Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6e87fb15-0e3e-393e-aff8-b8f399b3999f.roa
File:                     6e87fb15-0e3e-393e-aff8-b8f399b3999f.roa (raw, json)
Hash identifier:          jb8e2AaWRvUW+wku+JFUt/o7NISPS+WUKJOtIB33lhw=
Subject key identifier:   15:24:51:D7:79:4F:C8:68:A7:C6:F3:E2:3D:63:B0:A0:83:07:E4:FD
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A6826351768F5535159A22A00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6e87fb15-0e3e-393e-aff8-b8f399b3999f.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     397235
IP address blocks:        156.154.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:35:17:68:f5:53:51:59:a2:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=509cf925-0077-4e50-9fea-cfe8f7909253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:98:7c:e2:6c:c5:0a:5d:56:25:c5:34:31:d6:
                    4e:78:48:e9:66:82:cd:a0:23:a9:64:c8:8a:e8:d3:
                    e9:f4:bc:af:8f:19:71:12:7d:12:23:63:88:0e:af:
                    4e:8b:b1:c1:d4:92:80:f2:5e:1d:f4:18:78:68:57:
                    18:a2:bf:a3:c9:5f:8c:cb:bd:c2:c8:49:29:2d:68:
                    e0:87:6a:a2:3c:55:ac:4f:1c:86:21:c6:4d:f1:ea:
                    e5:61:ca:88:c2:50:5a:b3:bb:b6:89:77:db:ee:61:
                    5a:0d:cc:ab:cc:65:e3:b3:8e:5d:a8:bc:85:2d:cf:
                    39:b0:ab:a6:2c:8d:ed:66:c1:34:9d:89:2a:e9:37:
                    9f:43:6d:d5:bd:2d:4f:64:18:3b:04:84:8e:fc:79:
                    cb:ed:06:28:39:c5:3e:b1:25:e6:1e:7c:71:28:45:
                    56:ee:12:cd:76:99:53:0a:ad:3d:d0:4c:79:d1:82:
                    1a:91:ac:bb:82:1f:dd:08:66:cb:15:f2:d8:72:0a:
                    ed:c5:00:2d:01:d3:8f:68:22:67:95:af:29:5e:fd:
                    fe:af:4a:a7:2a:24:90:c1:58:b2:e1:01:67:63:99:
                    96:6b:67:f5:63:07:a9:06:38:b5:2f:d7:a8:37:c9:
                    45:0a:ad:87:4d:fe:23:0b:ec:73:f0:16:6b:aa:1b:
                    2b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:24:51:D7:79:4F:C8:68:A7:C6:F3:E2:3D:63:B0:A0:83:07:E4:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6e87fb15-0e3e-393e-aff8-b8f399b3999f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:f4:2e:83:b9:dd:f2:c9:80:a0:22:47:9f:a1:6c:88:16:59:
         af:07:d8:24:60:e6:1b:d6:00:e9:a9:bc:19:7e:60:ab:22:16:
         0d:38:d0:28:30:6f:c1:0e:c9:4c:09:08:05:21:61:2b:e0:03:
         39:c0:b9:d8:da:d3:c6:5a:5b:65:de:1b:56:92:33:6f:d8:ce:
         e4:fb:52:a0:a3:37:87:1d:a1:98:e0:a5:04:8a:b0:b6:2d:07:
         09:06:17:ed:5f:8d:07:a4:bb:1c:ba:dc:8d:ef:ff:2d:32:1a:
         d3:a4:6f:d6:d6:22:14:b5:27:1d:0c:1c:c9:34:6f:07:5d:3c:
         47:1d:5f:5b:6c:d0:9e:d6:00:da:9a:3a:f4:8e:ce:1d:5a:02:
         38:28:a6:38:72:e3:60:cb:67:a5:50:ab:c3:e7:ea:4b:46:71:
         32:5e:57:fa:f1:e8:6c:81:19:53:84:f8:dc:bd:b0:0b:5d:06:
         1c:71:4c:58:30:7c:36:68:34:30:62:1b:9f:f2:f3:21:18:23:
         b4:f9:9f:36:e4:e8:e8:34:cb:b3:bc:b2:16:d5:6a:80:3d:b4:
         2a:af:36:df:3e:36:9d:23:14:e1:aa:7e:e6:5c:aa:48:55:bb:
         54:1f:1b:f9:e5:2b:8d:55:57:a8:da:e2:eb:a8:c5:5c:6b:62:
         d7:8c:3b:58
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJjUXaPVTUVmiKgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk
NTA5Y2Y5MjUtMDA3Ny00ZTUwLTlmZWEtY2ZlOGY3OTA5MjUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJh84mzFCl1WJcU0MdZOeEjpZoLNoCOpZMiK
6NPp9LyvjxlxEn0SI2OIDq9Oi7HB1JKA8l4d9Bh4aFcYor+jyV+My73CyEkpLWjg
h2qiPFWsTxyGIcZN8erlYcqIwlBas7u2iXfb7mFaDcyrzGXjs45dqLyFLc85sKum
LI3tZsE0nYkq6TefQ23VvS1PZBg7BISO/HnL7QYoOcU+sSXmHnxxKEVW7hLNdplT
Cq090Ex50YIakay7gh/dCGbLFfLYcgrtxQAtAdOPaCJnla8pXv3+r0qnKiSQwViy
4QFnY5mWa2f1YwepBji1L9eoN8lFCq2HTf4jC+xz8BZrqhsrBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBUkUdd5T8hop8bz4j1jsKCDB+T9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNmU4N2ZiMTUtMGUzZS0z
OTNlLWFmZjgtYjhmMzk5YjM5OTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAP0LoO53fLJgKAiR5+hbIgWWa8H2CRg5hvWAOmpvBl+YKsiFg040Cgw
b8EOyUwJCAUhYSvgAznAudja08ZaW2XeG1aSM2/YzuT7UqCjN4cdoZjgpQSKsLYt
BwkGF+1fjQekuxy63I3v/y0yGtOkb9bWIhS1Jx0MHMk0bwddPEcdX1ts0J7WANqa
OvSOzh1aAjgopjhy42DLZ6VQq8Pn6ktGcTJeV/rx6GyBGVOE+Ny9sAtdBhxxTFgw
fDZoNDBiG5/y8yEYI7T5nzbk6Og0y7O8shbVaoA9tCqvNt8+Np0jFOGqfuZcqkhV
u1QfG/nlK41VV6ja4uuoxVxrYteMO1g=
-----END CERTIFICATE-----
Generated at Wed Aug 6 04:16:57 2025 by rpki-client