Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a1545e09-d9aa-3cd7-864d-cabc95c21f61.roa
File:                     a1545e09-d9aa-3cd7-864d-cabc95c21f61.roa (raw, json)
Hash identifier:          NGUj2h+w9lZUgy+wuwgk99Ty1/fdZOgVTGYpXjS0NbM=
Subject key identifier:   0D:ED:47:3A:AC:7E:03:D5:E2:33:A4:2E:79:B1:5C:A5:72:08:EC:19
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858499C5A122A0275F445554ECA60
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a1545e09-d9aa-3cd7-864d-cabc95c21f61.roa
Signing time:             Tue 22 Apr 2025 13:01:00 +0000
ROA not before:           Tue 22 Apr 2025 13:01:00 +0000
ROA not after:            Mon 21 Jul 2025 13:01:00 +0000
asID:                     397226
IP address blocks:        156.154.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9c:5a:12:2a:02:75:f4:45:55:4e:ca:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 22 13:01:00 2025 GMT
            Not After : Jul 21 13:01:00 2025 GMT
        Subject: CN=004534e9-5619-4e36-871b-1d3b379dbe72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:65:27:8c:d3:e0:af:6c:c4:81:27:68:0f:f2:
                    a1:1d:4c:75:60:92:49:e7:74:46:14:00:3d:29:83:
                    d5:98:f7:26:4d:4b:b7:0d:46:9a:5d:16:a2:54:e7:
                    8c:b1:83:75:a4:6d:ce:1c:d3:65:44:18:2a:23:ae:
                    9d:72:b2:c8:98:e9:6c:7b:02:74:45:75:06:17:d2:
                    01:51:96:82:d6:db:a6:28:a6:a5:1d:44:8b:51:04:
                    ca:c4:83:53:52:5c:d9:5e:01:2c:09:9b:e2:f6:e5:
                    ab:6f:81:70:73:e4:a5:fd:54:e6:a4:b4:78:da:c8:
                    49:6a:46:7e:bf:c9:f2:70:ad:a4:5b:f3:05:e4:7f:
                    99:bf:65:5d:64:cf:b8:13:76:e0:82:ce:95:27:97:
                    ea:68:9d:4f:fb:35:13:3a:53:84:52:6a:9e:45:3a:
                    d0:e8:51:08:22:53:85:a0:fa:0a:df:06:ea:57:fb:
                    76:2e:98:cc:9f:02:cf:ee:0e:59:91:a3:31:86:e6:
                    fb:af:74:09:3a:48:29:a5:97:01:3b:06:a1:fb:9c:
                    09:29:e7:e3:f9:3b:fa:25:53:92:20:24:2b:3c:52:
                    8c:75:d2:51:76:e6:91:80:7e:df:15:7b:2a:a4:1e:
                    be:35:bb:d2:04:73:9d:08:35:c7:09:91:79:4c:67:
                    23:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:ED:47:3A:AC:7E:03:D5:E2:33:A4:2E:79:B1:5C:A5:72:08:EC:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a1545e09-d9aa-3cd7-864d-cabc95c21f61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:07:df:dc:20:56:65:d7:10:3e:4f:0d:96:1f:b3:b0:a5:25:
         91:92:49:29:dd:a0:bf:fb:f5:18:16:b5:93:3c:c3:c5:fa:77:
         e0:d5:57:ae:24:73:d8:4b:54:2e:d9:c8:f1:d7:df:1f:aa:a2:
         b6:28:ee:f5:e8:c2:d6:46:56:de:32:9b:85:83:83:32:39:6a:
         92:da:ac:09:32:22:a7:e2:20:1e:4f:83:a0:57:79:9b:69:5d:
         be:93:76:60:58:82:1c:c9:39:9a:79:f4:1e:04:3d:21:07:5a:
         54:dd:2c:ee:5c:14:7d:f2:41:0d:cd:78:7e:77:56:ea:00:22:
         e3:e5:21:b5:c3:d9:29:8c:4a:7f:6c:ae:f7:ca:6b:30:1f:fd:
         82:10:82:e0:05:c8:8f:44:0d:9a:1e:c7:a8:5f:2f:8c:a7:be:
         cc:e8:87:d9:ea:e4:1f:e7:2e:5a:19:1d:23:5d:7a:47:dd:35:
         4a:fa:4f:5b:db:78:b2:86:45:c5:fa:ab:9a:a1:c5:32:5e:0d:
         56:5e:45:e5:5e:b9:a2:18:d3:ed:db:ed:b5:d7:57:b9:5f:23:
         68:9d:ca:8a:0e:2c:4e:f0:ba:f0:55:55:4d:58:45:3d:52:e8:
         93:88:52:60:c7:da:c3:5c:8d:5f:1a:12:0f:d2:63:9b:98:05:
         3d:da:7b:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcWhIqAnX0RVVOymAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDQyMjEzMDEwMFoXDTI1MDcyMTEzMDEwMFowLzEtMCsGA1UEAxMk
MDA0NTM0ZTktNTYxOS00ZTM2LTg3MWItMWQzYjM3OWRiZTcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmUnjNPgr2zEgSdoD/KhHUx1YJJJ53RGFAA9
KYPVmPcmTUu3DUaaXRaiVOeMsYN1pG3OHNNlRBgqI66dcrLImOlsewJ0RXUGF9IB
UZaC1tumKKalHUSLUQTKxINTUlzZXgEsCZvi9uWrb4Fwc+Sl/VTmpLR42shJakZ+
v8nycK2kW/MF5H+Zv2VdZM+4E3bggs6VJ5fqaJ1P+zUTOlOEUmqeRTrQ6FEIIlOF
oPoK3wbqV/t2LpjMnwLP7g5ZkaMxhub7r3QJOkgppZcBOwah+5wJKefj+Tv6JVOS
ICQrPFKMddJRduaRgH7fFXsqpB6+NbvSBHOdCDXHCZF5TGcj1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA3tRzqsfgPV4jOkLnmxXKVyCOwZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYTE1NDVlMDktZDlhYS0z
Y2Q3LTg2NGQtY2FiYzk1YzIxZjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACQH39wgVmXXED5PDZYfs7ClJZGSSSndoL/79RgWtZM8w8X6d+DVV64k
c9hLVC7ZyPHX3x+qorYo7vXowtZGVt4ym4WDgzI5apLarAkyIqfiIB5Pg6BXeZtp
Xb6TdmBYghzJOZp59B4EPSEHWlTdLO5cFH3yQQ3NeH53VuoAIuPlIbXD2SmMSn9s
rvfKazAf/YIQguAFyI9EDZoex6hfL4ynvszoh9nq5B/nLloZHSNdekfdNUr6T1vb
eLKGRcX6q5qhxTJeDVZeReVeuaIY0+3b7bXXV7lfI2idyooOLE7wuvBVVU1YRT1S
6JOIUmDH2sNcjV8aEg/SY5uYBT3aewo=
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:40:12 2025 by rpki-client