Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/efd8695b-3806-33bb-b363-ef5483f6c875.roa
File:                     efd8695b-3806-33bb-b363-ef5483f6c875.roa (raw, json)
Hash identifier:          1iVFvHzX2AWsl8k9IE/6SfnpjREqtWTkG0vljQcBBd8=
Subject key identifier:   5E:38:6A:5D:55:F2:24:92:92:BE:9F:B2:C6:A1:AF:FA:0B:6B:7F:80
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A1F904CC7E9149A6D9EF5FC00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/efd8695b-3806-33bb-b363-ef5483f6c875.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     399160
IP address blocks:        156.154.176.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:4c:c7:e9:14:9a:6d:9e:f5:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=f15a71be-5589-4053-a926-3b30e4b33b9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:7a:95:12:4a:de:14:78:3e:89:67:60:f0:b8:
                    0b:36:36:6f:a2:5e:85:17:96:a1:cb:fa:39:73:23:
                    3c:37:4b:70:96:ca:c2:eb:90:5c:67:eb:0d:f2:cc:
                    05:10:94:9e:bd:ad:73:a1:a5:c3:a5:1c:38:37:33:
                    f9:7e:b6:41:3e:ed:9c:5c:3c:40:9e:6f:9a:49:62:
                    25:93:6d:39:55:d4:20:1c:16:0f:37:10:db:7e:62:
                    0d:76:96:8e:41:86:b0:f2:de:85:b0:64:9e:34:a4:
                    23:b2:c4:d6:86:99:a7:66:5b:9f:84:df:4d:84:68:
                    22:99:a0:14:e2:1e:bc:3f:47:ed:1d:eb:65:90:c8:
                    f9:cd:a8:4c:d7:6f:52:2b:73:e3:32:ef:95:fd:4e:
                    fb:84:53:db:a7:cd:07:eb:44:0b:9e:0a:88:e9:cf:
                    84:c2:e0:d9:cd:6f:fb:ff:d4:e9:a1:c2:97:87:4d:
                    29:07:23:6f:7b:42:11:b3:f0:13:fb:b3:ed:5a:39:
                    fd:61:35:da:67:36:e8:1b:7f:f5:05:95:42:f5:cf:
                    bc:77:5f:d2:ea:00:b8:9e:2b:6f:6f:64:63:6e:37:
                    8e:b7:01:85:d7:03:88:b4:50:65:e2:4a:89:5d:97:
                    61:d4:88:0b:bb:3c:5c:8f:0d:e6:0b:e8:d1:23:d1:
                    0d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:38:6A:5D:55:F2:24:92:92:BE:9F:B2:C6:A1:AF:FA:0B:6B:7F:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/efd8695b-3806-33bb-b363-ef5483f6c875.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.176.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:95:f8:20:f6:67:cf:c7:82:0d:1c:3b:de:7e:1c:98:f5:1c:
         98:a5:a8:b0:d9:43:29:bc:ba:e9:8e:8f:48:e1:ff:a4:26:89:
         89:d9:29:7f:bc:df:0b:35:7f:00:28:f4:a6:df:e9:be:74:89:
         8c:b8:f3:66:93:9b:6c:17:f9:38:f2:c0:47:7f:e4:a8:f5:9b:
         4e:e0:1a:0b:e0:d8:09:8e:e5:02:07:23:53:f5:9f:ef:52:fb:
         08:a9:47:49:46:3f:af:87:38:38:25:15:b7:0c:4e:29:1f:60:
         66:a8:41:24:03:3a:1b:ca:da:8b:a9:05:d7:76:c2:37:c9:c3:
         3b:b0:82:0b:db:4d:ec:64:a9:9b:1e:e8:a0:b6:3a:c7:92:9a:
         61:98:25:52:9d:b7:22:ec:90:69:c2:e3:08:7d:78:02:d5:13:
         84:cf:a5:80:e9:68:2a:ed:73:56:d1:8a:b6:56:98:23:9a:f3:
         24:4c:d5:e1:ef:b7:cf:93:b9:c5:a4:88:c5:63:f5:1e:c9:74:
         d6:cf:f4:fd:a6:aa:74:04:57:4b:05:d7:8a:d2:e7:bc:6b:ba:
         f5:20:69:83:d5:86:b4:98:03:7b:ce:8c:b8:b0:38:22:0d:80:
         95:39:b3:c9:ae:4d:f3:0a:00:fe:ce:3b:21:86:7f:f2:1d:38:
         bf:b3:69:9f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEofkEzH6RSabZ71/AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDYwODEzMDEwMVoXDTI1MDkwNjEzMDEwMVowLzEtMCsGA1UEAxMk
ZjE1YTcxYmUtNTU4OS00MDUzLWE5MjYtM2IzMGU0YjMzYjllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnqVEkreFHg+iWdg8LgLNjZvol6FF5ahy/o5
cyM8N0twlsrC65BcZ+sN8swFEJSeva1zoaXDpRw4NzP5frZBPu2cXDxAnm+aSWIl
k205VdQgHBYPNxDbfmINdpaOQYaw8t6FsGSeNKQjssTWhpmnZlufhN9NhGgimaAU
4h68P0ftHetlkMj5zahM129SK3PjMu+V/U77hFPbp80H60QLngqI6c+EwuDZzW/7
/9TpocKXh00pByNve0IRs/AT+7PtWjn9YTXaZzboG3/1BZVC9c+8d1/S6gC4nitv
b2RjbjeOtwGF1wOItFBl4kqJXZdh1IgLuzxcjw3mC+jRI9ENiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF44al1V8iSSkr6fssahr/oLa3+AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZWZkODY5NWItMzgwNi0z
M2JiLWIzNjMtZWY1NDgzZjZjODc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnJqwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG2V+CD2Z8/Hgg0cO95+HJj1HJilqLDZQym8uumOj0jh/6QmiYnZKX+8
3ws1fwAo9Kbf6b50iYy482aTm2wX+TjywEd/5Kj1m07gGgvg2AmO5QIHI1P1n+9S
+wipR0lGP6+HODglFbcMTikfYGaoQSQDOhvK2oupBdd2wjfJwzuwggvbTexkqZse
6KC2OseSmmGYJVKdtyLskGnC4wh9eALVE4TPpYDpaCrtc1bRirZWmCOa8yRM1eHv
t8+TucWkiMVj9R7JdNbP9P2mqnQEV0sF14rS57xruvUgaYPVhrSYA3vOjLiwOCIN
gJU5s8muTfMKAP7OOyGGf/IdOL+zaZ8=
-----END CERTIFICATE-----
Generated at Wed Jun 18 03:18:20 2025 by rpki-client