Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/add70b3d-0b91-3d0f-9a7c-4e4274e5c820.roa
File:                     add70b3d-0b91-3d0f-9a7c-4e4274e5c820.roa (raw, json)
Hash identifier:          E0GQqA4qk9eITwHt05QIzmggKZcvw0MXox5roMl1dIo=
Subject key identifier:   68:76:FE:A1:2E:D9:7E:D4:D1:E3:4B:F4:F6:EB:23:E7:A4:84:F5:E7
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285849F17FFC9756181719C1FC5A80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/add70b3d-0b91-3d0f-9a7c-4e4274e5c820.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     397217
IP address blocks:        156.154.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:fc:97:56:18:17:19:c1:fc:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=6264437d-a456-4893-a623-c79ae77cd955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a5:e2:55:40:89:b9:5b:03:27:5d:ed:62:d6:
                    93:3e:14:f1:e0:8f:fd:11:e1:19:34:64:c7:c7:60:
                    48:93:6b:f3:08:6f:7a:7d:7e:92:1b:4d:bb:6a:10:
                    98:79:88:49:d5:5c:31:21:a8:0f:95:15:80:e8:86:
                    0b:d3:6b:2c:86:fd:e5:a5:bd:23:bf:a2:b5:a2:83:
                    ee:83:b0:47:05:97:33:07:10:dd:09:17:4a:da:12:
                    bc:08:89:6c:b2:99:b2:e1:59:ee:d0:66:da:64:b9:
                    4b:42:9b:67:86:7b:13:ef:26:51:72:93:12:12:ee:
                    d5:0c:38:b1:ea:ca:93:e4:93:d4:94:1f:25:e8:e9:
                    aa:14:39:a1:47:52:6b:f6:7e:0b:09:34:b6:af:59:
                    27:6b:28:5d:4c:30:b3:30:d3:aa:5a:a4:19:23:8a:
                    62:93:11:c5:db:80:fe:5c:5f:49:25:2a:16:26:c9:
                    2a:9d:37:83:31:63:b9:2e:c3:cb:fe:15:04:f1:c8:
                    05:5b:23:e3:78:0b:e1:a5:35:03:ee:2a:6c:d4:b5:
                    f1:5c:9c:98:13:1a:47:9d:ef:1f:e4:87:5a:e9:c3:
                    bc:b3:95:01:2c:92:7c:76:ad:06:f1:ac:1a:e1:18:
                    7f:07:78:cd:10:dd:d5:fe:ab:85:0f:ce:ee:ed:64:
                    3f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:76:FE:A1:2E:D9:7E:D4:D1:E3:4B:F4:F6:EB:23:E7:A4:84:F5:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/add70b3d-0b91-3d0f-9a7c-4e4274e5c820.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:d6:23:34:3c:c4:06:45:73:aa:02:4b:bb:e9:90:d5:e8:69:
         e4:41:d4:0a:df:c8:c2:56:76:36:b5:7b:a0:c9:c3:7d:98:e7:
         20:f8:11:6f:8f:5d:c2:6b:ad:89:c3:dd:62:72:c4:d4:d6:8a:
         72:41:23:51:c7:10:e5:39:ab:26:e3:d1:c2:4a:af:f1:09:68:
         11:b6:66:41:9c:0f:e3:d8:2a:32:90:f0:bf:94:bf:dd:66:7e:
         c7:3c:97:56:bf:12:7e:8f:cf:9f:86:8e:c4:da:5c:99:97:24:
         c9:3d:c3:4c:0c:43:28:10:9e:50:b4:a2:96:b0:8f:58:70:28:
         03:7b:82:8a:eb:1c:ec:14:b8:4a:47:d7:76:f1:1b:27:03:60:
         f2:08:86:d8:47:c0:a6:1c:ae:14:1d:04:ef:18:1d:3c:3d:64:
         92:56:35:43:82:32:db:2f:c3:0b:a9:c8:13:2e:ad:e6:34:00:
         60:d5:3a:f2:b1:44:37:f8:06:b8:26:32:b9:8a:26:13:fa:db:
         9e:8c:bf:3c:d0:e6:b1:34:dc:e4:d8:e9:7a:ae:75:42:55:2e:
         a4:87:85:9f:73:a2:5f:22:e8:89:f1:05:e2:c6:36:36:0e:2b:
         c6:62:51:d8:c6:33:14:e0:a3:88:55:1c:1a:b8:48:89:eb:13:
         fe:05:ee:38
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf/yXVhgXGcH8WoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk
NjI2NDQzN2QtYTQ1Ni00ODkzLWE2MjMtYzc5YWU3N2NkOTU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaXiVUCJuVsDJ13tYtaTPhTx4I/9EeEZNGTH
x2BIk2vzCG96fX6SG027ahCYeYhJ1VwxIagPlRWA6IYL02sshv3lpb0jv6K1ooPu
g7BHBZczBxDdCRdK2hK8CIlsspmy4Vnu0GbaZLlLQptnhnsT7yZRcpMSEu7VDDix
6sqT5JPUlB8l6OmqFDmhR1Jr9n4LCTS2r1knayhdTDCzMNOqWqQZI4pikxHF24D+
XF9JJSoWJskqnTeDMWO5LsPL/hUE8cgFWyPjeAvhpTUD7ips1LXxXJyYExpHne8f
5Ida6cO8s5UBLJJ8dq0G8awa4Rh/B3jNEN3V/quFD87u7WQ/NQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGh2/qEu2X7U0eNL9PbrI+ekhPXnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYWRkNzBiM2QtMGI5MS0z
ZDBmLTlhN2MtNGU0Mjc0ZTVjODIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEzWIzQ8xAZFc6oCS7vpkNXoaeRB1ArfyMJWdja1e6DJw32Y5yD4EW+P
XcJrrYnD3WJyxNTWinJBI1HHEOU5qybj0cJKr/EJaBG2ZkGcD+PYKjKQ8L+Uv91m
fsc8l1a/En6Pz5+GjsTaXJmXJMk9w0wMQygQnlC0opawj1hwKAN7gorrHOwUuEpH
13bxGycDYPIIhthHwKYcrhQdBO8YHTw9ZJJWNUOCMtsvwwupyBMureY0AGDVOvKx
RDf4BrgmMrmKJhP6256MvzzQ5rE03OTY6XqudUJVLqSHhZ9zol8i6InxBeLGNjYO
K8ZiUdjGMxTgo4hVHBq4SInrE/4F7jg=
-----END CERTIFICATE-----
Generated at Mon Jun 16 02:05:01 2025 by rpki-client