Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9e9e484a-3c2a-34c2-bb34-0a30a9ad9fbd.roa
File:                     9e9e484a-3c2a-34c2-bb34-0a30a9ad9fbd.roa (raw, json)
Hash identifier:          rMG4zGZ+Rk1iIalgmvxbykAxjTg0kw8/tubLZAkI+Z0=
Subject key identifier:   3D:7A:4B:B4:08:91:6B:F9:5E:75:EE:0C:37:53:70:BC:71:CB:DA:27
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A7BB0D1612C94F1E0ECEEEB40
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9e9e484a-3c2a-34c2-bb34-0a30a9ad9fbd.roa
Signing time:             Fri 11 Jul 2025 13:01:05 +0000
ROA not before:           Fri 11 Jul 2025 13:01:05 +0000
ROA not after:            Thu 09 Oct 2025 13:01:05 +0000
asID:                     397213
IP address blocks:        156.154.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7b:b0:d1:61:2c:94:f1:e0:ec:ee:eb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul 11 13:01:05 2025 GMT
            Not After : Oct  9 13:01:05 2025 GMT
        Subject: CN=0ac47a3e-7675-4b6c-9dc0-19ee447d4ec2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:30:3e:95:d9:5a:3d:c8:66:3a:59:22:7a:95:
                    bd:66:9d:c3:35:2c:6c:ed:62:5d:48:e4:c4:da:54:
                    a2:bf:dc:9e:ab:9f:a7:d2:15:59:66:5b:23:48:6f:
                    65:85:b0:0d:61:82:7a:6c:ac:fe:70:d2:65:49:17:
                    db:58:e3:09:c7:c5:7e:f8:26:bf:b4:a8:c4:c6:56:
                    38:54:b9:f0:cc:45:ed:56:c5:56:4f:ad:f1:6c:04:
                    4b:dc:fe:ef:8e:cf:75:79:81:03:c1:2d:6a:2c:27:
                    01:a7:d1:4c:95:79:21:62:9b:41:48:f5:09:15:98:
                    c2:17:a2:6e:d2:59:ae:61:5a:29:ee:cf:13:8b:05:
                    b4:26:12:c3:cd:fa:cc:de:f5:3d:89:cf:33:bd:0e:
                    e0:59:ed:0c:a8:1c:7d:29:95:ba:44:3b:8e:ed:07:
                    b3:8f:92:50:00:ba:2e:55:f5:84:80:be:9a:11:36:
                    29:ec:6d:8b:62:02:1f:de:5f:aa:a0:ff:d7:81:cf:
                    f5:f0:aa:1a:c0:09:2e:69:d8:79:f2:cb:f0:b0:7b:
                    85:00:ba:06:5b:7c:da:4f:96:4f:f3:e4:bd:cc:2f:
                    fa:c1:2a:d8:35:3c:e5:86:ab:c3:c9:3a:c2:e9:e3:
                    0a:b6:7e:92:a9:a6:8d:92:fa:8d:f3:42:35:b4:4b:
                    3f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:7A:4B:B4:08:91:6B:F9:5E:75:EE:0C:37:53:70:BC:71:CB:DA:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9e9e484a-3c2a-34c2-bb34-0a30a9ad9fbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:18:d4:79:69:71:f4:5a:51:9e:bf:94:cb:3f:55:65:5f:01:
         e3:08:13:ae:f0:f1:9f:75:b0:f7:dd:48:15:35:77:37:89:a8:
         c0:c2:75:30:c3:b5:ca:7e:a6:b6:93:76:1e:2b:a4:53:12:6b:
         0e:5f:67:9f:dc:80:51:e7:9d:4f:40:bb:29:eb:0a:ca:29:48:
         01:c5:1a:f9:9d:28:5d:be:66:a5:7c:61:ca:b6:9d:14:1e:19:
         b5:46:46:79:7b:a8:4b:c5:53:4b:bb:a8:19:62:56:ae:20:1e:
         7f:1e:77:06:e5:fc:d7:c2:c7:60:90:de:3d:f0:2f:99:68:79:
         66:18:de:f9:e5:06:c1:8c:79:42:96:33:3e:bf:55:e5:a4:5d:
         9c:04:9e:5d:05:85:b9:78:a6:52:62:a2:e1:9f:ec:50:1f:35:
         41:af:ff:ca:87:1b:c6:3b:c9:16:3d:77:52:d0:fe:05:3f:fc:
         17:c8:d3:c2:e6:d9:06:91:38:7a:2e:49:86:ea:80:71:3a:2c:
         5a:b1:a6:fe:75:55:92:28:b1:f0:43:82:0b:b6:95:66:69:de:
         de:d9:08:d8:d8:8f:ec:76:0b:66:86:86:85:43:dc:a4:61:d2:
         86:08:83:5d:d1:4f:bd:eb:8a:27:a4:ce:0c:3d:53:9c:3e:e8:
         f5:da:53:96
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp7sNFhLJTx4Ozu60AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDcxMTEzMDEwNVoXDTI1MTAwOTEzMDEwNVowLzEtMCsGA1UEAxMk
MGFjNDdhM2UtNzY3NS00YjZjLTlkYzAtMTllZTQ0N2Q0ZWMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijA+ldlaPchmOlkiepW9Zp3DNSxs7WJdSOTE
2lSiv9yeq5+n0hVZZlsjSG9lhbANYYJ6bKz+cNJlSRfbWOMJx8V++Ca/tKjExlY4
VLnwzEXtVsVWT63xbARL3P7vjs91eYEDwS1qLCcBp9FMlXkhYptBSPUJFZjCF6Ju
0lmuYVop7s8TiwW0JhLDzfrM3vU9ic8zvQ7gWe0MqBx9KZW6RDuO7Qezj5JQALou
VfWEgL6aETYp7G2LYgIf3l+qoP/Xgc/18KoawAkuadh58svwsHuFALoGW3zaT5ZP
8+S9zC/6wSrYNTzlhqvDyTrC6eMKtn6SqaaNkvqN80I1tEs/qQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD16S7QIkWv5XnXuDDdTcLxxy9onMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOWU5ZTQ4NGEtM2MyYS0z
NGMyLWJiMzQtMGEzMGE5YWQ5ZmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADYY1HlpcfRaUZ6/lMs/VWVfAeMIE67w8Z91sPfdSBU1dzeJqMDCdTDD
tcp+praTdh4rpFMSaw5fZ5/cgFHnnU9AuynrCsopSAHFGvmdKF2+ZqV8Ycq2nRQe
GbVGRnl7qEvFU0u7qBliVq4gHn8edwbl/NfCx2CQ3j3wL5loeWYY3vnlBsGMeUKW
Mz6/VeWkXZwEnl0Fhbl4plJiouGf7FAfNUGv/8qHG8Y7yRY9d1LQ/gU//BfI08Lm
2QaROHouSYbqgHE6LFqxpv51VZIosfBDggu2lWZp3t7ZCNjYj+x2C2aGhoVD3KRh
0oYIg13RT73riiekzgw9U5w+6PXaU5Y=
-----END CERTIFICATE-----
Generated at Tue Aug 5 23:06:19 2025 by rpki-client