Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f2834b82-6315-3762-95c7-85355f4206a7.roa
File:                     f2834b82-6315-3762-95c7-85355f4206a7.roa (raw, json)
Hash identifier:          272+aABSReG3jt9/nzina6py23x5gNHt9gzCHmuGhYw=
Subject key identifier:   5D:0D:77:17:D3:35:2B:A1:23:19:1F:39:41:CE:B2:C3:AE:72:A3:E6
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858499C59FF973DC676C3A348A840
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f2834b82-6315-3762-95c7-85355f4206a7.roa
Signing time:             Tue 22 Apr 2025 13:01:00 +0000
ROA not before:           Tue 22 Apr 2025 13:01:00 +0000
ROA not after:            Mon 21 Jul 2025 13:01:00 +0000
asID:                     397225
IP address blocks:        156.154.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9c:59:ff:97:3d:c6:76:c3:a3:48:a8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 22 13:01:00 2025 GMT
            Not After : Jul 21 13:01:00 2025 GMT
        Subject: CN=f8f102f1-dc33-4cd9-8324-719efc97f5f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7b:f3:35:8c:07:c9:12:90:77:c6:67:ed:58:
                    41:da:90:4a:61:db:f3:5a:a5:b8:b8:8b:fb:1d:8d:
                    3f:82:80:22:4a:f4:1d:b2:cc:a3:4d:16:03:82:3e:
                    0e:a7:d3:69:b5:bd:e7:ed:58:21:ae:c3:34:03:72:
                    3f:7b:2d:ed:f4:69:62:9a:4b:ed:0a:98:95:64:e7:
                    53:b9:05:fa:45:f6:3e:96:71:77:e3:eb:49:62:f4:
                    ed:b8:53:25:8c:54:84:84:61:14:34:3e:c1:89:0a:
                    9f:bb:78:d6:89:75:3a:48:6e:6c:00:ff:60:fc:be:
                    f2:68:a2:d0:7b:47:0f:22:64:a0:fa:3f:f9:ea:92:
                    5d:64:59:77:84:b2:09:9c:77:00:05:3d:15:4d:04:
                    e3:9e:46:20:cf:1a:5e:29:a5:cf:fe:59:5d:1c:e1:
                    a0:9f:0e:33:de:51:74:b6:7d:db:8c:f1:77:70:d5:
                    a3:8b:3b:16:c5:6e:d4:22:8b:a5:5e:af:72:73:07:
                    60:97:48:f9:4d:62:2a:f5:eb:67:e0:15:a1:6f:fb:
                    0a:f5:f4:4f:19:96:c9:d9:79:14:61:f8:51:32:ca:
                    65:eb:57:35:66:ab:fc:03:68:43:a6:df:96:c3:bb:
                    b1:db:4f:75:f2:b9:1c:2b:1e:17:2c:29:95:40:95:
                    5b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:0D:77:17:D3:35:2B:A1:23:19:1F:39:41:CE:B2:C3:AE:72:A3:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f2834b82-6315-3762-95c7-85355f4206a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:84:32:7a:5d:4c:fd:4a:fb:e6:a2:31:15:0d:ed:6a:4b:22:
         52:9f:e0:9a:a4:f8:1d:fc:6d:b6:1a:a9:19:54:a6:b5:d5:37:
         e5:61:2e:39:44:06:2c:19:45:4f:c4:38:23:9a:3d:aa:2c:36:
         51:2e:8a:b3:45:28:cf:a3:62:3a:f2:01:7c:43:8f:1a:1f:38:
         89:be:e2:25:23:4e:fa:54:7e:56:53:c5:af:21:bf:a5:5e:3c:
         9d:a4:e2:52:48:55:41:62:57:1f:3c:99:30:b2:c1:2b:93:22:
         d4:5e:96:5b:c8:82:61:20:5a:7a:88:f5:fd:40:8d:72:34:a9:
         c5:a3:ec:d6:e2:ed:15:97:2d:12:f2:f3:64:f1:63:b2:0f:7c:
         61:19:b0:02:7a:06:eb:19:30:cd:c8:39:dc:e2:ac:a7:e8:3b:
         78:9c:fd:7e:db:5a:e0:e4:99:e2:32:3c:d6:3f:b7:21:94:f1:
         79:0e:0e:64:1e:94:24:77:24:88:8a:7e:25:4f:15:45:83:42:
         b1:24:78:3a:b4:98:87:db:96:4c:27:c8:59:d9:08:97:38:bf:
         b4:64:b8:82:a3:8b:6b:66:82:9d:90:4f:55:65:ba:85:58:3c:
         94:32:01:52:7f:28:68:1d:c5:c1:30:64:c1:39:fc:28:d2:0f:
         f0:bc:45:33
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcWf+XPcZ2w6NIqEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDQyMjEzMDEwMFoXDTI1MDcyMTEzMDEwMFowLzEtMCsGA1UEAxMk
ZjhmMTAyZjEtZGMzMy00Y2Q5LTgzMjQtNzE5ZWZjOTdmNWY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnvzNYwHyRKQd8Zn7VhB2pBKYdvzWqW4uIv7
HY0/goAiSvQdssyjTRYDgj4Op9Nptb3n7VghrsM0A3I/ey3t9GlimkvtCpiVZOdT
uQX6RfY+lnF34+tJYvTtuFMljFSEhGEUND7BiQqfu3jWiXU6SG5sAP9g/L7yaKLQ
e0cPImSg+j/56pJdZFl3hLIJnHcABT0VTQTjnkYgzxpeKaXP/lldHOGgnw4z3lF0
tn3bjPF3cNWjizsWxW7UIoulXq9ycwdgl0j5TWIq9etn4BWhb/sK9fRPGZbJ2XkU
YfhRMspl61c1Zqv8A2hDpt+Ww7ux20918rkcKx4XLCmVQJVbRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF0NdxfTNSuhIxkfOUHOssOucqPmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZjI4MzRiODItNjMxNS0z
NzYyLTk1YzctODUzNTVmNDIwNmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAImEMnpdTP1K++aiMRUN7WpLIlKf4Jqk+B38bbYaqRlUprXVN+VhLjlE
BiwZRU/EOCOaPaosNlEuirNFKM+jYjryAXxDjxofOIm+4iUjTvpUflZTxa8hv6Ve
PJ2k4lJIVUFiVx88mTCywSuTItRellvIgmEgWnqI9f1AjXI0qcWj7Nbi7RWXLRLy
82TxY7IPfGEZsAJ6BusZMM3IOdzirKfoO3ic/X7bWuDkmeIyPNY/tyGU8XkODmQe
lCR3JIiKfiVPFUWDQrEkeDq0mIfblkwnyFnZCJc4v7RkuIKji2tmgp2QT1VluoVY
PJQyAVJ/KGgdxcEwZME5/CjSD/C8RTM=
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:30:01 2025 by rpki-client