Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f0f92082-3851-3231-8ffd-7b35c4e5549e.roa
File:                     f0f92082-3851-3231-8ffd-7b35c4e5549e.roa (raw, json)
Hash identifier:          TSVbTy8/P2nM1tIqpe6FacQR0Dk9czQSqRKEZghwU5k=
Subject key identifier:   92:F0:50:20:31:64:B6:65:9C:21:72:93:14:41:35:1B:2F:15:FD:0E
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A7BB0CFE2797E4D965B732380
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f0f92082-3851-3231-8ffd-7b35c4e5549e.roa
Signing time:             Fri 11 Jul 2025 13:01:05 +0000
ROA not before:           Fri 11 Jul 2025 13:01:05 +0000
ROA not after:            Thu 09 Oct 2025 13:01:05 +0000
asID:                     397221
IP address blocks:        156.154.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7b:b0:cf:e2:79:7e:4d:96:5b:73:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul 11 13:01:05 2025 GMT
            Not After : Oct  9 13:01:05 2025 GMT
        Subject: CN=fb7e981d-d165-4c93-849f-3d0214477d6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:7b:af:97:a5:26:52:10:3b:0b:99:58:f6:56:
                    74:34:3f:a5:f5:63:1d:97:7a:78:8b:06:a3:01:58:
                    0b:74:5c:73:17:ff:ab:53:20:5b:43:1e:d0:cd:31:
                    cb:e2:88:c0:b8:7e:57:16:2d:c1:f3:a6:19:9a:17:
                    b0:8c:86:a8:6f:b4:48:9b:ad:e0:03:b5:99:91:59:
                    bb:08:aa:33:dc:0e:be:e8:77:67:58:ce:0f:4c:57:
                    7a:3b:0e:f6:73:ac:34:28:e2:e8:ba:c3:ee:a1:4a:
                    8e:8f:93:b7:92:7b:6b:ac:33:f2:1e:bd:f9:18:63:
                    7d:b1:27:80:0e:72:8d:08:c2:76:84:94:eb:4e:98:
                    02:5c:18:2d:92:0d:33:c1:fc:23:cb:97:1b:da:c9:
                    71:06:9a:60:ae:be:6d:05:f6:48:72:f4:ea:d1:cf:
                    f6:f4:46:69:52:72:0c:23:f4:d2:67:02:f2:71:00:
                    7b:a8:1a:37:a2:51:da:b8:6d:cd:47:13:ae:7e:9b:
                    04:49:fd:05:89:18:b9:d5:51:69:5f:f1:e2:a7:96:
                    6e:4f:25:e9:3c:d7:77:17:ed:1d:f3:d5:f7:b7:cd:
                    33:3e:55:be:78:95:86:54:34:05:f4:89:16:18:20:
                    69:75:1f:02:c0:73:af:0a:f8:cb:54:31:40:7d:24:
                    ef:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:F0:50:20:31:64:B6:65:9C:21:72:93:14:41:35:1B:2F:15:FD:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f0f92082-3851-3231-8ffd-7b35c4e5549e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:81:ad:b5:46:b1:41:cc:80:26:47:06:c9:77:cd:39:0b:52:
         77:b5:4e:95:6f:50:26:02:4a:18:68:2f:02:f5:97:b6:cc:87:
         b4:b4:56:98:9b:3a:8f:92:d7:d1:59:17:bf:53:1a:a1:37:67:
         e0:b5:c0:7b:6e:5e:b7:b3:e9:0a:c9:e5:52:94:21:c6:b7:2a:
         39:a6:75:d8:d1:7e:2e:ac:4b:cb:b0:82:36:b7:23:5e:78:10:
         63:32:4c:30:68:50:18:00:d4:64:5c:1b:45:0c:d3:61:3a:a7:
         22:88:d0:1a:f2:98:a0:88:ba:c1:0c:b1:7f:1e:42:59:f7:a4:
         b7:0b:6c:be:a8:1e:50:b5:09:f3:8a:a2:bc:14:6f:3f:d4:90:
         bc:b1:a6:c5:5d:f3:dd:ce:38:86:55:f9:ad:e3:50:3e:5f:6a:
         8a:1e:17:78:5b:24:c6:40:fb:25:b4:a9:db:75:d9:ca:1f:5d:
         29:6f:08:9c:3a:6f:df:9f:fc:4d:8d:4e:51:fd:b3:f6:de:74:
         3b:55:a4:12:e4:56:1a:7e:32:80:e1:77:b4:f0:b1:4c:a8:97:
         28:4d:9a:c4:27:da:a6:c7:4e:32:91:5e:b6:3c:48:f5:54:3b:
         45:48:d0:12:c4:3e:db:35:80:f0:29:ee:f3:9a:b5:b3:db:56:
         7a:77:d1:6b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp7sM/ieX5NlltzI4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDcxMTEzMDEwNVoXDTI1MTAwOTEzMDEwNVowLzEtMCsGA1UEAxMk
ZmI3ZTk4MWQtZDE2NS00YzkzLTg0OWYtM2QwMjE0NDc3ZDZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknuvl6UmUhA7C5lY9lZ0ND+l9WMdl3p4iwaj
AVgLdFxzF/+rUyBbQx7QzTHL4ojAuH5XFi3B86YZmhewjIaob7RIm63gA7WZkVm7
CKoz3A6+6HdnWM4PTFd6Ow72c6w0KOLousPuoUqOj5O3kntrrDPyHr35GGN9sSeA
DnKNCMJ2hJTrTpgCXBgtkg0zwfwjy5cb2slxBppgrr5tBfZIcvTq0c/29EZpUnIM
I/TSZwLycQB7qBo3olHauG3NRxOufpsESf0FiRi51VFpX/Hip5ZuTyXpPNd3F+0d
89X3t80zPlW+eJWGVDQF9IkWGCBpdR8CwHOvCvjLVDFAfSTvZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJLwUCAxZLZlnCFykxRBNRsvFf0OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZjBmOTIwODItMzg1MS0z
MjMxLThmZmQtN2IzNWM0ZTU1NDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAECBrbVGsUHMgCZHBsl3zTkLUne1TpVvUCYCShhoLwL1l7bMh7S0Vpib
Oo+S19FZF79TGqE3Z+C1wHtuXrez6QrJ5VKUIca3KjmmddjRfi6sS8uwgja3I154
EGMyTDBoUBgA1GRcG0UM02E6pyKI0BrymKCIusEMsX8eQln3pLcLbL6oHlC1CfOK
orwUbz/UkLyxpsVd893OOIZV+a3jUD5faooeF3hbJMZA+yW0qdt12cofXSlvCJw6
b9+f/E2NTlH9s/bedDtVpBLkVhp+MoDhd7TwsUyolyhNmsQn2qbHTjKRXrY8SPVU
O0VI0BLEPts1gPAp7vOatbPbVnp30Ws=
-----END CERTIFICATE-----
Generated at Wed Aug 6 05:29:01 2025 by rpki-client