Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c578e704-82ca-3e1f-bf32-db7d95fcae74.roa
File:                     c578e704-82ca-3e1f-bf32-db7d95fcae74.roa (raw, json)
Hash identifier:          vKeJ9kCMryARvQUuohgKKRScI0pSPKCF7uugwIT7fxM=
Subject key identifier:   22:D1:38:FB:26:98:A5:78:FF:ED:EE:38:86:46:E0:97:A4:57:42:19
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584988CF51A79DF337116D72D080
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c578e704-82ca-3e1f-bf32-db7d95fcae74.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     397231
IP address blocks:        156.154.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:51:a7:9d:f3:37:11:6d:72:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=134be276-5472-431d-976f-7da122f43fda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:15:44:0c:b6:d2:81:8b:78:d0:e5:a0:3f:e4:
                    c2:9f:46:b3:fd:58:5e:db:47:1c:0d:71:57:25:e2:
                    50:1f:b4:39:58:3e:88:d0:98:ea:06:a7:40:8b:ea:
                    5f:ad:6f:f6:b7:2d:e4:c7:96:9d:fe:fe:9f:b7:ef:
                    35:62:c5:d7:0f:84:e1:43:12:42:44:4a:1c:09:75:
                    55:82:0b:0b:13:92:2f:43:33:c8:06:90:6f:d5:0a:
                    64:8c:b8:c9:b1:da:dd:07:db:0e:a8:5f:23:a2:14:
                    3d:bf:0a:4a:21:3d:70:18:90:02:e2:c4:cc:46:ec:
                    eb:fd:35:a9:81:49:83:d7:50:db:ac:0b:cd:8a:ce:
                    42:c1:e1:5e:4d:69:39:7f:6e:0c:66:89:d7:3b:6d:
                    11:28:df:1a:31:48:05:bc:15:2c:13:b6:9c:b0:7f:
                    67:99:0c:3c:b8:a6:c5:bf:b5:c8:21:63:36:23:0a:
                    b6:d4:8e:b1:9d:78:de:a6:aa:f1:d6:5d:71:1e:7e:
                    30:a4:f9:f4:12:b9:54:29:78:cd:d6:ae:02:3d:02:
                    80:43:4d:98:91:bf:75:83:3d:f1:01:ea:dc:4c:1e:
                    1c:ce:d5:ef:d3:f5:3d:86:5d:24:45:f7:11:55:32:
                    9a:85:f1:06:73:42:0d:1b:82:a6:98:74:82:d6:ca:
                    01:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:D1:38:FB:26:98:A5:78:FF:ED:EE:38:86:46:E0:97:A4:57:42:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c578e704-82ca-3e1f-bf32-db7d95fcae74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:4a:e7:56:77:a6:bd:d2:69:2d:b6:e7:dc:4b:5d:6e:d2:22:
         4f:ca:f5:00:0c:94:68:4e:35:35:2f:02:03:df:39:21:5f:e4:
         63:c2:da:03:3b:ca:39:0d:de:e7:71:fd:a9:7d:21:d2:ec:14:
         79:b5:f4:0c:ce:5b:f1:fe:e9:a7:0a:85:93:d2:16:76:e5:91:
         e0:5e:c1:df:58:b3:ab:b3:9c:65:d1:19:0a:01:ac:c1:9e:11:
         03:5d:d4:ff:f5:08:4b:03:bb:0f:38:6e:a7:87:10:f1:f5:bf:
         11:66:1b:57:ea:b2:a9:36:5f:d9:b2:58:43:e8:7d:28:18:fa:
         b3:79:76:95:07:f4:cb:64:e6:d6:51:25:c0:a5:92:70:32:77:
         bb:dc:42:82:9f:0d:c0:04:51:05:6c:be:eb:2b:20:b5:4d:87:
         8b:58:42:35:20:ab:26:06:25:e8:31:e6:9b:dd:b3:25:62:c0:
         ef:15:54:ab:a5:ac:8a:82:b5:9e:30:d0:02:a1:06:01:6c:fc:
         4c:01:04:66:30:b9:99:84:50:75:a9:19:04:02:88:81:65:77:
         b0:b7:02:65:fa:47:a6:d6:97:c1:1c:ca:47:73:df:44:84:44:
         01:ba:b6:23:21:70:8d:97:1c:db:af:29:a3:64:e9:f0:59:2e:
         6b:c9:e5:eb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIz1GnnfM3EW1y0IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk
MTM0YmUyNzYtNTQ3Mi00MzFkLTk3NmYtN2RhMTIyZjQzZmRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRVEDLbSgYt40OWgP+TCn0az/Vhe20ccDXFX
JeJQH7Q5WD6I0JjqBqdAi+pfrW/2ty3kx5ad/v6ft+81YsXXD4ThQxJCREocCXVV
ggsLE5IvQzPIBpBv1QpkjLjJsdrdB9sOqF8johQ9vwpKIT1wGJAC4sTMRuzr/TWp
gUmD11DbrAvNis5CweFeTWk5f24MZonXO20RKN8aMUgFvBUsE7acsH9nmQw8uKbF
v7XIIWM2Iwq21I6xnXjepqrx1l1xHn4wpPn0ErlUKXjN1q4CPQKAQ02Ykb91gz3x
AercTB4cztXv0/U9hl0kRfcRVTKahfEGc0ING4KmmHSC1soBWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCLROPsmmKV4/+3uOIZG4JekV0IZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYzU3OGU3MDQtODJjYS0z
ZTFmLWJmMzItZGI3ZDk1ZmNhZTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHpK51Z3pr3SaS2259xLXW7SIk/K9QAMlGhONTUvAgPfOSFf5GPC2gM7
yjkN3udx/al9IdLsFHm19AzOW/H+6acKhZPSFnblkeBewd9Ys6uznGXRGQoBrMGe
EQNd1P/1CEsDuw84bqeHEPH1vxFmG1fqsqk2X9myWEPofSgY+rN5dpUH9Mtk5tZR
JcClknAyd7vcQoKfDcAEUQVsvusrILVNh4tYQjUgqyYGJegx5pvdsyViwO8VVKul
rIqCtZ4w0AKhBgFs/EwBBGYwuZmEUHWpGQQCiIFld7C3AmX6R6bWl8Ecykdz30SE
RAG6tiMhcI2XHNuvKaNk6fBZLmvJ5es=
-----END CERTIFICATE-----
Generated at Sun Apr 27 01:03:20 2025 by rpki-client