Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dda9eb20-2d36-33fe-8705-27586da0d749.roa
File:                     dda9eb20-2d36-33fe-8705-27586da0d749.roa (raw, json)
Hash identifier:          ARs9yCmWNenFTw1KfAqFZGWXlArS5UES87xhKUHNWGs=
Subject key identifier:   12:91:67:8F:3E:8E:5B:01:40:06:D1:0B:1C:EF:4D:B6:D8:E9:89:BA
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584988CF53C0D5611071EB65E300
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dda9eb20-2d36-33fe-8705-27586da0d749.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     397233
IP address blocks:        156.154.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:53:c0:d5:61:10:71:eb:65:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=e071477a-74ca-40e2-a8e6-4572400db77a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7a:cc:35:1d:e0:fa:f6:f3:ae:b9:d9:8c:5f:
                    bf:2d:9e:20:6b:8c:e1:72:91:3e:e3:d6:51:61:eb:
                    21:fd:42:eb:60:24:1b:40:ba:bd:17:9c:2d:32:82:
                    5e:61:71:a6:18:45:58:f7:58:3d:e2:3f:38:fb:db:
                    4c:f8:70:75:c5:c4:ff:c8:3f:8d:c2:1c:88:85:18:
                    74:d5:28:3f:4f:4b:65:f4:56:40:9a:d4:6c:a8:29:
                    0a:61:6a:35:7f:cf:82:7d:ab:94:f6:fc:3a:ad:a4:
                    8b:dd:fd:5a:ec:db:3b:80:04:15:a7:80:fe:b7:0a:
                    12:2e:e0:7a:3c:8d:9d:70:46:01:41:a3:2f:89:2f:
                    86:9c:a9:38:97:b2:28:5d:31:50:02:e6:76:2d:36:
                    d5:26:5a:03:af:a8:24:d1:ac:f4:7a:7d:ac:d6:4a:
                    b8:a1:ba:99:72:69:10:96:a5:a3:e3:ed:e1:cf:32:
                    f6:22:da:53:f0:11:5c:1d:88:f7:48:19:5c:da:5c:
                    bf:6d:6e:fc:06:fd:88:92:ba:31:e1:7d:03:e8:c4:
                    f9:8a:ae:09:9d:db:49:0a:60:6c:50:68:f7:a5:04:
                    ce:11:55:ba:8c:5e:61:88:97:8c:7d:aa:b0:a7:1e:
                    85:52:b0:44:42:58:51:45:63:ac:0e:dc:81:08:e2:
                    19:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:91:67:8F:3E:8E:5B:01:40:06:D1:0B:1C:EF:4D:B6:D8:E9:89:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dda9eb20-2d36-33fe-8705-27586da0d749.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:01:d8:3d:41:cb:b1:b4:0d:cb:f1:b7:ff:90:4b:4d:df:c8:
         6c:91:74:83:f8:9b:80:4c:b2:87:cf:63:89:00:ce:47:4a:f0:
         0e:26:04:84:f8:ef:4e:dc:45:33:bb:0d:dd:73:56:95:25:68:
         86:31:1c:78:e5:4c:ed:ed:e3:5d:46:67:27:61:5a:18:ff:2f:
         58:bb:a8:22:15:d2:af:8e:4f:83:ee:f8:cb:fb:ed:fb:1c:e9:
         8a:74:ce:38:19:a2:50:51:1b:fa:a0:92:68:b7:93:39:d8:19:
         15:7e:48:1b:63:9b:42:d0:4a:cc:e5:9e:a3:bd:79:15:41:70:
         5b:a2:c4:a8:84:8d:b8:4a:8a:9d:35:6a:d1:82:e7:80:0a:f4:
         69:6d:aa:23:53:d0:1e:42:2f:70:f1:11:fd:0c:48:67:f1:9d:
         f4:7a:a4:ce:19:c2:16:5a:b5:21:57:98:39:2a:9a:4f:c3:8a:
         85:a5:e7:75:76:72:6c:cc:71:8e:c3:39:74:14:9f:3a:74:e6:
         52:ff:a0:7d:69:09:98:7a:4d:ed:16:7c:73:dc:c9:5c:de:be:
         7a:b2:09:db:3f:36:7a:6c:9b:47:0a:b9:fe:b8:cd:5c:58:7d:
         0e:45:b3:d8:e1:f9:a2:2b:ea:0b:7f:3a:c5:0f:e9:60:02:06:
         db:ef:b2:9d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIz1PA1WEQcetl4wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk
ZTA3MTQ3N2EtNzRjYS00MGUyLWE4ZTYtNDU3MjQwMGRiNzdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnrMNR3g+vbzrrnZjF+/LZ4ga4zhcpE+49ZR
Yesh/ULrYCQbQLq9F5wtMoJeYXGmGEVY91g94j84+9tM+HB1xcT/yD+NwhyIhRh0
1Sg/T0tl9FZAmtRsqCkKYWo1f8+CfauU9vw6raSL3f1a7Ns7gAQVp4D+twoSLuB6
PI2dcEYBQaMviS+GnKk4l7IoXTFQAuZ2LTbVJloDr6gk0az0en2s1kq4obqZcmkQ
lqWj4+3hzzL2ItpT8BFcHYj3SBlc2ly/bW78Bv2Ikrox4X0D6MT5iq4JndtJCmBs
UGj3pQTOEVW6jF5hiJeMfaqwpx6FUrBEQlhRRWOsDtyBCOIZiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBKRZ48+jlsBQAbRCxzvTbbY6Ym6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZGRhOWViMjAtMmQzNi0z
M2ZlLTg3MDUtMjc1ODZkYTBkNzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAsB2D1By7G0Dcvxt/+QS03fyGyRdIP4m4BMsofPY4kAzkdK8A4mBIT4
707cRTO7Dd1zVpUlaIYxHHjlTO3t411GZydhWhj/L1i7qCIV0q+OT4Pu+Mv77fsc
6Yp0zjgZolBRG/qgkmi3kznYGRV+SBtjm0LQSszlnqO9eRVBcFuixKiEjbhKip01
atGC54AK9GltqiNT0B5CL3DxEf0MSGfxnfR6pM4ZwhZatSFXmDkqmk/DioWl53V2
cmzMcY7DOXQUnzp05lL/oH1pCZh6Te0WfHPcyVzevnqyCds/Nnpsm0cKuf64zVxY
fQ5Fs9jh+aIr6gt/OsUP6WACBtvvsp0=
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:47:02 2025 by rpki-client