Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7f2093a8-58cd-3e36-9024-12ef20226397.roa
File:                     7f2093a8-58cd-3e36-9024-12ef20226397.roa (raw, json)
Hash identifier:          Z3wY8qf6jIfpjiP/RzlNg3jCr6vIjeti8EIzqSZ5W+I=
Subject key identifier:   5B:72:5A:E6:3E:A8:41:C5:C7:E5:0A:CD:EE:D7:95:FE:09:20:5E:8A
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858499C5A14CE0CAF2B71DE34DD00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7f2093a8-58cd-3e36-9024-12ef20226397.roa
Signing time:             Tue 22 Apr 2025 13:01:00 +0000
ROA not before:           Tue 22 Apr 2025 13:01:00 +0000
ROA not after:            Mon 21 Jul 2025 13:01:00 +0000
asID:                     397241
IP address blocks:        156.154.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9c:5a:14:ce:0c:af:2b:71:de:34:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 22 13:01:00 2025 GMT
            Not After : Jul 21 13:01:00 2025 GMT
        Subject: CN=b773fa50-fcd8-4601-bd65-46f5cf56d8db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:82:23:8d:4d:21:11:96:c4:63:7c:79:98:56:
                    d9:37:ab:33:e6:6b:25:e8:9f:ed:d3:db:53:8e:c5:
                    ea:8f:0f:15:5e:ad:c1:dc:57:f0:6e:e8:84:5f:25:
                    ac:b2:a0:36:27:a8:f3:13:c2:79:c9:78:3e:4d:75:
                    bb:13:11:51:df:fd:ad:02:44:de:7e:a8:29:f5:e9:
                    c4:d2:09:6c:c9:35:dd:70:1b:fc:62:0a:0e:69:73:
                    73:bf:4d:8e:63:f1:a1:7c:de:9f:23:6a:fd:ad:15:
                    dc:f3:1b:35:cd:6e:c6:06:fa:9c:a2:e3:74:0e:2a:
                    05:e3:d4:52:9d:c2:83:83:e6:2d:5c:68:b0:f4:66:
                    f2:38:7e:3d:01:41:04:22:8c:60:67:04:4f:fd:5c:
                    c4:85:7b:df:50:ca:6b:ba:f6:95:fc:85:59:d4:39:
                    99:c2:ce:bf:38:62:39:19:aa:41:85:9d:8e:5b:94:
                    1f:02:00:d7:f0:89:e1:0c:67:a4:21:8f:77:77:7c:
                    1c:93:2a:8d:e4:a4:bb:1c:0f:0c:d2:88:a0:25:92:
                    c9:74:39:56:20:c1:3f:ff:71:65:5b:85:57:37:cf:
                    ea:2a:1b:8d:f2:48:15:e2:a9:64:25:f2:59:ae:4e:
                    aa:ac:a3:15:62:7b:e8:de:dd:72:ea:08:9e:6b:13:
                    19:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:72:5A:E6:3E:A8:41:C5:C7:E5:0A:CD:EE:D7:95:FE:09:20:5E:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7f2093a8-58cd-3e36-9024-12ef20226397.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:6c:59:29:67:ec:b9:8c:18:71:4d:61:5a:e5:3e:79:ab:fe:
         ca:a9:22:50:e7:7f:11:31:9a:03:a1:dc:3a:f2:21:25:17:ea:
         56:f3:1c:4e:63:45:ee:07:ea:be:5d:f6:b9:45:b2:8c:61:b2:
         21:22:62:4d:76:a3:d6:0a:a4:9e:a3:5b:28:01:b3:d1:73:70:
         81:98:4b:40:f7:ee:06:5b:1b:8d:20:43:cb:eb:d5:0b:c7:bb:
         85:6c:e5:8f:50:cc:65:ef:c9:a9:ae:84:a0:11:c4:98:c5:d9:
         30:91:eb:f9:ce:70:84:51:4e:fa:37:af:3e:67:8c:03:be:bf:
         e5:76:70:0a:c8:94:88:e8:92:97:43:ee:ef:3c:d8:a5:cb:e3:
         fa:18:af:e6:93:dc:54:95:bf:fc:64:81:bf:28:4b:43:23:91:
         31:39:c1:05:d6:47:53:b1:ae:b9:bc:bf:c8:8a:2f:83:6b:50:
         37:d6:d6:73:ce:aa:9f:55:05:ed:f5:6f:eb:ed:96:1c:ca:d7:
         b1:75:ab:bc:39:f7:94:49:85:cf:47:fd:d8:bf:76:88:d2:00:
         0f:2f:7c:11:29:42:08:28:f1:b7:7e:70:8b:8c:e9:49:7f:4f:
         df:da:db:65:37:5a:0c:4c:fa:4e:e1:77:18:ff:b0:27:34:8f:
         2c:9b:10:e2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcWhTODK8rcd403QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDQyMjEzMDEwMFoXDTI1MDcyMTEzMDEwMFowLzEtMCsGA1UEAxMk
Yjc3M2ZhNTAtZmNkOC00NjAxLWJkNjUtNDZmNWNmNTZkOGRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYIjjU0hEZbEY3x5mFbZN6sz5msl6J/t09tT
jsXqjw8VXq3B3FfwbuiEXyWssqA2J6jzE8J5yXg+TXW7ExFR3/2tAkTefqgp9enE
0glsyTXdcBv8YgoOaXNzv02OY/GhfN6fI2r9rRXc8xs1zW7GBvqcouN0DioF49RS
ncKDg+YtXGiw9GbyOH49AUEEIoxgZwRP/VzEhXvfUMpruvaV/IVZ1DmZws6/OGI5
GapBhZ2OW5QfAgDX8InhDGekIY93d3wckyqN5KS7HA8M0oigJZLJdDlWIME//3Fl
W4VXN8/qKhuN8kgV4qlkJfJZrk6qrKMVYnvo3t1y6gieaxMZTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFtyWuY+qEHFx+UKze7Xlf4JIF6KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvN2YyMDkzYTgtNThjZC0z
ZTM2LTkwMjQtMTJlZjIwMjI2Mzk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJquMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAVsWSln7LmMGHFNYVrlPnmr/sqpIlDnfxExmgOh3DryISUX6lbzHE5j
Re4H6r5d9rlFsoxhsiEiYk12o9YKpJ6jWygBs9FzcIGYS0D37gZbG40gQ8vr1QvH
u4Vs5Y9QzGXvyamuhKARxJjF2TCR6/nOcIRRTvo3rz5njAO+v+V2cArIlIjokpdD
7u882KXL4/oYr+aT3FSVv/xkgb8oS0MjkTE5wQXWR1Oxrrm8v8iKL4NrUDfW1nPO
qp9VBe31b+vtlhzK17F1q7w595RJhc9H/di/dojSAA8vfBEpQggo8bd+cIuM6Ul/
T9/a22U3WgxM+k7hdxj/sCc0jyybEOI=
-----END CERTIFICATE-----
Generated at Sat Apr 26 20:24:27 2025 by rpki-client