Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/74ae6d52-8f29-3071-8f66-551c3bc15907.roa
File:                     74ae6d52-8f29-3071-8f66-551c3bc15907.roa (raw, json)
Hash identifier:          1b2InhZ732U2tNR99unfrowio1LrSEpeKqBJivxjt1A=
Subject key identifier:   13:FB:A0:5E:FD:BA:97:B5:7F:FF:90:54:47:76:10:85:90:0D:34:23
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858499C5A0C4CEE3B90F9D169DEF0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/74ae6d52-8f29-3071-8f66-551c3bc15907.roa
Signing time:             Tue 22 Apr 2025 13:01:00 +0000
ROA not before:           Tue 22 Apr 2025 13:01:00 +0000
ROA not after:            Mon 21 Jul 2025 13:01:00 +0000
asID:                     397228
IP address blocks:        156.154.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9c:5a:0c:4c:ee:3b:90:f9:d1:69:de:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 22 13:01:00 2025 GMT
            Not After : Jul 21 13:01:00 2025 GMT
        Subject: CN=142b6f67-cabc-4d9b-b2a9-f482269960fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f9:f1:fb:a4:bc:41:68:2f:93:a8:fa:5d:1f:
                    42:cb:39:4b:28:8e:18:42:ee:e2:8c:51:9d:d5:00:
                    f6:5a:fc:51:21:ce:d5:50:b2:83:bd:9b:8f:61:89:
                    b4:9b:b0:38:46:4c:ed:2a:09:62:32:86:91:28:bd:
                    dd:c9:e6:e6:32:06:3e:7c:84:52:14:e9:07:5d:96:
                    2c:2e:30:2b:03:8d:89:c5:62:b7:a3:91:8d:ea:01:
                    49:c4:97:da:a2:5d:94:07:d1:4d:69:18:6f:3d:ab:
                    c6:1e:eb:78:7e:5b:c9:f0:2d:82:e0:bc:91:df:02:
                    3e:5c:1b:b2:77:08:0f:8e:2d:3a:75:49:87:46:ad:
                    f3:79:d5:7f:ff:8f:11:7d:d4:e4:55:b3:45:3b:2e:
                    31:d1:0b:49:62:ef:38:a7:7f:27:fd:f7:4d:ca:9a:
                    73:25:15:2f:19:ed:f0:4d:57:a3:e9:d6:f6:0f:4f:
                    ae:e4:6f:b4:7d:44:16:93:fa:f3:a3:a9:fc:81:7e:
                    c1:ec:59:f1:f8:63:03:db:92:36:7e:35:0e:ec:bd:
                    8d:a9:5f:02:1a:1d:82:be:a6:d8:6c:36:65:3f:df:
                    73:35:ff:b9:2c:4b:b4:03:bc:83:9f:f9:7b:e9:59:
                    e7:f2:99:dc:a6:cf:5d:50:94:62:80:d9:3d:8e:ff:
                    f8:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:FB:A0:5E:FD:BA:97:B5:7F:FF:90:54:47:76:10:85:90:0D:34:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/74ae6d52-8f29-3071-8f66-551c3bc15907.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:6a:25:ec:a9:08:42:80:59:f4:a1:71:cd:d2:d4:1e:3e:17:
         9c:b2:f7:5e:5e:b8:35:c9:cb:0f:22:84:8e:8f:88:9f:3e:40:
         90:e3:4c:da:0b:0d:4b:44:3b:71:f5:18:4b:aa:53:ea:52:54:
         89:62:e3:fa:28:e6:8b:1b:e4:54:93:b3:8b:9f:fc:39:f1:a6:
         88:b8:02:5f:eb:f9:27:6c:fc:1e:0d:89:df:2a:c4:0e:1b:57:
         3a:6a:c0:36:9a:09:5e:68:a7:75:35:7d:b7:2e:c9:24:64:7c:
         77:6f:01:67:f9:a6:68:4f:49:6e:03:6c:6a:6b:69:e3:8a:60:
         4c:54:cb:1f:6f:da:ae:f7:58:35:53:e5:a6:20:a3:23:bd:80:
         2a:0b:da:a4:c6:b8:1d:d0:fa:3c:c1:0a:83:c8:c7:cb:21:25:
         bf:48:e9:8c:77:01:ad:c4:76:3f:6d:d5:88:d9:b6:97:be:44:
         f3:a6:6f:11:e2:65:ec:7d:a5:20:3f:d2:21:8c:09:91:bd:06:
         cf:95:5d:26:2f:7c:16:4e:27:a5:00:1f:bb:4f:5b:ad:d1:ed:
         e4:3d:af:ec:41:02:92:93:31:27:30:68:0e:34:0c:be:7a:fb:
         88:08:01:26:ae:79:05:da:e9:b5:d8:be:5b:98:27:1d:55:9f:
         2d:86:ea:1d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcWgxM7juQ+dFp3vAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDQyMjEzMDEwMFoXDTI1MDcyMTEzMDEwMFowLzEtMCsGA1UEAxMk
MTQyYjZmNjctY2FiYy00ZDliLWIyYTktZjQ4MjI2OTk2MGZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvnx+6S8QWgvk6j6XR9CyzlLKI4YQu7ijFGd
1QD2WvxRIc7VULKDvZuPYYm0m7A4RkztKgliMoaRKL3dyebmMgY+fIRSFOkHXZYs
LjArA42JxWK3o5GN6gFJxJfaol2UB9FNaRhvPavGHut4flvJ8C2C4LyR3wI+XBuy
dwgPji06dUmHRq3zedV//48RfdTkVbNFOy4x0QtJYu84p38n/fdNyppzJRUvGe3w
TVej6db2D0+u5G+0fUQWk/rzo6n8gX7B7Fnx+GMD25I2fjUO7L2NqV8CGh2CvqbY
bDZlP99zNf+5LEu0A7yDn/l76Vnn8pncps9dUJRigNk9jv/4/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBP7oF79upe1f/+QVEd2EIWQDTQjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNzRhZTZkNTItOGYyOS0z
MDcxLThmNjYtNTUxYzNiYzE1OTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE5qJeypCEKAWfShcc3S1B4+F5yy915euDXJyw8ihI6PiJ8+QJDjTNoL
DUtEO3H1GEuqU+pSVIli4/oo5osb5FSTs4uf/Dnxpoi4Al/r+Sds/B4Nid8qxA4b
VzpqwDaaCV5op3U1fbcuySRkfHdvAWf5pmhPSW4DbGpraeOKYExUyx9v2q73WDVT
5aYgoyO9gCoL2qTGuB3Q+jzBCoPIx8shJb9I6Yx3Aa3Edj9t1YjZtpe+RPOmbxHi
Zex9pSA/0iGMCZG9Bs+VXSYvfBZOJ6UAH7tPW63R7eQ9r+xBApKTMScwaA40DL56
+4gIASaueQXa6bXYvluYJx1Vny2G6h0=
-----END CERTIFICATE-----
Generated at Tue Apr 29 00:10:53 2025 by rpki-client