Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/506d900f-b10c-3558-915c-35ac33f84741.roa
File:                     506d900f-b10c-3558-915c-35ac33f84741.roa (raw, json)
Hash identifier:          rGYAJvLpFg3aXgiGqjMYbs/kdvX/Yz5tESRDPU/VDiI=
Subject key identifier:   0D:95:52:07:0F:39:93:96:80:A3:8E:AC:46:A7:4C:5D:6A:E9:33:AE
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285849F17FEE50807BD5A0BB81E780
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/506d900f-b10c-3558-915c-35ac33f84741.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     397240
IP address blocks:        156.154.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:ee:50:80:7b:d5:a0:bb:81:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=3f71b590-1cdb-4cc1-abbb-e99b223f2568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6a:75:e4:71:eb:42:0f:9f:37:9b:80:5a:20:
                    80:3c:a9:83:8d:d1:ac:35:54:95:5b:1b:4b:f1:f8:
                    cf:50:c1:a3:e6:7f:12:ee:ea:2f:38:03:56:00:6f:
                    d7:1a:40:3f:73:84:58:2b:73:4c:9e:8f:7b:fa:87:
                    83:94:3a:0e:0e:7a:25:16:92:e4:71:14:b6:04:dd:
                    69:e1:7f:62:0c:55:24:84:93:ab:3e:42:3c:87:63:
                    13:e8:6a:f5:b1:6d:ac:ad:fd:90:b7:eb:39:e5:7b:
                    a1:6d:c3:d6:fb:3a:a1:c2:48:4e:f0:7a:7e:e0:8c:
                    95:3a:b6:94:ff:b7:0d:f4:cf:ca:1d:13:8e:b2:36:
                    8c:fc:b0:d9:22:ae:18:13:25:7a:3b:bd:f0:ba:0e:
                    24:bb:e4:18:7e:d7:c1:74:99:9f:f1:3d:7e:98:58:
                    70:61:04:c1:91:1a:4a:86:8c:f3:72:01:f7:7c:d5:
                    cd:86:94:97:29:8a:f3:e7:37:8e:f7:b7:43:2c:81:
                    de:20:86:49:d2:7e:a4:49:ad:bb:4e:3d:ad:4a:29:
                    cf:14:5c:ea:00:69:f8:1a:35:bd:df:f7:29:d0:84:
                    60:b8:05:94:af:b0:f7:f4:20:ab:d7:5f:e0:5c:c6:
                    80:f6:8e:6a:0a:94:0b:9c:56:12:a5:0a:6c:d9:ca:
                    bc:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:95:52:07:0F:39:93:96:80:A3:8E:AC:46:A7:4C:5D:6A:E9:33:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/506d900f-b10c-3558-915c-35ac33f84741.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:fb:6f:46:ac:28:91:cc:97:01:07:dd:dc:23:16:45:a4:eb:
         aa:50:3e:d2:00:98:9c:96:db:35:13:e9:28:c3:f2:7a:ff:5e:
         50:51:84:b1:a0:50:0d:10:82:97:0f:41:c8:fc:e7:05:2e:bb:
         43:3a:3a:be:b1:21:81:13:ab:31:b5:21:35:d2:b1:94:9d:22:
         0b:21:36:b7:f4:c3:86:8c:f0:57:d0:14:ce:da:c1:f7:5f:55:
         10:96:a6:eb:e3:3d:b5:50:b3:d7:dc:4e:b3:f5:7f:d2:10:01:
         55:fc:e2:6b:5e:eb:82:1e:a6:7e:f5:71:0e:5f:3c:bc:20:2b:
         5f:eb:cb:7f:9a:40:8d:cf:f7:ac:8e:64:a7:2c:a3:72:48:09:
         e3:06:2c:da:05:27:5a:f4:f6:78:72:b2:eb:56:ba:c7:e5:23:
         e5:59:01:7f:b0:12:df:66:6a:93:0c:48:f7:e9:0f:5f:1c:be:
         8e:52:58:23:35:da:81:ef:c8:78:93:d9:ec:31:4d:4c:7b:fa:
         af:61:da:e1:17:d3:e7:56:df:e7:2a:c3:e6:f9:e0:42:53:76:
         08:13:d7:57:86:99:44:e2:70:63:18:a9:fc:a9:79:7a:bd:7b:
         d8:21:66:04:78:e0:da:d2:62:ad:ba:5a:33:a6:9e:08:ea:37:
         37:96:c2:5a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf+5QgHvVoLuB54AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk
M2Y3MWI1OTAtMWNkYi00Y2MxLWFiYmItZTk5YjIyM2YyNTY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGp15HHrQg+fN5uAWiCAPKmDjdGsNVSVWxtL
8fjPUMGj5n8S7uovOANWAG/XGkA/c4RYK3NMno97+oeDlDoODnolFpLkcRS2BN1p
4X9iDFUkhJOrPkI8h2MT6Gr1sW2srf2Qt+s55XuhbcPW+zqhwkhO8Hp+4IyVOraU
/7cN9M/KHROOsjaM/LDZIq4YEyV6O73wug4ku+QYftfBdJmf8T1+mFhwYQTBkRpK
hozzcgH3fNXNhpSXKYrz5zeO97dDLIHeIIZJ0n6kSa27Tj2tSinPFFzqAGn4GjW9
3/cp0IRguAWUr7D39CCr11/gXMaA9o5qCpQLnFYSpQps2cq8DQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA2VUgcPOZOWgKOOrEanTF1q6TOuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNTA2ZDkwMGYtYjEwYy0z
NTU4LTkxNWMtMzVhYzMzZjg0NzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB37b0asKJHMlwEH3dwjFkWk66pQPtIAmJyW2zUT6SjD8nr/XlBRhLGg
UA0QgpcPQcj85wUuu0M6Or6xIYETqzG1ITXSsZSdIgshNrf0w4aM8FfQFM7awfdf
VRCWpuvjPbVQs9fcTrP1f9IQAVX84mte64Iepn71cQ5fPLwgK1/ry3+aQI3P96yO
ZKcso3JICeMGLNoFJ1r09nhysutWusflI+VZAX+wEt9mapMMSPfpD18cvo5SWCM1
2oHvyHiT2ewxTUx7+q9h2uEX0+dW3+cqw+b54EJTdggT11eGmUTicGMYqfypeXq9
e9ghZgR44NrSYq26WjOmngjqNzeWwlo=
-----END CERTIFICATE-----
Generated at Mon Jun 16 02:18:58 2025 by rpki-client