Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/72df99ef-62a9-3f9c-9b00-715bc2d2a390.roa
File:                     72df99ef-62a9-3f9c-9b00-715bc2d2a390.roa (raw, json)
Hash identifier:          o6DlSpT+hw/dChJZJ1sx8hxgvAQOXMRHmTUwaBAFfEY=
Subject key identifier:   C6:72:97:45:C2:58:7B:F6:20:6F:7D:B7:17:50:92:CD:FD:F4:06:70
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285849F17FF73DFC55260FA6911A00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/72df99ef-62a9-3f9c-9b00-715bc2d2a390.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     397224
IP address blocks:        156.154.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:f7:3d:fc:55:26:0f:a6:91:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=b0ba779a-e716-4ff5-b13a-77768f75b709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1c:5c:1c:5d:a0:90:84:e6:28:96:c5:eb:11:
                    fd:d9:90:45:f8:87:3c:45:e1:6d:78:29:de:ae:c9:
                    73:ed:85:49:ca:3e:96:6a:63:31:dd:59:af:fc:7f:
                    65:4d:79:e1:6e:a1:bd:88:28:d4:4c:b7:3c:6d:08:
                    35:11:2d:94:9f:80:ce:3c:3b:32:5a:04:1a:24:6b:
                    a4:cf:0b:b8:71:dc:cf:c7:cf:fc:e9:7f:05:ec:88:
                    1b:ee:60:df:36:45:b6:2e:86:74:59:92:0d:1f:ca:
                    82:16:02:0c:e6:9d:e8:15:a3:19:2b:98:9e:17:1a:
                    f0:e9:c3:ce:e2:28:8d:6f:1a:a6:de:5e:97:df:3d:
                    da:ac:c3:90:8f:4c:38:f9:cf:44:67:d1:4c:93:db:
                    72:a6:c8:9d:e8:24:d3:cb:e9:35:cb:3e:07:ae:17:
                    ae:3d:f7:27:9e:1a:e4:0b:75:39:94:ab:d7:3c:ec:
                    0d:4f:ad:97:de:61:98:6d:30:7a:75:ec:38:df:1d:
                    bc:66:f4:1b:12:0b:72:51:2a:1b:8c:4c:d5:10:23:
                    55:11:ac:e8:dd:ce:33:dd:08:82:67:f7:67:50:9a:
                    38:ec:a5:40:3e:18:6d:c0:f0:eb:04:36:51:39:5a:
                    fb:81:ea:a7:c8:10:3b:06:69:9a:2a:ea:67:03:c4:
                    9b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:72:97:45:C2:58:7B:F6:20:6F:7D:B7:17:50:92:CD:FD:F4:06:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/72df99ef-62a9-3f9c-9b00-715bc2d2a390.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:da:8c:29:4c:09:61:78:dc:f0:43:c6:df:13:61:b6:35:10:
         4f:10:7a:27:35:5e:54:26:83:97:75:5a:e3:7a:73:75:cd:d2:
         5e:54:af:08:03:42:d9:6f:89:b2:1a:0e:63:45:1b:c7:58:10:
         a6:5a:88:ce:04:24:7c:38:ca:61:02:18:91:76:36:ff:80:fa:
         d6:1e:02:f5:11:da:a1:a4:b8:da:8c:68:12:25:2d:81:e7:5f:
         eb:e5:89:61:70:2b:85:8d:75:41:d3:76:22:d3:ae:d8:02:ad:
         e8:fa:68:b7:bc:0f:1e:15:fd:aa:fd:a1:d3:b5:af:d2:5e:fe:
         de:e8:3f:3c:e3:53:c9:db:8c:f4:07:cb:de:bd:55:78:ec:f8:
         cf:7a:7f:27:ef:54:81:2e:c5:dc:61:7f:08:3c:f2:6a:72:af:
         00:23:85:1d:a1:40:8d:a7:78:77:f6:b1:d7:a7:eb:c7:55:8f:
         d9:00:6a:44:3e:44:df:d9:04:d3:da:70:a4:e2:8d:04:51:64:
         f9:ac:e6:40:72:c5:78:16:3e:cf:ad:53:8b:a7:c2:43:98:00:
         e1:16:3f:f0:32:33:fa:da:f1:f2:47:59:94:c8:06:39:3f:42:
         5e:5c:4c:4a:c2:20:21:b1:92:61:66:f5:34:e2:03:cb:90:ca:
         49:17:fd:a1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf/c9/FUmD6aRGgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk
YjBiYTc3OWEtZTcxNi00ZmY1LWIxM2EtNzc3NjhmNzViNzA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRxcHF2gkITmKJbF6xH92ZBF+Ic8ReFteCne
rslz7YVJyj6WamMx3Vmv/H9lTXnhbqG9iCjUTLc8bQg1ES2Un4DOPDsyWgQaJGuk
zwu4cdzPx8/86X8F7Igb7mDfNkW2LoZ0WZINH8qCFgIM5p3oFaMZK5ieFxrw6cPO
4iiNbxqm3l6X3z3arMOQj0w4+c9EZ9FMk9typsid6CTTy+k1yz4HrheuPfcnnhrk
C3U5lKvXPOwNT62X3mGYbTB6dew43x28ZvQbEgtyUSobjEzVECNVEazo3c4z3QiC
Z/dnUJo47KVAPhhtwPDrBDZROVr7geqnyBA7BmmaKupnA8SbHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMZyl0XCWHv2IG99txdQks399AZwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNzJkZjk5ZWYtNjJhOS0z
ZjljLTliMDAtNzE1YmMyZDJhMzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAXajClMCWF43PBDxt8TYbY1EE8Qeic1XlQmg5d1WuN6c3XN0l5UrwgD
QtlvibIaDmNFG8dYEKZaiM4EJHw4ymECGJF2Nv+A+tYeAvUR2qGkuNqMaBIlLYHn
X+vliWFwK4WNdUHTdiLTrtgCrej6aLe8Dx4V/ar9odO1r9Je/t7oPzzjU8nbjPQH
y969VXjs+M96fyfvVIEuxdxhfwg88mpyrwAjhR2hQI2neHf2sden68dVj9kAakQ+
RN/ZBNPacKTijQRRZPms5kByxXgWPs+tU4unwkOYAOEWP/AyM/ra8fJHWZTIBjk/
Ql5cTErCICGxkmFm9TTiA8uQykkX/aE=
-----END CERTIFICATE-----
Generated at Mon Jun 16 02:15:26 2025 by rpki-client