b:1a:f6:bb:45:9d:cc:b1:cf:0b:5d:47:b4:ff:3e:a2:85:89:
         c6:19:b4:e2:15:12:4c:90:5a:40:81:53:e3:48:f9:61:2e:95:
         84:00:7b:89:49:ec:e0:ef:13:3c:26:f5:64:bb:c2:b3:05:a0:
         45:b3:c0:e7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNo90xF7K77LQ0IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk
YjQ1YTZkZDgtNzRmZC00ODRjLTlkNGYtMGRmYWNmYmYxMGIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFgkeLdRkQcmNOjQ8Huy+85ZgfelrN9UyZUT
N6F+En991IZqIgKOhOsZ59u9lBbbywh/Q2BT6A8ujRPgYA2c2oZCDhZhVM7tXXn3
sEzWcp+Os1ug9dzjDoWwihN6iwHtIspdiKWNrbOHjqeX73OaqfFWuRWVd7JEuznE
a5JWYaZkW6y7pzDtjyrchxFhvvK6ctj/dLeYODHxajFRndWo1bwafNJzbxuknjSw
BItn+KixMO0+XqzpHtlhGvvJM0nIFzG8/Y3KGJ+m4hduy/WOPYFX6rG1J4IOd/cJ
wG76MwbI3sGhrlblnnsNeBfqAjNMLvHFFQzb2CKu7sWrRbacuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJky4nVUBGuh5MAsExuhFcLwe4NVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNGYyYzI5MjAtNWEyNy0z
NWFmLTllMDQtMTgxZDRkY2M3YTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJolMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABmqHa19TsF7F5trcwI1mNCqEjQyNB7TK+N54yXBZRgrqXObil71DemD
kGCnoLMyk5LhZnclOKHACdP89ZkV4rI29vvZ+PS6mimh2j7+zpCLJOvMVaG185HO
ilZreWOVLZ50aZeqnwhjeFwgbxi+C2B3jrxPWPM5ekklrgXcGuHtn4pGWmQqwacL
pSEC6OivKD4YAKXJoai1dhLSJR2kWvXriakQaJ4sombn/TjWARZkaJQx0zXVD1eQ
v3J0tn42c8JkhZnkTFsa9rtFncyxzwtdR7T/PqKFicYZtOIVEkyQWkCBU+NI+WEu
lYQAe4lJ7ODvEzwm9WS7wrMFoEWzwOc=
-----END CERTIFICATE-----
Generated at Wed Aug 6 05:21:37 2025 by rpki-client